Some Classes and Functions from 2012.09.09

[karliky]

[cortexio]

Anyone here knows the chCharacter->offsets to see if it contains loot or not?

[JuJuBoSc]

Anyone here knows the chCharacter->offsets to see if it contains loot or not?

vTable 0x14 in the LootClientContext (0xC23820)

[cortexio]

vTable 0x14 in the LootClientContext (0xC23820)

Thanks now i know where to look ^^ but i'm kinda new to this reversing, i tried to look up
values but didn't seem to find something loot related, i tried 0xC23820+0x14 & 0xC23820->0x14
& 0xC23820->0->0x14 (Cheat engine). I also opened up reclass, but i have no idea what i'm looking
for, screenshot:

http://puu.sh/2yqMV/15dce55fa8

But to be sure, i can't use ClientContext to find this value right? i have to look for
lootContext wich should be, 0xC23820 like you said. Or am i totally wrong?

[JuJuBoSc]

It's a function call, not memory reading

[cortexio]

ooooh , ok, thanks! You rock

[cortexio]

I've done some reading, and this stuff is really confusing,
Someone in this thread said that vtables are mostly located at 0x0, 2e vtable 0x1, 3rd....
Is this right?

My second question is how do you call these functions and know what they return?
Do you have to like create a c++ dll injection that has a function like this?

typedef int func(void);
func* f = (func*)0xC23820->0x0->0x14;
int i = f();

or

#define ADDRESS 0xC23820->0x0->0x14
bool hookedFunction(int agentId)
{
agentId=..some id;
return originalFunction(agentId);
}

BOOL APIENTRY DllMain(HANDLE hModule, DWORD dwReason, LPVOID lpReserved)
{
switch (dwReason)
{
case DLL_PROCESS_ATTACH:
originalFunction = (bool(__cdecl*)(int))DetourFunction((PBYTE)ADDRESS, (PBYTE)hookedFunction);
break;
}
return TRUE;
}

if so, the address of the function will be 0xC23820->0x0->0x14 ?

[JuJuBoSc]

I've done some reading, and this stuff is really confusing,
Someone in this thread said that vtables are mostly located at 0x0, 2e vtable 0x1, 3rd....
Is this right?

My second question is how do you call these functions and know what they return?
Do you have to like create a c++ dll injection that has a function like this?

or


if so, the address of the function will be 0xC23820->0x0->0x14 ?

0xC23820 is the vtable function pointer, u can get it from the object, vtable is always stored at 0x0 in an object, just call it and pass the object reference in ECX register

[Jennifer613]

If anyone feels like uploading the previous build (15502), that would be really kind. Seems I never made a backup...

[JuJuBoSc]

Here you go : https://mega.co.nz/#!JxQHyRCC!QEWC7g...vPJ_zohGUcS5A4

[cortexio]

here's on image from where i'm stuck at with functions.
Sry for all the questions, but i've never done this before. And everything else seems to work so far
for my bot. i even made an auto updater for the Context adresses,, movement,, tp,, all works.
I hope you can help me out here (i feel kinda bad for asking)
https://i.imgur.com/002iPUA.jpg

[JuJuBoSc]

according to the mov eax, [ecx+0xDC], why don't you just read ChCliCharacter+0xDC instead of calling the function in this case ?

[cortexio]

Hmm that's something i didn't know interesting, thanks, that already solves a small part towards functions,
i still don't know how to call functions,, but i think i found another solution

[Deathsnacks]

If anyone feels like uploading the previous build (15502), that would be really kind. Seems I never made a backup...

If you forgot to backup a recent build (about 2-3 months is what I can tell before the file expires), you can pull it off from http://assetcdn.101.arenanetworks.com/program/101/1/0/<patchversion>.

You need a cookie to download it though, and you can get the patch version by comparing the exe version at Guild Wars 2 Server Status - Version History.

[cortexio]

Hey i'm looking for pointers to see used / max inventory slots.
i could use the Inventory class, but i doesn't show the difference between an open slot & slot that's out of your bag range,
they both return 0.

Or something really useful i could use, would be some information on how to destroy or sell an item,

Here is some information for the current gw2 version, incase someone needs that (probably not)

ChInventory = 0x16c,
-Gold = 0x50,
-ItemArr = 0x6c,
-ItemArrCount = 0x74, //i think 0x70 is the same, not sure
--Amount = 0x4c,
--ItemStats = 0x1c,
---ItemStatsRarity = 0x40,
---ItemStatsReqlevl = 0x4c,
---ItemStatsItemtype = 0x20,
---ItemStatsWeapontype = 0x60,

Edit: the only way i can get my max inv. slots is by doing a pattern scan on some line, hook that line so i can read the register adr. and that adr + pointer 0x40 = my max inv. slots, the only problem is that your inventory in game must be open. Because when it's closed, it doesn't exist anymore.

Edit: now i don't need the hook anymore, already found a static address with some pointers that show me the same thing, but still the same problem i can only read it when my inventory is open in-game. I guesse there must be a bagArr or something?