[3.1.3] Player Action Bar Statics

[Nokia5800]

How do you expect to call a function in another process without ASM??? Jesus christ. Did you think before you said that? Asm, injecting bytes, injecting a ****ing DLL. It's all the same.

Lol at you. Just like my bot uses interact without injecting ASM or a DLL, Theres no need for it, just two simple GUID and ID replacements and your done.

and CastSpellbyID can be done with the same concept, replace a SPell ID. Just dont have the address for it. Thank for the info Apoc, Is that the one I can use for calling it without injecting ASM?

[amadmonk]

Lol at you. Just like my bot uses interact without injecting ASM or a DLL, Theres no need for it, just two simple GUID and ID replacements and your done.

and CastSpellbyID can be done with the same concept, replace a SPell ID. Just dont have the address for it. Thank for the info Apoc, Is that the one I can use for calling it without injecting ASM?

You can call a few functions in WoW just by CreateRemoteThread (which technically isn't injecting ASM or a DLL, although it's kinda stretching the point). Ultimately, however, most of the "interesting" functions require at least a minimal level of injection (of some sort) -- whether it's to set the object manager, to hook LUA, or whatever.

[Nokia5800]

Any suggestions on how to call CastSpellByID with only MemoryWrite?

The reason I asked unkowned if he still had the address is because the function is in his old open source bot... here it is..

Func CASTSPELLBYID($_SID1)
	_MEMORYWRITE($OFFSACTIONBARINDEX + 4, $DLLINFORMATION, $_SID1, "short")
	_MEMORYWRITE($OFFSACTIONBARINDEX + 6, $DLLINFORMATION, 0, "short")
	ConsoleWrite(Hex($OFFSACTIONBARINDEX + 4) & @CRLF)
EndFunc

If anyone knows the '$OFFSACTIONBARINDEX' address please share , thank you.

[jjaa]

Any suggestions on how to call CastSpellByID with only MemoryWrite?

The reason I asked unkowned if he still had the address is because the function is in his old open source bot... here it is..

Func CASTSPELLBYID($_SID1)
    _MEMORYWRITE($OFFSACTIONBARINDEX + 4, $DLLINFORMATION, $_SID1, "short")
    _MEMORYWRITE($OFFSACTIONBARINDEX + 6, $DLLINFORMATION, 0, "short")
    ConsoleWrite(Hex($OFFSACTIONBARINDEX + 4) & @CRLF)
EndFunc

If anyone knows the '$OFFSACTIONBARINDEX' address please share , thank you.

function ActionButtonDown(id)
    local button;
    if ( BonusActionBarFrame:IsShown() ) then
        button = getglobal("BonusActionButton"..id);
    else
        button = getglobal("ActionButton"..id);
    end
    if ( button:GetButtonState() == "NORMAL" ) then
        button:SetButtonState("PUSHED");
    end
end

function ActionButtonUp(id)
    local button;
    if ( BonusActionBarFrame:IsShown() ) then
        button = getglobal("BonusActionButton"..id);
    else
        button = getglobal("ActionButton"..id);
    end
    if ( button:GetButtonState() == "PUSHED" ) then
        button:SetButtonState("NORMAL");
        SecureActionButton_OnClick(button, "LeftButton");
        ActionButton_UpdateState(button);
    end
end

So i suggest you reverse:
0x00827460 -> Lua__s_SetButtonState

[amadmonk]

Ahh... I was wondering how on earth you could hope to cast a spell with a memwrite... toggling an action button; that makes sense.

[Nokia5800]

Ahh... I was wondering how on earth you could hope to cast a spell with a memwrite... toggling an action button; that makes sense.

You can cast a spell by its ID... Look above at the code i posted, its a function from unkowned old open source bot, but the address used in that source is from 3.0.8, and its in the variable section so I cant directly update it >< Unless anyone knows a way to do it... Im guessing since I cant get ingame with the 3.0.8 it just shows up as..

ADD BYTE PTR DS:[EAX],AL

[jjaa]

Ahh... I was wondering how on earth you could hope to cast a spell with a memwrite... toggling an action button; that makes sense.

I assume he's writing the spell ID to the ActionButton struct then triggering the action button. O.o

You can cast a spell by its ID... Look above at the code i posted, its a function from unkowned old open source bot, but the address used in that source is from 3.0.8, and its in the variable section so I cant directly update it >< Unless anyone knows a way to do it... Im guessing since I cant get ingame with the 3.0.8 it just shows up as..

ADD BYTE PTR DS:[EAX],AL

First of all your expecting someone to update an offset and your not even supplying the original. Second requesting updated offsets is against the forum rules.

1. Requests;
   
   1. You may request information. Requesting code or compiled software is not allowed (Exception - Posting it by choice is acceptable).
   2. Requests may only be made if you have followed rule 1.1, and 1.2.
   3. DO NOT REQUEST UPDATED OFFSETS!
   
   

[lanman92]

Can't you search for a certain spellid on an action bar, and then change it to another spell and search again? It's not that hard. As for triggering the action, lrn2lua.

[amadmonk]

I assume he's writing the spell ID to the ActionButton struct then triggering the action button. O.o

It's actually fairly clever. I was confused by what I thought was the assertion that you could perform any action by writes only (which is just false -- only some actions are going to read from actively scanned memory; I guess action bar state is one!)

[Nokia5800]

It's actually fairly clever. I was confused by what I thought was the assertion that you could perform any action by writes only (which is just false -- only some actions are going to read from actively scanned memory; I guess action bar state is one!)

amadmonk , I dont think anyone is questioning your knowledge, I can see you know what your talking about, and as do I.. But Im simply asking if someone has it or not. Simple as that.

Thank you for your help so far. Also, the address would have been updated by now if it wasnt a variable and I didnt have to get in game on a 3.0.8 client (since I dont have any of my Dev PC;s downgraded. Below is the original 3.0.8 Address..

Global $OFFSSPELLINDEX = 0x010A5044

Thats for 3.0.8 binary. If any has a downgraded patch , for 3.0.8 it should be a piece of cake to update.

[Shynd]

So download the 3.0.8 binary from the sticky, open it up in OLLYDBG, right-click anywhere on the disassemble window and choose Find -> Constant, enter in your 3.0.8 address and hit Search (or whatever). It will come up with a few places in game code where that address is referenced; choose one of those and create a pattern for it (there's an OLLYDBG plugin called MakeSig, search Game Deception for it if you'd rather not make a pattern by hand). Use some sort of code or program to apply that pattern to the current build of WoW. HOLY SHIT YOU HAVE AN UPDATED ADDRESS, ARE ABLE TO CONTRIBUTE TO THIS FORUM BY SHARING IT, AND THE ADDED ACCOMPLISHMENT OF DOING IT YOUR ****ING SELF.

[Cypher]

So download the 3.0.8 binary from the sticky, open it up in OLLYDBG, right-click anywhere on the disassemble window and choose Find -> Constant, enter in your 3.0.8 address and hit Search (or whatever). It will come up with a few places in game code where that address is referenced; choose one of those and create a pattern for it (there's an OLLYDBG plugin called MakeSig, search Game Deception for it if you'd rather not make a pattern by hand). Use some sort of code or program to apply that pattern to the current build of WoW. HOLY SHIT YOU HAVE AN UPDATED ADDRESS, ARE ABLE TO CONTRIBUTE TO THIS FORUM BY SHARING IT, AND THE ADDED ACCOMPLISHMENT OF DOING IT YOUR ****ING SELF.

Never gonna happen.