Diab

The map coordinates is a representation of the cells on the drawn map. the map is made of a "puzzle" which has a specific width and height and is made up from images with a specific pixel width/height typically 256 so the real width is puzzle width * pixel width (usually 256) real height is puzzle height * pixel height (should the same as pixel width) map width is real width / cell width (64) map height is real height / cell height (32) you need to also take into account the fact that the image is a scaled down version of the map scaleX = imageWidth / realWidth scaleY = imageHeight / realHeight there is more calculations that need to be done to convert from map coordinates to a coordinate on a minimap image but those should be all the variables you will need

Well you need to find a place to hook and construct your button and add it's handlers and then find where the in-game gui is being rendered and hook it to also render your button every frame. You need to be able to reverse the exe and find the needed function calls.

The gui in co uses mfc to initialize and handle window based operations like left mouse button down or up etc... and it uses the game's rendering engine to render the visible gui and usually uses Controls.Ani to find the actual files.

most large maps are around 900x900 and so 900 x 900 x 8 bytes is around 6.5 mbs.

Your best bet to getting around all the indirection is to hardware breakpoint the input and output buffers, or look for a known constant or an api file like CreateFileA.

In the latest patch tq uses Threeway to encrypt and decrypt most of their client ini files , the 2537 is the seed for the old crypto but it's not used anymore.

You shouldn't be using GetLastError unless you know there is an error (i.e ReadProcessMemory returns false). WriteProcessMemory and ReadProcessMemory expect a buffer/pointer to be passed in, and casting the variable to LPCVOID doesn't turn it into a pointer, use the & sign instead (i.e &width). when you are using OpenProcess on the same process you are injected to you should use the handle from GetCurrentProcess and cast it to DWORD and use GetCurrentProcess when asked for a handle to read or write memory.