[Request] Guide To Finding What WPE Values Do

[Frosthowl]

Hello, atm ive been interested in using WPE to hack private servers in order to get a basic idea of memory editing. However, I do not understand how people are finding what values to change. Could somone make a guide on how to find out what number offsets handle what? I really want to be able to try to do new things with WPE. Thanks. I have read the WPE Pro Coding guide already.

[object]

Hello, atm ive been interested in using WPE to hack private servers in order to get a basic idea of memory editing. However, I do not understand how people are finding what values to change. Could somone make a guide on how to find out what number offsets handle what? I really want to be able to try to do new things with WPE. Thanks. I have read the WPE Pro Coding guide already.

Oh, you mean like this?
Shynd’s WoW Modification Journal

There are about a dozen of threads addressing offset values, and how to derive them. If you're looking for something more than this, I hope you have deep pockets...

There's a really good book that explains how to RE Software. I'll leave you to finding out the title. Read all of the threads in this section and you will find it (it's pointed out about 9 times). You may learn a thing or two while trying to find it.

Edit:
Better idea: Go get a copy of IDA Pro. Install it. Play with it. Write an application and use IDA to break it apart. When you have done this, you can move on to WoW.

[Shynd]

WPE has (almost) nothing to do with memory editing; it intercepts network packets. Read a little more if you can't even discern the difference between the two.

[Frosthowl]

I didnt think it was the same thing, but Ive seen threads here in the past and out of all the forums, it seemed the most "fitting". Besides, to me, this seems like a good way to then get into memory editing by building a little knowledge on how the server sends information to the client. Im still aware that I have alot to read up on though.

Thanks object, ill check there.

[arigity]

step 1. log packets
step 2. use knowledge of what your during to figure out their relation in the packet
step 3. use knowledge of how the server works to find a useful way to modify the packet. (or just use common sense which is an excellent substitute)

[Frosthowl]

about that, for some reason, my wpe wont sniff packets...any ideas why?

[object]

Besides, to me, this [WPE] seems like a good way to then get into memory editing by building a little knowledge on how the server sends information to the client.

That's like saying you're going to know how a bank's financial system works by inspecting all of the mail it sends out. After looking at a ton of letters, you can probably tell what a letter is without opening it. Ultimately, this will not get you anything useful unless you can intelligently manipulate the contents.

What is your goal? It sounds like you're just probing aimlessly? Why don't you start with describing what you would like to do.

[arigity]

run both wow and wpe as admin if your on a vista.

[Frosthowl]

Well, to be honest, I am probing aimlessly to some extent. My friend and I are trying to figure out how we can use WPE to learn spells that arnt supposed to be learned for our class. After that, I was gonna get into real memory editing. =/

I planned to start by trying to manipulate a few packets that are sent when you learn a new spell from certain trainers and skills.

Ah, wasnt running WoW as admin, ill give that a try.

[object]

Ok... that's going to be a problem for you.

When you logout for the night, and log in the next day, you keep the spells that you've learned, right? That is because it is stored on the server.

If you think about how they would have designed the "Player" Class, it may look something like this:

CWoW_Object
---->CWoW_Unit
-------->CWoW_Player
------------->CWoW_PlayerRace
----------------->CWoW_PlayerClass

The CWoW_PlayerClass has a base class of CWoW_Race. Thats because every Race has it's certain available Player Classes. (i.e. You can't have an Tauren Rogue, or an Undead Shaman.)

For each PlayerClass, you have a SpellClass object. This class defines what spells you can perform (and what you can learn).
The spells are enumerated:

enum MAGE_CLASS_SPELLS
{
....
PYROBLAST
...
}

enum ROGUE_CLASS_SPELLS
{
...
BLIND
...
}

... so if you say you've leared Pyroblast on your Rogue, you've only "enabled" Blind. You can send all of the packets you like... you can't change how it is designed.

[Frosthowl]

Well, Ive been able to switch spells from classes, ie, I learn pyroblast as a rogue, and still used the effect, however, once I turned wpe off, the spell didnt stay. Also, yes, I realize they are stored on the server.

[Cypher]

Ok... that's going to be a problem for you.

When you logout for the night, and log in the next day, you keep the spells that you've learned, right? That is because it is stored on the server.

If you think about how they would have designed the "Player" Class, it may look something like this:

CWoW_Object
---->CWoW_Unit
-------->CWoW_Player
------------->CWoW_PlayerRace
----------------->CWoW_PlayerClass

The CWoW_PlayerClass has a base class of CWoW_Race. Thats because every Race has it's certain available Player Classes. (i.e. You can't have an Tauren Rogue, or an Undead Shaman.)

For each PlayerClass, you have a SpellClass object. This class defines what spells you can perform (and what you can learn).
The spells are enumerated:

enum MAGE_CLASS_SPELLS
{
....
PYROBLAST
...
}

enum ROGUE_CLASS_SPELLS
{
...
BLIND
...
}

... so if you say you've leared Pyroblast on your Rogue, you've only "enabled" Blind. You can send all of the packets you like... you can't change how it is designed.

The class structure is:

CGObject_C
->CGItem_C
->CGContainer_C
->CGDynamicObject_C
->CGGameObject_C
->CGCorpse_C
->CGUnit_C
-->CGPlayer_C
--->CGLocalPlayer_C

[object]

Pretty close for guessing...