Memory VB starting point

[nvthiele]

Oky, Hi all I am trying to understand memory offsets and pointers

starting off whit this guide guide kind how i handle objects

but in vb

 Dim Baseaddress As Integer
        Dim GuidOffset As Integer = 48
        Dim NextObjectOffset As Integer = 60
        Dim TypeOffset As Integer = 20
        Dim XPositionOffset As Integer = 2000
        Dim YPositionOffset As Integer = 2004
        Dim ZPositionOffset As Integer = 2008
        Dim RotationOffset As Integer = 2012
        Dim DescriptorFieldsOffset As Integer = 8
        Dim datatarget As Byte() = New Byte(3) {}



lstHistory.Items.Add("Start")
Process.EnterDebugMode()

        'Get wow Process


 Dim proc As Process() = Process.GetProcessesByName("WoW")
Dim wowproc As System.Diagnostics.Process = proc(0)

        ' get baseadres

BaseAddress = wowproc.MainModule.BaseAddress.ToInt32


        ' som debug info

lstHistory.Items.Add("BaseAddress :" & BaseAddress)

       ' read Baseaddress  + DescriptorFieldsOffset  
       
mem.Peek(wowproc, Baseaddress + DescriptorFieldsOffset , datatarget)

' debug datatarget {Length=4} = (0)4,(1)0,(2)0,(3)0

so data output off datatarget = 4 :confused:

but now i dont know what to do next
( yes i know wane do many tings but how)


example getting the xyz memory locations

i know you need to find NpcObject and or PlayerObject but how do i get the UnitFields

tnx

[SKU]

I guess by 'baseaddress' you mean the pointer to your player object?
Then your line:

BaseAddress = wowproc.MainModule.BaseAddress.ToInt32

makes no sense. Your 'wowproc' is a 'Process' object, so I guess you get a baseaddress of your process' mainmodule.

[[[0x127F13C] + 0x30] + 0x28] = playerbase (static)

So you'll have to mem.peek 3 times in order to get the playerbase.

Edit: Also, I have no clue of VB, but does the peek method really take a process as an argument?

[nvthiele]

' [[[0x127F13C] + 0x30] + 0x28] = playerbase (static)

 
mem.Peek(wowproc, 19394876, memread1)
Dim temp1 As Integer = System.BitConverter.ToInt32(memread1, 0)

mem.Peek(wowproc, temp1 + 48, memread2)
Dim temp2 As Integer = System.BitConverter.ToInt32(memread2, 0)


mem.Peek(wowproc, temp2 + 40, playerbase )

so you mean to do this ?

[SKU]

Yup should do it.

[Robske]

So ugly :/

Once you have the base adress of your local player object, you can access it's 'descriptor fields' by following the pointer at base+0x8, from there you can add the offset corresponding the field you wish to get.

For example, if UNIT_FIELD_HEALTH is offset at 0x17 (not sure, just as an example) you can access it by reading from [[base + 0x8]+0x17*4] this only works for objects typed as Units (3) or Players (4) obviously.

The reason why we multiply the offset by 4 is because the values are aligned per 4 bytes in memory. Some enums use the multiplied value, some don't. The enum by Cypher in the sticky does not use it. So you'll have to multiply by 4 if you wish to use his.

[nvthiele]

oky it trying to understand.

Dim XPositionOffset As Integer = 2000 ' 0x7D0

mem.Peek(wowproc, playerbase + XPositionOffset, datax)


        x.Text = "X: " + func.btf(data, 0)
        y.Text = "Y: " + func.btf(data, 4)
        z.Text = "Z: " + func.btf(data, 8)
        r.Text = "R: " + func.btr(data, 12)


Public Shared Function btf(ByVal data, ByVal start)
        Dim i As String
        i = System.BitConverter.ToSingle(data, start)
        Return i
End Function

[jbrauman]

[Off topic]
Woot someone reading my tutorial =]

[Clain]

Ermmmm if your converting it to a single the variable "i" shouldn't be a string... and theres no need to typecast so you might want to change that