[Share] Patterns for Pattern Finder

[SwInY]

Hey Guys,

Just thought id try to get a thread started on Patterns for WoW.

Just for the people who havnt got all the addresses from the update thread of wow and would like to help out and contribute also share.

The Pattern Finder ( offset Finder ) can be found in one of the threads, ill get the link soon when i find it.


Default

  <Patterns>
    <Pattern>
      <offsetName>clientConnection</offsetName>
      <pattern>00 00 00 00 89 82 00 46 00 00 89 81 08 00 00 00</pattern>
      <mask>????xx?xxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
      <!-- int or int64 or string or float -->
    </Pattern>
    <Pattern>
      <offsetName>targetGuid</offsetName>
      <pattern>8B 45 08 8B 35 FF FF FF FF 8B 3D FF FF FF FF 6A</pattern>
      <mask>xxxxx????xx????x</mask>
      <offsetLocation>5</offsetLocation>
      <type>int64</type>
    </Pattern>
    <Pattern>
      <offsetName>lastTargetGuid</offsetName>
      <pattern>8B 45 08 8B 35 FF FF FF FF 8B 3D FF FF FF FF 6A</pattern>
      <mask>xxxxx????xx????x</mask>
      <offsetLocation>11</offsetLocation>
      <type>int64</type>
    </Pattern>
    <Pattern>
      <offsetName>cmd</offsetName>
      <pattern>55 8b ec 53 56 8b 75 08 57 BF ff ff ff ff</pattern>
      <mask>xxxxxxxxxx????</mask>
      <offsetLocation>10</offsetLocation>
      <type>string</type>
    </Pattern>
    <Pattern>
      <offsetName>DX_DEVICE</offsetName>
      <pattern>00 00 00 00 8B 01 8B 80 A0 00 00 00 52 8B 55 08</pattern>
      <mask>????xxxxxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>gameState</offsetName>
      <pattern>00 00 00 00 0F 84 64 01 00 00 8B 86 FC 00 00 00</pattern>
      <mask>????xxxxxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>isLoadingOrConnecting</offsetName>
      <pattern>00 00 00 00 0B 00 00 00 8B 45 08 F7 D8 1B C0 83</pattern>
      <mask>????xxxxxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>continentId</offsetName>
      <pattern>00 00 00 00 81 EC 1C 01 00 00 53 56 68 00 00 00</pattern>
      <mask>????xxxxxxxxx???</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>lastWowErrorMessage</offsetName>
      <pattern>B8 00 00 00 00 8D 95 68 F3 FF FF 83 C4 10 BE B7</pattern>
      <mask>x????xxxxxxxxxxx</mask>
      <offsetLocation>1</offsetLocation>
      <type>string</type>
    </Pattern>
    <Pattern>
      <offsetName>petGUID</offsetName>
      <pattern>00 00 00 00 8B 45 08 83 EC 08 53 8B 5D 0C 56 3B</pattern>
      <mask>????xxxxxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int64</type>
    </Pattern>
    <Pattern>
      <offsetName>playerName</offsetName>
      <pattern>00 00 00 00 F7 D8 1B C0 25 00 00 00 01 C3 CC CC</pattern>
      <mask>????xxxxx???xxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>string</type>
    </Pattern>
    <Pattern>
      <offsetName>PlayerComboPoint</offsetName>
      <pattern>00 00 00 00 5D C3 55 8B EC 8B 45 08 85 C0 7C 0F</pattern>
      <mask>????xxxxxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>FACTION_START_INDEX</offsetName>
      <pattern>00 00 00 00 3B C1 7C 5E 3B 05 00 00 00 01 7F 56</pattern>
      <mask>????xxxxxx???xxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>FACTION_POINTER</offsetName>
      <pattern>00 00 00 00 8B 04 81 3B C3 74 47 8B 1D 00 00 00</pattern>
      <mask>????xxxxxxxxx???</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>FACTION_TOTAL</offsetName>
      <pattern>00 00 00 00 7F 56 2B C1 8B 0D 00 00 00 01 8B 04</pattern>
      <mask>????xxxxxx???xxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>startBar</offsetName>
      <pattern>00 00 00 00 85 C0 74 0E A9 00 00 00 F0 75 07 B8</pattern>
      <mask>????xxxxxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>nbBar</offsetName>
      <pattern>00 00 00 00 00 00 00 00 C7 05 00 00 00 01 00 00</pattern>
      <mask>????xxxxxx???xxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>baseBoxChat</offsetName>
      <pattern>00 00 00 00 75 1F 8B B6 44 02 00 00 8B 46 20 8B</pattern>
      <mask>????xxxxxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>statBoxChat</offsetName>
      <pattern>00 00 00 00 41 89 0D A8 00 00 01 83 F9 01 75 29</pattern>
      <mask>????xxxx??xxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>knownSpell</offsetName>
      <pattern>00 00 00 00 8B 04 82 8B 08 83 F9 01 74 E3 83 F9</pattern>
      <mask>????xxxxxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>nbSpell</offsetName>
      <pattern>00 00 00 00 0F 86 4E 01 00 00 56 53 57 E8 31 00</pattern>
      <mask>????xxxxxxxxxxx?</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>chatBufferStart</offsetName>
      <pattern>00 00 00 00 5D C3 CC CC CC CC CC CC CC CC CC CC</pattern>
      <mask>????xxxxxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>string</type>
    </Pattern>
    <Pattern>
      <offsetName>chatBufferPos</offsetName>
      <pattern>00 00 00 00 8B 45 08 03 C1 99 B9 3C 00 00 00 F7</pattern>
      <mask>????xxxxxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>CorpsePlayerX</offsetName>
      <pattern>00 00 00 00 0F 28 E2 F3 0F 59 65 B4 F3 0F 58 DC</pattern>
      <mask>????xxxxxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>nameStorePtr (offset + 0x8)</offsetName>
      <pattern>00 00 00 00 89 5D F8 89 5D FC E8 00 00 05 00 3B</pattern>
      <mask>????xxxxxxx??xxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>playerSelected</offsetName>
      <pattern>00 00 00 00 A3 00 00 00 01 B8 01 00 00 00 5D C3</pattern>
      <mask>????x???xxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>textTextBoxSelectedPtr</offsetName>
      <pattern>00 00 00 00 75 1F 8B B6 44 02 00 00 8B 46 20 8B</pattern>
      <mask>????xxxxxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>loginSelectedTextBoxId</offsetName>
      <pattern>00 00 00 00 41 89 0D 00 00 00 01 83 F9 01 75 29</pattern>
      <mask>????xxx???xxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>numberOfPlayer</offsetName>
      <pattern>00 00 00 00 7D 0E 69 C0 98 02 00 00 03 05 00 00</pattern>
      <mask>????xxxxxxxxxx??</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>isLoginPage</offsetName>
      <pattern>00 00 00 00 8B 01 8B 50 04 56 FF D2 8B 0D 00 00</pattern>
      <mask>????xxxxxxxxxx??</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>AutoLoot_Activate_Pointer</offsetName>
      <pattern>00 00 00 00 8B 41 30 50 8B CE E8 39 00 D4 FF E9</pattern>
      <mask>????xxxxxxxx?xxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>

    <Pattern>
      <offsetName>AutoSelfCast_Activate_Pointer</offsetName>
      <pattern>00 00 00 00 E8 00 00 00 FF 6A 00 6A 00 6A 00 6A</pattern>
      <mask>????x???xxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>AutoInteract_Activate_Pointer</offsetName>
      <pattern>00 00 00 00 83 C4 10 8B C6 39 7A 30 74 0E 83 8E</pattern>
      <mask>????xxxxxxxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>statPvp</offsetName>
      <pattern>00 00 00 00 89 1D 54 00 00 01 38 1D 98 00 00 01</pattern>
      <mask>????xxx??xxxx??x</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>pvpExitWindow</offsetName>
      <pattern>00 00 00 00 00 75 49 83 3D C0 00 00 01 04 74 40</pattern>
      <mask>????xxxxxx??xxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
    <Pattern>
      <offsetName>selectedBattleGroundID</offsetName>
      <pattern>00 00 00 00 8B 0D 7C 00 00 01 3B C1 7C 55 3B 05</pattern>
      <mask>????xxx??xxxxxxx</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
    </Pattern>
  </Patterns>

Patterns i made today

[ Cooldows ]

    <Pattern>
      <offsetName>GlobalCooldown</offsetName>
      <pattern>BE 6C F9 D8 00 BF 02 00 00 00 8B CE E8 E1 EC FF FF 83 C6 18 83 EF 01 75 F1</pattern>
      <mask>x????xxxxxxxx????xxxxxxxx</mask>
      <offsetLocation>1</offsetLocation>
      <type>int</type>
    </Pattern>

    <Pattern>
      <offsetName>PerformanceCounter</offsetName>
      <pattern>2B 15 AC 62 CB 00 83 3D 9C 62 CB 00 00 A3 AC 62 CB 00 74 13 8B 0D A0 62 CB 00</pattern>
      <mask>xx????xx????xx????xxxx????</mask>
      <offsetLocation>2</offsetLocation>
      <type>int</type>
    </Pattern>

I will be adding more/fixing in the upcoming time.
and would ask every one else to share there's.
making things easyer in the future!.

[Cypher]

This is actually a good idea imo. Posting patterns is far better than posting offsets each patch. Assuming of course that the list is kept 'updated' when the patterns break, but at least that should be a lot less work to maintain.

Maybe if there is interest from others (i.e. others who actually still hack WoW and have something to contribute) you can convince one of the mods to put together a sticky thread? *Looks at Apoc*

[RivaLfr]

Nice SwInY, +rep, I have added a link off this poste in my post: http://www.mmowned.com/forums/world-...t-finding.html .

[amadmonk]

I like the idea of a generic pattern finder, but a lot of my offsets aren't easily findable from code patterns (for instance, there are a LOT of mov eax, 0x10's around...); I find them via things like arc/block count or index into the inbound ref list or something. If we can figure out a slightly better algorithm for pattern matching than just code byte matching, I'm all aboard. I'm guessing that since anything more complex than sequences of code bytes takes static analysis, we're talking about an IDA plugin rather than a standalone app.

[Cypher]

I like the idea of a generic pattern finder, but a lot of my offsets aren't easily findable from code patterns (for instance, there are a LOT of mov eax, 0x10's around...); I find them via things like arc/block count or index into the inbound ref list or something. If we can figure out a slightly better algorithm for pattern matching than just code byte matching, I'm all aboard. I'm guessing that since anything more complex than sequences of code bytes takes static analysis, we're talking about an IDA plugin rather than a standalone app.

That sounds like a potentially fun community project.

[amadmonk]

I agree. And speaking of community projects, anyone wanna start a shared project account on GitHub? I'm not gonna use my paid account for community content :P

Edit: did a little reading on hosting Git repos, and it doesn't look too hard. Maybe we could get the MMOwned admins to host a repo for us? Maybe just the contributors, or something -- keep the riffraff out -- and only for "public" projects like the pattern matcher etc. This would help to avoid the leechers since we wouldn't have to host binaries.

[XTZGZoReX]

Why not just use GitHub? It has everything you need.

Privately hosted Git repos get as annoying as SVN repos - especially in this case, because the MMOwned servers aren't exactly known to be...stable.

[miceiken]

https://github.com/caytchen/cleanCor...r/cleanPattern
I suggest this scheme.

Patterns: https://github.com/caytchen/cleanCor...ore/Offsets.cs

[amadmonk]

Yeah you're right. I just set up a git repo on my colocated box, and to make it shared I'd have to give everyone SSH access (na' gun' happen...). So definitely what you said: GitHub is the way to go.

[namreeb]

Bobbysing included a format in WoWX that was rather versatile. Have you looked at that?

[EmilyStrange]

At the very least your client connection, targetGUID and lastTargetGUID patterns need updating. The three patterns below are for the latest 4.1.0 client as of April 27th, 2011.

    <Pattern>
      <offsetName>clientConnection</offsetName>
      <pattern>00 00 00 00 89 82 00 46 00 00 8b 15 00 00 00 00 89 90 00 00 00 00</pattern>
      <mask>????xx?xxxxx????xx????</mask>
      <offsetLocation>0</offsetLocation>
      <type>int</type>
      <!-- int or int64 or string or float -->
    </Pattern>
    <Pattern>
      <offsetName>targetGuid</offsetName>
      <pattern>8B 45 10 53 56 8B 35 FF FF FF FF 57 8B 3D FF FF FF FF 6A</pattern>
      <mask>xxxxxxx????xxx????x</mask>
      <offsetLocation>7</offsetLocation>
      <type>int64</type>
    </Pattern>
    <Pattern>
      <offsetName>lastTargetGuid</offsetName>
      <pattern>8B EC 83 EC 08 A1 A0 DD E1 00 8B 0D A4 DD E1 00 89 45 F8</pattern>
      <mask>xxxxxx????xx????xxx</mask>
      <offsetLocation>14</offsetLocation>
      <type>int64</type>
    </Pattern>