[3.1.2] Method for finding camera angle?

[Tanaris4]

Is this possible? Ultimately I would like to be able to take an object's position in the gameworld, the camera's rotation, the player's placement in that world and actually determine where the object is on screen w/respect to the mouse.

(so you don't have to scan the screen for an object, instead you plug variables into an equation and get the bounding box where the object is on screen)

I'm thinking specifically for clicking a mouse bobber

Thanks!

[schlumpf]

http://www.mmowned.com/forums/wow-me...ordinates.html may help you.

[Tanaris4]

/hides

ty

[Tanaris4]

Can anyone explain how to actually find the Camera Info offset w/in memory? I'm specifically trying to find it for mac on 3.1.2.

http://dump.ifeedr.com/WoWBinaries/W...ft%203.1.2.zip

Thanks!

[lanman92]

I think you can find it perfectly fine on the mac through the GetCamera function. I don't remember how you find it atm, but ill edit back with info.

EDIT: Here you go. The code will be referenced through any of the camera functions. Look at FlipCameraYaw() in IDA and see the function it calls after it verifies that there is a param. The function returns [[0x11780b4]+0x7834] in eax.

[Tanaris4]

I actually found it through memory scanning and looking @ this thread: http://www.mmowned.com/forums/wow-me...ordinates.html

Found the first pointer to be 0x139FE44. So to get to the camera info:
[[[0x139FE44] + 0x782C]]

I'm confused what yours above actually points to though - as that seems to be very different info. (and 0x11780b4's value is actually 0, so I don't think that's a static)

[jjaa]

I actually found it through memory scanning and looking @ this thread: http://www.mmowned.com/forums/wow-me...ordinates.html

Found the first pointer to be 0x139FE44. So to get to the camera info:
[[[0x139FE44] + 0x782C]]

I'm confused what yours above actually points to though - as that seems to be very different info. (and 0x11780b4's value is actually 0, so I don't think that's a static)

It points to the Camera Structure.

Camera - WoW.Dev Wiki (warning may be outdated)

[Tanaris4]

It points to the Camera Structure.

Camera - WoW.Dev Wiki (warning may be outdated)

What's odd though is 0x11780b4 literally points to 0x0. There is no data in that memory location.

What object does the camera info in http://www.mmowned.com/forums/wow-me...ordinates.html
point to? I would have thought the same object type.

Because the offset I listed contains data which is basically what is in the above thread. Screenshot:

And 0x1FE5AC00 is the GUID

[jjaa]

What's odd though is 0x11780b4 literally points to 0x0. There is no data in that memory location.
<SINP>

0x11780b4 is for PC.

PC:
.text:006C3740 GetCamera       proc near               ; CODE XREF: sub_403080+FFp
.text:006C3740                                         ; sub_4053E0+B9p ...
.text:006C3740                 mov     eax, dword_11780B4
.text:006C3745                 test    eax, eax
.text:006C3747                 jz      short loc_6C3750
.text:006C3749                 mov     eax, [eax+7834h]
.text:006C374F                 retn
.text:006C3750 ; ---------------------------------------------------------------------------
.text:006C3750
.text:006C3750 loc_6C3750:                             ; CODE XREF: GetCamera+7j
.text:006C3750                 xor     eax, eax
.text:006C3752                 retn
.text:006C3752 GetCamera       endp

PC: [[0x11780b4]+0x7834] 
 
Mac:
__text:0016CE66 GetCamera       proc near               ; CODE XREF: sub_E23E+16Dp
__text:0016CE66                                         ; sub_E5B4+D0p ...
__text:0016CE66                 push    ebp
__text:0016CE67                 mov     ebp, esp
__text:0016CE69                 mov     eax, ds:dword_139FE44
__text:0016CE6E                 test    eax, eax
__text:0016CE70                 jz      short loc_16CE78
__text:0016CE72                 mov     eax, [eax+782Ch]
__text:0016CE78
__text:0016CE78 loc_16CE78:                             ; CODE XREF: GetCamera+Aj
__text:0016CE78                 pop     ebp
__text:0016CE79                 retn
__text:0016CE79 GetCamera       endp

Mac: [[0x139FE44]+0x782C]

Edit: This is what i would assume:

[Tanaris4]

Ahh duh - I'm an idiot and didn't put [mac] in the title - my fault

Thanks :-) I can see a nice fishing bot w/o scanning the screen now! w00t

[jjaa]

Ahh duh - I'm an idiot and didn't put [mac] in the title - my fault

Thanks :-) I can see a nice fishing bot w/o scanning the screen now! w00t

You could reverse the CTM structure on Mac.
Then use the same concept as http://www.mmowned.com/forums/wow-me...m-fishing.html. Loop through the objects find the fishing bobbers GUID then use CTM and a hardware action.

[namreeb]

You could reverse the CTM structure on Mac.
Then use the same concept as http://www.mmowned.com/forums/wow-me...m-fishing.html. Loop through the objects find the fishing bobbers GUID then use CTM and a hardware action.

Or if you want to use the VMT (didn't read if you're injecting or not) you can check the bobber object's animation state, and when it toggles, call the interact function.

[Tanaris4]

Or if you want to use the VMT (didn't read if you're injecting or not) you can check the bobber object's animation state, and when it toggles, call the interact function.

yea would love to do that :/ But we can't inject unfortunately (that i'm aware of), read/write memory only

[Tanaris4]

Edit: figured it out

[Tanaris4]

Anyone have any ideas as to why my x and y values aren't coming out correctly? X is nearly always around 503 and Y around 54. Even when the bobber is in a completely different place. I'm not entirely sure why this is the case. Example x,y,z values being passed:
<Position X: -4656.22 Y: -1084.75 Z: 500.46>

tanaris4 private pastebin - collaborative debugging tool

And to make sure i'm thinking of this correctly:
fScreenX is the width of our WoW window
fScreenY is the height of our WoW window


Example camera data:


Edit: I'm in windowed mode if this makes any difference