Help getting GameState offsets

[saber388]

Hello, I've been trying to figure out how to get GameState offsets by using IDA on older clients (2.4.3 and 3.3.5a), but I can't seem to find the answer.

By following this video series I got all offsets but GameState for 2.4.3 client.

Seems like aUsagePlaysou_1 doesn't exist. That string also doesn't exist when checking on 3.3.5a client. So I was wondering if anyone has any idea on how to get GameState offsets without aUsagePlaysou_1 ?

[RobertoSageto]

TLDR: try a BinDiff from 3.3.3 to 3.3.5 if you can - I copied these offsets from the AutoIt source code from DynoBot:

;0 out of game, 1 in game
Local $Mem_Relogger_Ingame_Pointer = 0xC4EB2A
Local $Mem_Relogger_State_Pointer = 0xC8F338

;Is <> 0 when not connected
Local $Mem_Relogger_Login_Pointer = 0xA9C5C4

Someone posted the full source which includes many additional offsets and other possibly useful code here on the forums, just search for it,

If that doesn't work for you, my only additional ideas would be:

In 1.12 I know the game state offset, if I'm thinking of the same one you are, is read as a byte and has values 0 or 1. 0 is not in game, eg, loading screen or prior, and 1 is in game.
Continent ID pointer/offset is 255 at loading screen.
Usually I use CE to research and verify my offsets so that might give you a starting point.

OR you could take the 1.12 offset $wow_ptr_game_state = 0x74B424 (rebased, 0xB4B424 with base address already included) and then use a BinDiff type tool in IDA to see if that might help. Not sure if you would have any luck between major versions BinDiffing like that but its worth a shot. Sorry, if I had any experience at all with IDA I'm sure I could be of more assistance but unfortunately I cannot afford it.