[WoW][4.2.0.14333] Info Dump Thread

[LordJZ]

Are you sure that ( 0xF645 ) is a compressed char enum ? Could not even catch it yet . Maybe if you post a full packet i can help in some way. Note that some old logger versions randomly dump more then required data for compressed packets( Reg contains full packet size ). Just run a un-zip over it to get rid of the extra data.
Btw, anyone willing to give me a modified exe ? In fact i'm willing to pay to update arcemu to a sandbox state.

LordJZ opcode list in copy paste friendly format ( sorry for spamming ):
...

Yes I'm sure. To get it, simply create 10 characters on a single realm. And no, there are no extra data in the tail of the packet, you can see it in the header EA 09 00 00 => 0x9EA => 2538 while packet length is 2553. Decompressed data is OK, no anomalies (except for that uber-stupid blizzard data shuffling)
Here's a full packet dump: http://paste2.org/p/1496363
And decompressed data dump: http://paste2.org/p/1496365 (with UTF8 cyrillic decoding enabled)

Also I don't get it why everyone uses hex for opcodes :\

[Steveiwonder]

Anyone able to confirm 0x993F98 is IsInInstance()? = 1 when outside and then random number when inside. Maybe the inside code/id is consistent with a DBC id of some kind.

[guizmows]

AnimKitBoneSetAlias	 = 	0xD57D24,
AnimKitBoneSet	 = 	0xD57D08,
AnimKit	 = 	0xD57CEC,
AnimKitConfig	 = 	0xD57D40,
AnimKitConfigBoneSet	 = 	0xD57D5C,
AnimKitPriority	 = 	0xD57D78,
AnimKitSegment	 = 	0xD57D94,
AnimReplacement	 = 	0xD57DB0,
AnimReplacementSet	 = 	0xD57DCC,
BannedAddOns	 = 	0xD57EC8,
Cfg_Categories	 = 	0xD57F70,
Cfg_Configs	 = 	0xD57F8C,
CharBaseInfo	 = 	0xD57FA8,
CharHairGeosets	 = 	0xD57FC4,
CharSections	 = 	0xD57FE0,
CharStartOutfit	 = 	0xD57FFC,
CharacterFacialHairStyles	 = 	0xD58034,
ChatProfanity	 = 	0xD5806C,
ChrClasses	 = 	0xD58088,
ChrRaces	 = 	0xD580C0,
CreatureDisplayInfo	 = 	0xD58130,
CreatureDisplayInfoExtra	 = 	0xD58114,
CreatureFamily	 = 	0xD5814C,
CreatureModelData	 = 	0xD58184,
FactionGroup	 = 	0xD58408,
FactionTemplate	 = 	0xD58440,
FileData	 = 	0xD5845C,
GameTips	 = 	0xD584E8,
GlueScreenEmote	 = 	0xD58520,
GuildColorBackground	 = 	0xD58788,
GuildColorBorder	 = 	0xD587A4,
GuildColorEmblem	 = 	0xD587C0,
HelmetGeosetVisData	 = 	0xD587F8,
ItemClass	 = 	0xD588D8,
ItemDisplayInfo	 = 	0xD589F0,
ItemSubClass	 = 	0xD58B2C,
ItemVisuals	 = 	0xD58B64,
ItemVisualEffects	 = 	0xD58B48,
LoadingScreens	 = 	0xD58C98,
Movie	 = 	0xD58D94,
MovieFileData	 = 	0xD58DB0,
MovieVariation	 = 	0xD58DCC,
NameGen	 = 	0xD58DE8,
NamesProfanity	 = 	0xD58E3C,
NamesReserved	 = 	0xD58E58,
ObjectEffect	 = 	0xD59B78,
ObjectEffectGroup	 = 	0xD59B94,
ObjectEffectModifier	 = 	0xD59BB0,
ObjectEffectPackage	 = 	0xD59BCC,
ObjectEffectPackageElem	 = 	0xD59BE8,
ParticleColor	 = 	0xD58EE4,
Resistances	 = 	0xD59050,
SoundFilter	 = 	0xD59C04,
SoundFilterElem	 = 	0xD59C20,
SpamMessages	 = 	0xD5929C,
SpellEffect	 = 	0xD59440,
SpellVisualEffectName	 = 	0xD59718,
SpellVisualKit	 = 	0xD59734,
SoundProviderPreferences	 = 	0xD59280,
AnimationData	 = 	0xD36C84,
AreaTable	 = 	0xD36CA0,
LightIntBand	 = 	0xD36D2C,
LightParams	 = 	0xD36D64,
Map	 = 	0xD36DF0,
SoundEntriesAdvanced	 = 	0xD36E0C,
SoundEntries	 = 	0xD36E28,
Achievement	 = 	0xD57C98,
Achievement_Criteria	 = 	0xD57CB4,
Achievement_Category	 = 	0xD57CD0,
AreaGroup	 = 	0xD57DE8,
AreaPOI	 = 	0xD57E04,
AreaPOISortedWorldState	 = 	0xD57E20,
AreaAssignment	 = 	0xD57E3C,
AreaTrigger	 = 	0xD57E58,
ArmorLocation	 = 	0xD57E74,
AuctionHouse	 = 	0xD57E90,
BankBagSlotPrices	 = 	0xD57EAC,
BarberShopStyle	 = 	0xD57EE4,
BattlemasterList	 = 	0xD57F00,
CameraMode	 = 	0xD57F1C,
CameraShakes	 = 	0xD57F38,
CastableRaidBuffs	 = 	0xD57F54,
CharTitles	 = 	0xD58018,
ChatChannels	 = 	0xD58050,
ChrClassesXPowerTypes	 = 	0xD580A4,
CinematicCamera	 = 	0xD580DC,
CinematicSequences	 = 	0xD580F8,
CreatureImmunities	 = 	0xD58168,
CreatureMovementInfo	 = 	0xD581A0,
CreatureSoundData	 = 	0xD581BC,
CreatureSpellData	 = 	0xD581D8,
CreatureType	 = 	0xD581F4,
CurrencyTypes	 = 	0xD58210,
CurrencyCategory	 = 	0xD5822C,
DanceMoves	 = 	0xD58248,
DeathThudLookups	 = 	0xD58264,
DestructibleModelData	 = 	0xD582B8,
DungeonEncounter	 = 	0xD582D4,
DungeonMap	 = 	0xD582F0,
DungeonMapChunk	 = 	0xD5830C,
DurabilityCosts	 = 	0xD58328,
DurabilityQuality	 = 	0xD58344,
Emotes	 = 	0xD58360,
EmotesTextData	 = 	0xD5837C,
EmotesTextSound	 = 	0xD58398,
EmotesText	 = 	0xD583B4,
EnvironmentalDamage	 = 	0xD583D0,
Exhaustion	 = 	0xD583EC,
Faction	 = 	0xD58424,
FootstepTerrainLookup	 = 	0xD58478,
GameObjectArtKit	 = 	0xD58494,
GameObjectDisplayInfo	 = 	0xD584B0,
GameTables	 = 	0xD584CC,
GemProperties	 = 	0xD58504,
GlyphProperties	 = 	0xD5853C,
GlyphSlot	 = 	0xD58558,
GMSurveyAnswers	 = 	0xD58574,
GMSurveyCurrentSurvey	 = 	0xD58590,
GMSurveyQuestions	 = 	0xD585AC,
GMSurveySurveys	 = 	0xD585C8,
GMTicketCategory	 = 	0xD585E4,
gtBarberShopCostBase	 = 	0xD58600,
gtCombatRatings	 = 	0xD5861C,
gtChanceToMeleeCrit	 = 	0xD58638,
gtChanceToMeleeCritBase	 = 	0xD58654,
gtChanceToSpellCrit	 = 	0xD58670,
gtChanceToSpellCritBase	 = 	0xD5868C,
gtNPCManaCostScaler	 = 	0xD586A8,
gtOCTBaseHPByClass	 = 	0xD586C4,
gtOCTBaseMPByClass	 = 	0xD586E0,
gtOCTClassCombatRatingScalar	 = 	0xD586FC,
gtOCTHpPerStamina	 = 	0xD58718,
gtOCTRegenMP	 = 	0xD58734,
gtRegenMPPerSpt	 = 	0xD58750,
gtSpellScaling	 = 	0xD5876C,
GuildPerkSpells	 = 	0xD587DC,
HolidayDescriptions	 = 	0xD58814,
HolidayNames	 = 	0xD58830,
Holidays	 = 	0xD5884C,
ItemArmorQuality	 = 	0xD58884,
ItemArmorTotal	 = 	0xD58868,
ItemArmorShield	 = 	0xD588A0,
ItemBagFamily	 = 	0xD588BC,
ItemDamageAmmo	 = 	0xD588F4,
ItemDamageOneHand	 = 	0xD58910,
ItemDamageOneHandCaster	 = 	0xD5892C,
ItemDamageRanged	 = 	0xD58948,
ItemDamageThrown	 = 	0xD58964,
ItemDamageTwoHand	 = 	0xD58980,
ItemDamageTwoHandCaster	 = 	0xD5899C,
ItemDamageWand	 = 	0xD589B8,
ItemDisenchantLoot	 = 	0xD589D4,
ItemGroupSounds	 = 	0xD58A14,
ItemLimitCategory	 = 	0xD58A30,
ItemNameDescription	 = 	0xD58A4C,
ItemPetFood	 = 	0xD58A68,
ItemPurchaseGroup	 = 	0xD58A84,
ItemRandomProperties	 = 	0xD58AA0,
ItemRandomSuffix	 = 	0xD58ABC,
ItemReforge	 = 	0xD58AD8,
ItemSet	 = 	0xD58AF4,
ItemSubClassMask	 = 	0xD58B10,
JournalEncounterCreature	 = 	0xD58B80,
JournalEncounterItem	 = 	0xD58B9C,
JournalEncounter	 = 	0xD58BB8,
JournalEncounterSection	 = 	0xD58BD4,
JournalInstance	 = 	0xD58BF0,
LanguageWords	 = 	0xD58C0C,
Languages	 = 	0xD58C28,
LfgDungeonExpansion	 = 	0xD58C44,
LfgDungeonGroup	 = 	0xD58C60,
LfgDungeons	 = 	0xD58C7C,
LoadingScreenTaxiSplines	 = 	0xD58CB4,
Lock	 = 	0xD58CD0,
LockType	 = 	0xD58CEC,
MailTemplate	 = 	0xD58D08,
MapDifficulty	 = 	0xD58D24,
Material	 = 	0xD58D40,
MountCapability	 = 	0xD58D5C,
MountType	 = 	0xD58D78,
NPCSounds	 = 	0xD58E04,
NumTalentsAtLevel	 = 	0xD58E20,
OverrideSpellData	 = 	0xD58E74,
Package	 = 	0xD58E90,
PageTextMaterial	 = 	0xD58EAC,
PaperDollItemFrame	 = 	0xD58EC8,
Phase	 = 	0xD58F00,
PhaseXPhaseGroup	 = 	0xD58F38,
PlayerCondition	 = 	0xD58F54,
PowerDisplay	 = 	0xD58F70,
PvpDifficulty	 = 	0xD58F8C,
QuestFactionReward	 = 	0xD58FA8,
QuestInfo	 = 	0xD58FC4,
QuestPOIBlob	 = 	0xD58FE0,
QuestPOIPoint	 = 	0xD58FFC,
QuestSort	 = 	0xD59018,
QuestXP	 = 	0xD59034,
ResearchBranch	 = 	0xD590A4,
ResearchField	 = 	0xD59088,
ResearchProject	 = 	0xD590C0,
ResearchSite	 = 	0xD590DC,
RandPropPoints	 = 	0xD5906C,
ScalingStatDistribution	 = 	0xD590F8,
ScalingStatValues	 = 	0xD59114,
ScreenEffect	 = 	0xD59130,
ScreenLocation	 = 	0xD5914C,
ServerMessages	 = 	0xD59168,
SkillLineAbility	 = 	0xD59184,
SkillLineAbilitySortedSpell	 = 	0xD591A0,
SkillLineCategory	 = 	0xD591BC,
SkillLine	 = 	0xD591D8,
SkillRaceClassInfo	 = 	0xD591F4,
SkillTiers	 = 	0xD59210,
SoundAmbience	 = 	0xD5922C,
SoundAmbienceFlavor	 = 	0xD59248,
SoundEmitters	 = 	0xD59264,
SpellActivationOverlay	 = 	0xD592B8,
SpellAuraOptions	 = 	0xD592D4,
SpellAuraRestrictions	 = 	0xD592F0,
SpellCastingRequirements	 = 	0xD5930C,
SpellCastTimes	 = 	0xD59328,
SpellCategories	 = 	0xD59344,
SpellCategory	 = 	0xD59360,
SpellChainEffects	 = 	0xD5937C,
SpellClassOptions	 = 	0xD59398,
SpellCooldowns	 = 	0xD593B4,
Spell	 = 	0xD59654,
SpellDescriptionVariables	 = 	0xD593D0,
SpellDifficulty	 = 	0xD593EC,
SpellDispelType	 = 	0xD59408,
SpellDuration	 = 	0xD59424,
SpellEffectCameraShakes	 = 	0xD5945C,
SpellEquippedItems	 = 	0xD59478,
SpellFlyout	 = 	0xD59494,
SpellFlyoutItem	 = 	0xD594B0,
SpellFocusObject	 = 	0xD594CC,
SpellIcon	 = 	0xD594E8,
SpellInterrupts	 = 	0xD59504,
SpellItemEnchantment	 = 	0xD59520,
SpellItemEnchantmentCondition	 = 	0xD5953C,
SpellLevels	 = 	0xD59558,
SpellMechanic	 = 	0xD59574,
SpellMissile	 = 	0xD59590,
SpellMissileMotion	 = 	0xD595AC,
SpellRadius	 = 	0xD595E4,
SpellRange	 = 	0xD59600,
SpellPower	 = 	0xD595C8,
SpellReagents	 = 	0xD59638,
SpellRuneCost	 = 	0xD5961C,
SpellScaling	 = 	0xD59670,
SpellShapeshift	 = 	0xD5968C,
SpellShapeshiftForm	 = 	0xD596A8,
SpellSpecialUnitEffect	 = 	0xD596C4,
SpellTargetRestrictions	 = 	0xD596E0,
SpellTotems	 = 	0xD596FC,
SpellVisual	 = 	0xD59788,
SpellVisualKitAreaModel	 = 	0xD59750,
SpellVisualKitModelAttach	 = 	0xD5976C,
Stationery	 = 	0xD597A4,
StringLookups	 = 	0xD597C0,
SummonProperties	 = 	0xD597DC,
Talent	 = 	0xD597F8,
TalentTab	 = 	0xD59814,
TalentTreePrimarySpells	 = 	0xD59830,
TaxiNodes	 = 	0xD5984C,
TaxiPathNode	 = 	0xD59868,
TaxiPath	 = 	0xD59884,
TerrainTypeSounds	 = 	0xD598A0,
TotemCategory	 = 	0xD598BC,
TransportAnimation	 = 	0xD598D8,
TransportPhysics	 = 	0xD598F4,
TransportRotation	 = 	0xD59910,
UnitBloodLevels	 = 	0xD5992C,
UnitBlood	 = 	0xD59948,
UnitPowerBar	 = 	0xD59964,
Vehicle	 = 	0xD59980,
VehicleSeat	 = 	0xD5999C,
VehicleUIIndicator	 = 	0xD599B8,
VehicleUIIndSeat	 = 	0xD599D4,
VocalUISounds	 = 	0xD599F0,
World_PVP_Area	 = 	0xD59A0C,
WeaponImpactSounds	 = 	0xD59A28,
WeaponSwingSounds2	 = 	0xD59A44,
WorldMapArea	 = 	0xD59A60,
WorldMapContinent	 = 	0xD59A7C,
WorldMapOverlay	 = 	0xD59A98,
WorldMapTransforms	 = 	0xD59AB4,
WorldSafeLocs	 = 	0xD59AD0,
WorldStateUI	 = 	0xD59AEC,
ZoneIntroMusicTable	 = 	0xD59B08,
ZoneMusic	 = 	0xD59B24,
WorldStateZoneSounds	 = 	0xD59B40,
WorldChunkSounds	 = 	0xD59B5C,
PhaseShiftZoneSounds	 = 	0xD58F1C,
FootprintTextures	 = 	0xD36CBC,
GroundEffectDoodad	 = 	0xD36CD8,
GroundEffectTexture	 = 	0xD36CF4,
Light	 = 	0xD36D10,
LightFloatBand	 = 	0xD36D48,
LightSkybox	 = 	0xD36D80,
LiquidMaterial	 = 	0xD36D9C,
LiquidObject	 = 	0xD36DB8,
LiquidType	 = 	0xD36DD4,
SoundEntriesFallbacks	 = 	0xD36E44,
TerrainMaterial	 = 	0xD36E60,
TerrainType	 = 	0xD36E7C,
Weather	 = 	0xD36EB4,
WMOAreaTable	 = 	0xD36ED0,
ZoneLight	 = 	0xD36EEC,
ZoneLightPoint	 = 	0xD36F08,

[CptJesus]

Focus Target GUID (Rebased): 0xA961A8

[Nikentic]

Are there any CTM_GUID or so? Can't seem to find any about it.

[JabbaTheCunt]

public const uint RUNETYPE = 0xAF4CD4;
public const uint RUNESTATE = 0xAF4D20;

[jozsab1]

{SERVER} Packet: (0x5341) SMSG_MOVE_OTHER_PLAYER PacketSize = 32 TimeStamp = 6679011
1C 00 51 00 00 - Byte[0] and byte[2] has 6 bits = number of bytes for guid. 
00 maybe g[7] - 1 ? maybe g[4] - 1?
40 some flag sent by other client on pos 7
B2 4D 9B 3F orientation
2B maybe g[0] + 1?
0E DD 03 06 - time in MS for lag compensation
AA maybe g[1] - 1 ?
50 maybe g[2] - 1 ?
81 59 09 C6 x
1C AE D1 C3 y
6B 52 AF 42 z
05 maybe g[3] + 1 ?
00 maybe g[7] - 1 ? maybe g[4] - 1?

you can de-obfuscate once you read the guid like this :
uint8 *guid_bytes = (uint8 *)&guid;
for( uint32 i=0;i<8;i++)
	if( guid_bytes[i] != 0 )
	{
		if( guid_bytes[i] & 0xFE == 1 )
			guid_bytes[i] -= 1;
		else
		guid_bytes[i] += 1;
	}

Would appreciate if someone would use for example hexray to get the guidmask generation code.
These kinda obfuscations are everywhere and seem to be function based hardcoded.

[NitroGlycerine]

Arena opponents:

$Arena1GUID = $WowBase + 0xAF4E00
$Arena2GUID = $WowBase + 0xAF4E08
$Arena3GUID = $WowBase + 0xAF4E10
$Arena4GUID = $WowBase + 0xAF4E18
$Arena5GUID = $WowBase + 0xAF4E20


It seems like something odd is going on with the aura stack count: $AURA_STACK = 0xE. I can no longer retrieve the correct stack count. (It's either 0 when you don't have the buff, or 85 for any other stack count.) Anyone has a clue?

[pyromaniac119]

It seems like something odd is going on with the aura stack count: $AURA_STACK = 0xE. I can no longer retrieve the correct stack count. (It's either 0 when you don't have the buff, or 85 for any other stack count.) Anyone has a clue?

Try 0xF. Seems to work from what testing I've done.

[NitroGlycerine]

Try 0xF. Seems to work from what testing I've done.

Confirmed. Works! Thanks!

[Nightblizzard]

Anyone able to confirm 0x993F98 is IsInInstance()? = 1 when outside and then random number when inside. Maybe the inside code/id is consistent with a DBC id of some kind.

It's the map id.
0 = Kalimdor
1 = Azeroth (eastern kingdoms, but internally its called azeroth)
530 = Outland
and so on. You can see all of them in map.dbc (or just search for them here on mmowned, there are plenty of lists).

[sitnspinlock]

increased byte length scan on 0x004DC720. is now 0x11 bytes.

also new scan at 0x2032d for 0x6 bytes

offsets are rebased.

[Jens]

increased byte length scan on 0x004DC720. is now 0x11 bytes.

also new scan at 0x2032d for 0x6 bytes

offsets are rebased.

I get the scan at 0x004DC720 to be 12 bytes long, and I my scanner does not pick up the supposed scan at 0x2032D, which realm and region was this?

Dumped by 'WardenMonitor by Jens'
Scanned for: 00:28:40
Scans: 47


Bytes: 75 0A 8B 45 10 C7 40 04 00 
Length: 9
Address: 0x004DCBCD


Bytes: 50 8B 43 0C 51 50 
Length: 6
Address: 0x000885B7


Bytes: CC CC CC CC CC CC 
Length: 6
Address: 0x000011EA


Bytes: 75 18 68 48 01 00 00 
Length: 7
Address: 0x001BE1DD


Bytes: 81 66 44 3F FF 8F FF F3 0F 11 5E 5C 
Length: 12
Address: 0x006003DD


Bytes: 6A 00 E8 36 27 
Length: 5
Address: 0x000041C3


Bytes: 55 8B EC 51 53 56 8B 75 08 
Length: 9
Address: 0x006DD7C0


Bytes: 74 1C 8B 06 
Length: 4
Address: 0x001D0881


Bytes: 0F 85 D7 01 00 00 8D 55 DC 52 8D 45 CC 
Length: 13
Address: 0x00320DCF


Bytes: 75 16 68 38 02 00 00 
Length: 7
Address: 0x004DFF27


Bytes: 74 65 83 F9 18 77 60 
Length: 7
Address: 0x004B1902


Bytes: 74 13 8B 4D 18 
Length: 5
Address: 0x0037551D


Bytes: 55 8B EC B8 94 42 00 00 E8 83 13 B3 
Length: 12
Address: 0x004DC720


Bytes: 74 21 8B 4D 18 
Length: 5
Address: 0x00375535


Bytes: 8B C1 33 C9 89 08 89 48 04 89 48 
Length: 11
Address: 0x0014A300


Bytes: 5F 5E C6 03 00 5B 8B 
Length: 7
Address: 0x00424C34


Bytes: 74 65 D9 41 5C 
Length: 5
Address: 0x005FA926


Bytes: 74 28 8B 4D 18 
Length: 5
Address: 0x003754BD


Bytes: 2F 54 9A 41 D7 A3 70 3E 
Length: 8
Address: 0x0077E9B8


Bytes: 8B 81 C4 07 00 00 25 00 00 80 
Length: 10
Address: 0x001AB560


Bytes: 55 8B EC 8B 45 0C 8B 4D 08 
Length: 9
Address: 0x006E3780


Bytes: 55 8B EC 53 8B 5D 10 8B 43 
Length: 9
Address: 0x00087770


Bytes: E8 3B A4 FF FF 89 
Length: 6
Address: 0x0000D970


Bytes: 74 1D 8B 4D 18 
Length: 5
Address: 0x003754ED


Bytes: 74 26 A9 00 00 10 00 
Length: 7
Address: 0x001F9AEA


Bytes: 55 8B EC 81 EC 18 0E 00 00 6A 0A E8 
Length: 12
Address: 0x004DFDE0


Bytes: 7C 47 05 C0 
Length: 4
Address: 0x004AC164


Bytes: 72 3B 8B 4D 18 
Length: 5
Address: 0x004D7A2E


Bytes: D8 93 FE C0 48 8C 11 C1 
Length: 8
Address: 0x007E0370


Bytes: 77 34 FF 24 85 
Length: 5
Address: 0x004C49A5


Bytes: E8 25 92 3E 00 
Length: 5
Address: 0x000041D6


Bytes: FF 
Length: 1
Address: 0x0014AE51


Bytes: 50 51 8B CB 
Length: 4
Address: 0x0017754D


Bytes: 5E 5D C2 08 00 
Length: 5
Address: 0x000C274A


Bytes: 55 8B EC 8B 45 0C 83 EC 08 
Length: 9
Address: 0x00168930


Bytes: 8B 4D 10 89 0D 
Length: 5
Address: 0x00425A4E


Bytes: 55 8B EC 83 EC 18 56 8B F1 
Length: 9
Address: 0x00086110


Bytes: 75 3E F6 46 48 
Length: 5
Address: 0x005FB290


Bytes: 83 C4 0C 5E 5D C3 CC 
Length: 7
Address: 0x0002B174


Bytes: 74 2A F6 40 34 
Length: 5
Address: 0x0030E958


Bytes: 55 8B EC 83 EC 08 8B 45 08 53 
Length: 10
Address: 0x00176E10


Bytes: 55 8B EC 83 EC 08 53 56 8B 
Length: 9
Address: 0x00087AC0


Bytes: E8 1B CE FF FF E8 
Length: 6
Address: 0x000041E0


Bytes: 01 BE 80 00 00 00 8B CE E8 D0 A5 
Length: 11
Address: 0x001FDAC3


Bytes: E8 59 B1 2E 00 8B F0 
Length: 7
Address: 0x00177572


Bytes: 04 00 00 00 01 00 00 00 
Length: 8
Address: 0x008CBED8


Bytes: BB 8D 24 3F D4 D0 31 3E 
Length: 8
Address: 0x00784750

[sitnspinlock]

It depends on how long you monitor it for those to actually show. I used a trial account on Muradin US, both came up well after 45 minutes.

It will first show 0x004DC720 as 0xC (12) bytes but if you give it some time it will be scanned again with 0x11 (17) bytes.

[Nightblizzard]

0x995370 = CTM GUID
rabased.

Edit:
Or CTM + 0x20 if you prefer it that way.