[WoW][3.2.2] Info Dump Thread

[nitrogrlie]

All right, you were right. I was just getting caught up in the fact that that function looked really small and wasn't getting called when I put a breakpoint in there through Olly. It's the immediate function it calls that does all the work.

Here is my VFTable by the way:

	[00] - 0x00660c30
	[01] - 0x0065d8e0
	[02] - 0x0065da10
	[03] - 0x0065bc60
	[04] - 0x0085ecf0
	[05] - 0x006add30
	[06] - 0x0068d1c0
	[07] - 0x0085ecf0
	[08] - 0x00698530
	[09] - 0x0065ed20
	[10] - 0x0065ec40
	[11] - 0x0065ec60
	[12] - 0x0065ec90
	[13] - 0x0065ecb0
	[14] - 0x00478c90
	[15] - 0x0065ecc0
	[16] - 0x00478cb0
	[17] - 0x00691670
	[18] - 0x006a1c30
	[19] - 0x00691690
	[20] - 0x006916c0
	[21] - 0x00691770
	[22] - 0x0068fee0
	[23] - 0x0069d390
	[24] - 0x0069d3c0
	[25] - 0x006a1cf0
	[26] - 0x006a1f50
	[27] - 0x006a3700
	[28] - 0x00690e80
	[29] - 0x00694970
	[30] - 0x006b45d0
	[31] - 0x0064ee70
	[32] - 0x006983c0
	[33] - 0x0065a0d0
	[34] - 0x00691a10
	[35] - 0x006b15f0
	[36] - 0x00684f50
	[37] - 0x008879a0
	[38] - 0x00692760
	[39] - 0x0065ec10
	[40] - 0x004b0240
	[41] - 0x006a8e80
	[42] - 0x0065ec20
	[43] - 0x006b2a00
	[44] - 0x006996a0
	[45] - 0x0069ad70
	[46] - 0x0069b140
	[47] - 0x0068daa0
	[48] - 0x0065ecf0
	[49] - 0x006a1930
	[50] - 0x0065ecd0
	[51] - 0x0065ec30
	[52] - 0x008879a0
	[53] - 0x006c2630
	[54] - 0x0068eb60
	[55] - 0x0068e080
	[56] - 0x006c2600
	[57] - 0x00684480
	[58] - 0x006c2610
	[59] - 0x00478d80
	[60] - 0x006b4e50
	[61] - 0x006b0fb0
	[62] - 0x006a2f20
	[63] - 0x00656490
	[64] - 0x00656500
	[65] - 0x00656540
	[66] - 0x006d9930
	[67] - 0x006d9b90
	[68] - 0x006d9c90
	[69] - 0x0064ebb0
	[70] - 0x00653ae0
	[71] - 0x00659d60
	[72] - 0x00656360
	[73] - 0x00659e60
	[74] - 0x0064f3c0
	[75] - 0x00655f40
	[76] - 0x00658460
	[77] - 0x0065a730
	[78] - 0x0064f6a0
	[79] - 0x0065ed10

[flo8464]

I failed to find the DirectX GetCurrentDevicepointer function.

Can please someone give me a hint?

[SKU]

Non generic/version dependant way:

LPDIRECT3DDEVICE9 pDevice = [[0x1254928] + 0x397C] // 3.2.2.10505

[Robske]

Non generic/version dependant way:

LPDIRECT3DDEVICE9 pDevice = [[0x1254928] + 0x397C] // 3.2.2.10505

Sig approved.

[flo8464]

Uhm, I was writing crap.
I am looking for the function which creates the device and returns the pointer.

(Exactly what you posted here, tried to find it to create a pattern for easier updating)

[ramey]

Uhm, I was writing crap.
I am looking for the function which creates the device and returns the pointer.

(Exactly what you posted here, tried to find it to create a pattern for easier updating)

Find somewhere where the code references that pointer, and then get a pattern to where it references it, and then simply do *reinterpret_cast<DWORD*>( 0xDEADBEAF ) and you'll have the pointer!

[flo8464]

Find somewhere where the code references that pointer, and then get a pattern to where it references it, and then simply do *reinterpret_cast<DWORD*>( 0xDEADBEAF ) and you'll have the pointer!

Well, I know that.
I was looking for the function which accesses the device pointer internally by [[0x1254928] + 0x397C]. I was looking myself by just going through the reference-to list for 0x1254928 but there were tons of results.

[pituxu]

I'm new in this fourm.
I'm trying this code but not working
Someone help me?
Thanks

autoit code:

#include <string.au3>

#include <NomadMemory.au3>
#include <EditConstants.au3>
#include <GUIConstantsEx.au3>
#include <WindowsConstants.au3>
#Region ### START GUI section ### Form=
$Form1 = GUICreate("Wowchatreader", 625, 445, 274, 278)
$Edit1 = GUICtrlCreateEdit("", 32, 24, 577, 273)
$affiche = GUICtrlCreateButton("READ!",32,400,50,25)
GuiSetState(@SW_SHOW)
#EndRegion ### END GUI section ###

SetPrivilege("SeDebugPrivilege", 1) ;p
testwow()
Global $process = _MEMORYOPEN($wowpid)
Global $offchat=0x10CCB58 ; 3.2.0 = 0x010CCB94
Global $nxtchat=0x17C0


While 1
    $nMsg = GUIGetMsg()
    Switch $nMsg
        Case $GUI_EVENT_CLOSE
            Exit
        Case $affiche
            GUICtrlSetData($Edit1,"")
            testwow()
            lischat()

    EndSwitch
WEnd

Func lischat()
    Local $debmess=$offchat
    Local $Canal
        for $x=0 to 59
            $next=$nxtchat*$x
            $mess = _MemoryRead($debmess + $next, $process, "char[1000]")
                                                if Not stringMid($mess, 1, 4) ="Type" then ExitLoop
            $Canal = _StringBetween($mess, "Type: [", "],")
            $Pseudo = _StringBetween($mess, "Name: [", "],")
            $Messag = _StringBetween($mess, "Text: [", "]")
            
            $chan=""
            Switch $Canal[0] ;if $Canal=17 then MsgBox(0,"","canal17")
                
                case 1
                    $chan="Say : "                
                Case 4
                    $chan="Guild : "
                Case 5
                    $chan="Guild-Officer : "
                Case 7
                    $chan="Whisper : "
                Case 9
                    $chan="To : "
                case 17
                    $chan="Public : "
            EndSwitch
                If $chan="" then $chan="Chat : "
                $lig=$x
                GUICtrlSetData($Edit1,$x & " :" & $chan & "[" & $Pseudo[0] & "] : " & $Messag[0] & @CRLF ,$lig+1)

        Next

EndFunc


Func testwow()
    Global $wowpid=ProcessExists("wow.exe")
    If $wowpid=0 Then
        MsgBox(0, "Infos", "World of warcraft is not running...")
        exit
    EndIf
EndFunc

[Apoc]

1) We're not here to debug your code.
2) This is the wrong thread to do so.
3) Read the rules for this section. (Enjoy your infractions)
4) If you don't understand what you're copy/pasting, don't bother posting here at all.

[SKU]

Well, I know that.
I was looking for the function which accesses the device pointer internally by [[0x1254928] + 0x397C]. I was looking myself by just going through the reference-to list for 0x1254928 but there were tons of results.

d3d9 private pastebin - collaborative debugging tool

[flo8464]

Very nice, thank you SKU.

[pituxu]

1) We're not here to debug your code.
2) This is the wrong thread to do so.
3) Read the rules for this section. (Enjoy your infractions)
4) If you don't understand what you're copy/pasting, don't bother posting here at all.

hi
1) I dont wont to debug the code, only the offset for it

2) Where can i post it?

3) I cant create a new one. (im new in the forum)

4) I understand what have copy/pasting, need some help to know the offset, if possible please.

[The-Guardian]

Lol i wish you luck cause your going to get your face dislocated by Apoc

[FenixTX2]

BroadCastEvent = 0x007d1150

[Nesox]

hi

4) I understand what have copy/pasting, need some help to know the offset, if possible please.

WTS: Better grammar skills, you buy plx plx?