I am looking for this function in the 6.0.2 x86 WoW Client OR a list of Warden scanned offsets for this version?
I'm not sure whether warden is updated and running already - wardenmon.com has no info for 6.0.2 19033.
I tried to find various asm/byte-segments via asm code-/byte array-search in CE without good results.
Maybe it changed alot because 6.0.2 is a mayor update...
Code:
WoW.exe x86 Version 5.4.8 Build 18414:
Wow.exe+8C9AA6 - 55 - push ebp
Wow.exe+8C9AA7 - 8B EC - mov ebp,esp // WARDEN SCAN 3 BYTES
Wow.exe+8C9AA9 - 8B 55 08 - mov edx,[ebp+08] // WARDEN SCAN
Wow.exe+8C9AAC - A1 105BD700 - mov eax,[Wow.exe+D65B10]
Wow.exe+8C9AB1 - 33 C9 - xor ecx,ecx
Wow.exe+8C9AB3 - 56 - push esi
Wow.exe+8C9AB4 - 39 0D A8BABC00 - cmp [Wow.exe+BBBAA8],ecx
Wow.exe+8C9ABA - 74 44 - je Wow.exe+8C9B00 // WARDEN SCAN 5 BYTES
Wow.exe+8C9ABC - 83 FA 22 - cmp edx,22 // WARDEN SCAN
Wow.exe+8C9ABF - 77 3F - ja Wow.exe+8C9B00
Wow.exe+8C9AC1 - 0FB6 B2 2E9B8D00 - movzx esi,byte ptr [edx+Wow.exe+8C9B2E]
Wow.exe+8C9AC8 - FF 24 B5 1E9B8D00 - jmp dword ptr [esi*4+Wow.exe+8C9B1E]
Wow.exe+8C9ACF - 33 C0 - xor eax,eax
Wow.exe+8C9AD1 - EB 20 - jmp Wow.exe+8C9AF3
Wow.exe+8C9AD3 - 3B C1 - cmp eax,ecx
Wow.exe+8C9AD5 - 74 41 - je Wow.exe+8C9B18
Wow.exe+8C9AD7 - 39 88 EC120000 - cmp [eax+000012EC],ecx
Wow.exe+8C9ADD - 75 21 - jne Wow.exe+8C9B00
Wow.exe+8C9ADF - 6A 02 - push 02
Wow.exe+8C9AE1 - 58 - pop eax
Wow.exe+8C9AE2 - EB 0F - jmp Wow.exe+8C9AF3
Wow.exe+8C9AE4 - 3B C1 - cmp eax,ecx
Wow.exe+8C9AE6 - 74 30 - je Wow.exe+8C9B18
Wow.exe+8C9AE8 - 39 88 F0120000 - cmp [eax+000012F0],ecx
Wow.exe+8C9AEE - 75 10 - jne Wow.exe+8C9B00
Wow.exe+8C9AF0 - 33 C0 - xor eax,eax
Wow.exe+8C9AF2 - 40 - inc eax
Wow.exe+8C9AF3 - 50 - push eax
Wow.exe+8C9AF4 - 51 - push ecx
Wow.exe+8C9AF5 - E8 95AEFFFF - call Wow.exe+8C498F
Wow.exe+8C9AFA - 59 - pop ecx
Wow.exe+8C9AFB - 59 - pop ecx
Wow.exe+8C9AFC - 33 C0 - xor eax,eax
Wow.exe+8C9AFE - EB 1B - jmp Wow.exe+8C9B1B
Wow.exe+8C9B00 - 3B C1 - cmp eax,ecx
Wow.exe+8C9B02 - 74 14 - je Wow.exe+8C9B18
...