[Wow][Mac][3.1.0] Finding g_currentConnection/object list

[Tanaris4]

So far I've been able to find some static variables, such as player name, account, realm, and chats. But I haven't been able to find g_currentConnection by any means.

Can anyone take a look in IDA and assist? Latest binary:
RapidShare: Easy Filehosting

For some reason searching for the player's health isn't working in 3.1.0 - and I have NO clue why. This is the method I used to get to the object list/player GUID before (just jump back an offset to find GUID, then find object list based on GUID).

And for those that would like the Mac offsets I've found so far:

Player Name Static: 0x01374028
Server Name Static: 0x01374706
Player Account :	 0x01374180

Chat : 			0x01374F9C

Thanks!

[mordok]

Just do a text search to find ObjectMgrClient one of the few result will turn you something like this (graph view) http://img11.imageshack.us/img11/9177/gclientconnectionandscu.jpg

There you will see g_clientConnection and s_curMgr.
You could also try my modified version of bobbysing/kynox IDA script. It will automatically dump those 2. Its posted In Cypher's 3.1.0 dump thread

[jjaa]

Just do a text search to find ObjectMgrClient one of the few result will turn you something like this (graph view) http://img11.imageshack.us/img11/9177/gclientconnectionandscu.jpg

There you will see g_clientConnection and s_curMgr.
You could also try my modified version of bobbysing/kynox IDA script. It will automatically dump those 2. Its posted In Cypher's 3.1.0 dump thread

Its not the same on mac.
Look at:

__text:000A3DEF                 mov     edx, ds:off_146E648
__text:000A3DF5                 mov     eax, [edx]
__text:000A3DF7                 mov     [eax+2C28h], esi

A complete guess based on the similarities between the PC and Mac clients. I cannot test it, as I do not have a Mac version of WoW.

[Tanaris4]

Thanks for taking a look at this guys - greatly appreciated it. Probably spent 3 hours yesterday trying to back-trace memory looking for the object list - and was worried they changed something in 3.1 (data structure etc...)

Went from player health, to unit field base, to playerbase. Then searched for the playerbase address throughout memory - Would get anywhere from 4-7 results, and none of them looked like a structured list.

Thanks again :-)

[Tanaris4]

Found the object list. It's located here: 0xAC6F08

Still curious how I could have gotten this in IDA tho :-)