Object guid hast an Negative Value

[hamburger12]

Hello! I want to get the name of the Players. for this i need the Guid. If i read the Targetguid it works Perfekt but if i read an Object +0x30 with __int64 i get an negative value and the Programm cant work anymore. What can be wrong with it smal source:

__int64 GUID1;
ReadProcessMemory(phandle,LPCVOID(curobj+0x30),&GUID1,sizeof(__int64),0);


//This works:
__int64 Tg;
ReadProcessMemory(phandle,LPCVOID(Tguid),&Tg,sizeof(__int64),0);

[XTZGZoReX]

I don't know if your offset is correct, but you're aware that GUIDs are unsigned int64s?

[Bananenbrot]

Check for the GUID being negative and turn the sign:

__int64 GUID1;
ReadProcessMemory(phandle,LPCVOID(curobj+0x30),&GUID1,sizeof(__int64),0);
if(GUID1 < 0LL)
    GUID1 = -GUID1;

Or even simplier:

__int64 GUID1;
ReadProcessMemory(phandle,LPCVOID(curobj+0x30),&GUID1,sizeof(__int64),0);
GUID1 = std::abs(GUID1);

std::abs() is an awesome function. Great performance and even less work required as you can clearly see. One line is better than 2 lines

hf with that

[MaiN]

Well hidden Troll? :O

[Flowerew]

lol epic thread

[Bananenbrot]

Well hidden Troll? :O

No, seriously. [/troll]

[hamburger12]

But the Vales are Difrent if i Read the Guid it begins with 18....... and if i read the guid from an objekt it is -17...... But i don't know why o.O

[mnbvc]

if its negative you have to use
if(GUID1 < 0LL)
GUID1 = -GUID1*2;

[eLaps]

But the Vales are Difrent if i Read the Guid it begins with 18....... and if i read the guid from an objekt it is -17...... But i don't know why o.O

As already said, it is unsigned.

[Flowerew]

you just have to set the bits right

#include <algorithm>
#include <stdio.h>
#include <inttypes.h>
#include <iostream>

int main(int argc, char **argv) {
  int64_t n = -34;
  int64_t p = 0;
  bool found = false;

  for (int i = 0; i < 64; i++) {
    if(!found && (n & (1LL << i))) {
      found = true;
      p |= (1LL << i);
    }

    if(found && !(n & (1LL << i))) {
      p |= 1LL << i;
    }
  }

  std::cout << "n: " << n << " p: " << p << std::endl;

  return 0;
}

[Xarg0]

try __uint64 for great justice

edit:
or use the awesome GUID union from the static info thread

[MaiN]

You have to ROT13 it. WoW encrypts all GUIDs so you can't use them, but we cracked it.

[Xarg0]

Actually it's Base64 encoded also

[Flowerew]

do i have to enable ring0?

[Apoc]

do i have to enable ring0?

Only if you're using proxies.