[WoW][4.3.0.15005] Info Dump Thread

[miceiken]

Rebased!

EnumVisibleObjects: 0x8E5B0
GetObjectByGuid: 0x8E8B0
GetLocalPlayerGuid: 0x8D4E0
GetObjectName: 0xE4
IsLoading: 0x936830
GetObjectLocation: 0x2C
LuaState: 0xABED90
LuaGetTop: 0x2B920
LuaLoadBuffer: 0x629DD0
LuaPCall: 0x2C9D0
LuaType: 0x2BC00
LuaToNumber: 0x2BD80
LuaToLString: 0x2BE70
LuaToBoolean: 0x2BE40
LuaSetTop: 0x2B940
PartyArray: 0xB331A8
EventVictim: 0x4C3960
CorpsePosition: 0xAD75E8
ClickToMove: 0x1C14E0
PerformanceCounter: 0x479C00
LastHardwareAction: 0x9D3798
SelectObject: 0x4D6410
SetFacing: 0x1D17F0
CurrentMapId: 0xAD73A4
AuctionHouse:
    ListCount: 0x1DFA0AC
    ListBase: 0x1DFA0B0
    OwnerCount: 0x1DFA0C0
    OwnerBase: 0x1DFA0BC
    BidderCount: 0x1DFA0D0
    BidderBase: 0x1DFA0CC
    AuctionSize: 0xD8
    ExpireOffset: 0xB8
IsClickMoving: 0x1BAC00
HasAuraBySpellId: 0x1C2BE0
CastSpell: 0x4B94E0
GetSpellCooldown: 0x4B1280
Interact: 0xB4
UseItem: 0x1A8730
GetBag: 0x28
StopCTM: 0x1C8070
Traceline: 0x320E30
UnitReaction: 0x1BE120
ClientDB__GetRow: 0x65C80
CGUnit_C__CalculateThreat: 0x1C9F30
WorldFrameOffset: 0xAD7870
CameraOffset: 0x80D0
AspectRatio: 0xAD7314
CreatureType: 0x1B7EA0
ShapeshiftFormId: 0x1B3210
GetAuraCount: 0x593C0
GetAura: 0x593E0
SpellCount: 0xB33AEC
SpellBook: 0xB33AF0
GetRuneIsReadyBySlot: 0x53C800
GetItemSparseRecPtr: 0x1A6C60

[TrioxX]

Isnt there any offset for BattlegroundStatus?

[Cypher]

Isnt there any offset for BattlegroundStatus?

This isn't a copypasta haven. How about you go find it, then contribute it? Oh wait, that would require actual work.

[TrioxX]

This isn't a copypasta haven. How about you go find it, then contribute it? Oh wait, that would require actual work.

I'm contributing as much, as i can, dont worry... I wouldnt ask, if i would find, what i'm looking for.

[Sacred]

Isnt there any offset for BattlegroundStatus?

Just look at GetBattlefieldStatus - World of Warcraft Programming: A Guide and Reference for Creating WoW Addons in IDA and you will find what you want, if you don't know how to use IDA, there's a guide for finding simple stuff, look for it on the first page of this section.

[Pusekatten]

Im sorry, but what is all of those numbers for?
Plz dont ban, Im new at this :/

[miceiken]

Im sorry, but what is all of those numbers for?
Plz dont ban, Im new at this :/

If you don't even understand what they are, why are you even here? Read up on pointers and offsets.

[D3ADLiN3]

herp derp....

[TrioxX]

Just look at GetBattlefieldStatus - World of Warcraft Programming: A Guide and Reference for Creating WoW Addons in IDA and you will find what you want, if you don't know how to use IDA, there's a guide for finding simple stuff, look for it on the first page of this section.

I already found that, but it seems, that it wont be easy like before:

signed int __cdecl sub_942830(int a1)
{
  signed int result; // eax@2
  int v2; // ST1C_4@2
  int v3; // ecx@3
  void *v4; // ebx@3
  int v5; // eax@17
  int v6; // eax@20
  int v7; // eax@27
  int v8; // eax@29
  int v9; // [sp+4h] [bp-18h]@11

  if ( !sub_42BC70(a1, 1) )
  {
    sub_A297F0(a1, "Usage: GetBattlefieldStatus(id)", v2);
    return 0;
  }
  v4 = dword_D12770;
  v3 = (signed __int64)sub_42BD80(a1, 1);
  if ( (_BYTE)dword_D12770 & 1 || !dword_D12770 )
    v4 = 0;
  while ( 1 )
  {
    if ( (_BYTE)v4 & 1 || !v4 )
    {
      sub_42C0E0(a1, "none");
      sub_42C010(a1);
      sub_42C030(a1, 0.0);
      sub_42C030(a1, 0.0);
      sub_42C030(a1, 0.0);
      sub_42C030(a1, 0.0);
      sub_42C010(a1);
      sub_42C010(a1);
      sub_42C010(a1);
      return 9;
    }
    if ( *((_DWORD *)v4 + 2) == v3 )
      break;
    v4 = (void *)*((_DWORD *)v4 + 1);
  }
  switch ( *((_DWORD *)v4 + 13) )
  {
    case 0:
      v9 = (int)"none";
      break;
    case 1:
      v9 = (int)"queued";
      break;
    case 2:
      v9 = (int)"confirm";
      break;
    case 4:
      v9 = (int)"active";
      break;
    default:
      v9 = (int)"error";
      break;
  }
  sub_42C0E0(a1, v9);
  if ( *((_DWORD *)v4 + 13) != 2
    || (v5 = *((_DWORD *)v4 + 10), v5 & 0x100000)
    || ((*((_QWORD *)v4 + 5) >> 16) & 0xF) == 1 )
  {
    if ( *((_DWORD *)v4 + 13) != 4 || dword_F3659C < dword_D7330C || dword_F3659C > dword_D73308 )
      goto LABEL_27;
    v6 = *(_DWORD *)(dword_D73318 + 4 * (dword_F3659C - dword_D7330C));
  }
  else
  {
    if ( (*((_DWORD *)v4 + 10) & 0xFFFF) == 32 )
    {
LABEL_27:
      v7 = *((_DWORD *)v4 + 10) & 0xFFFF;
      if ( v7 >= dword_D98A74 && v7 <= dword_D98A70 && (v8 = *(_DWORD *)(dword_D98A80 + 4 * (v7 - dword_D98A74))) != 0 )
        sub_42C0E0(a1, *(_DWORD *)(v8 + 44));
      else
        sub_42C010(a1);
      goto LABEL_32;
    }
    v6 = sub_465C80(*((_DWORD *)v4 + 12));
  }
  if ( !v6 )
    goto LABEL_27;
  sub_42C0E0(a1, *(_DWORD *)(v6 + 24));
LABEL_32:
  sub_42C030(a1, (double)*((unsigned int *)v4 + 16));
  sub_42C030(a1, (double)*((unsigned int *)v4 + 14));
  sub_42C030(a1, (double)*((unsigned int *)v4 + 15));
  sub_42C030(a1, (double)*((unsigned int *)v4 + 20));
  if ( *((_DWORD *)v4 + 21) )
    sub_42C030(a1, 1.0);
  else
    sub_42C010(a1);
  if ( *((_DWORD *)v4 + 22) )
    sub_42C030(a1, 1.0);
  else
    sub_42C010(a1);
  if ( *((_DWORD *)v4 + 23) )
  {
    sub_42C030(a1, 1.0);
    result = 9;
  }
  else
  {
    sub_42C010(a1);
    result = 9;
  }
  return result;
}

[Haugli92]

Hey !

I have a simple question about IDA. I am looking for Health / Mana adresses but cant find them when im searching in "Strings windows" in IDA Pro (6.1).
Anyone of you have a easy way to find these adresses ? :P

Thanks

[Jadd]

I already found that, but it seems, that it wont be easy like before:

signed int __cdecl sub_942830(int a1)
{
  signed int result; // eax@2
  int v2; // ST1C_4@2
  int v3; // ecx@3
  void *v4; // ebx@3
  int v5; // eax@17
  int v6; // eax@20
  int v7; // eax@27
  int v8; // eax@29
  int v9; // [sp+4h] [bp-18h]@11

  if ( !sub_42BC70(a1, 1) )
  {
    sub_A297F0(a1, "Usage: GetBattlefieldStatus(id)", v2);
    return 0;
  }
  v4 = dword_D12770;
  v3 = (signed __int64)sub_42BD80(a1, 1);
  if ( (_BYTE)dword_D12770 & 1 || !dword_D12770 )
    v4 = 0;
  while ( 1 )
  {
    if ( (_BYTE)v4 & 1 || !v4 )
    {
      sub_42C0E0(a1, "none");
      sub_42C010(a1);
      sub_42C030(a1, 0.0);
      sub_42C030(a1, 0.0);
      sub_42C030(a1, 0.0);
      sub_42C030(a1, 0.0);
      sub_42C010(a1);
      sub_42C010(a1);
      sub_42C010(a1);
      return 9;
    }
    if ( *((_DWORD *)v4 + 2) == v3 )
      break;
    v4 = (void *)*((_DWORD *)v4 + 1);
  }
  switch ( *((_DWORD *)v4 + 13) )
  {
    case 0:
      v9 = (int)"none";
      break;
    case 1:
      v9 = (int)"queued";
      break;
    case 2:
      v9 = (int)"confirm";
      break;
    case 4:
      v9 = (int)"active";
      break;
    default:
      v9 = (int)"error";
      break;
  }
  sub_42C0E0(a1, v9);
  if ( *((_DWORD *)v4 + 13) != 2
    || (v5 = *((_DWORD *)v4 + 10), v5 & 0x100000)
    || ((*((_QWORD *)v4 + 5) >> 16) & 0xF) == 1 )
  {
    if ( *((_DWORD *)v4 + 13) != 4 || dword_F3659C < dword_D7330C || dword_F3659C > dword_D73308 )
      goto LABEL_27;
    v6 = *(_DWORD *)(dword_D73318 + 4 * (dword_F3659C - dword_D7330C));
  }
  else
  {
    if ( (*((_DWORD *)v4 + 10) & 0xFFFF) == 32 )
    {
LABEL_27:
      v7 = *((_DWORD *)v4 + 10) & 0xFFFF;
      if ( v7 >= dword_D98A74 && v7 <= dword_D98A70 && (v8 = *(_DWORD *)(dword_D98A80 + 4 * (v7 - dword_D98A74))) != 0 )
        sub_42C0E0(a1, *(_DWORD *)(v8 + 44));
      else
        sub_42C010(a1);
      goto LABEL_32;
    }
    v6 = sub_465C80(*((_DWORD *)v4 + 12));
  }
  if ( !v6 )
    goto LABEL_27;
  sub_42C0E0(a1, *(_DWORD *)(v6 + 24));
LABEL_32:
  sub_42C030(a1, (double)*((unsigned int *)v4 + 16));
  sub_42C030(a1, (double)*((unsigned int *)v4 + 14));
  sub_42C030(a1, (double)*((unsigned int *)v4 + 15));
  sub_42C030(a1, (double)*((unsigned int *)v4 + 20));
  if ( *((_DWORD *)v4 + 21) )
    sub_42C030(a1, 1.0);
  else
    sub_42C010(a1);
  if ( *((_DWORD *)v4 + 22) )
    sub_42C030(a1, 1.0);
  else
    sub_42C010(a1);
  if ( *((_DWORD *)v4 + 23) )
  {
    sub_42C030(a1, 1.0);
    result = 9;
  }
  else
  {
    sub_42C010(a1);
    result = 9;
  }
  return result;
}

v4 = dword_D12770;
...
switch ( *((_DWORD *)v4 + 13) )

'nuff said.

[Jadd]

Just found a neat way to track individual units:

*((int*)(*(int*)<object> + 0xF8) + 0x104) = 2;

It's really handy for tracking units by name

[Master674]

You only set the tracked flag :P you should also use unsigned ints for storing pointers (or even better for x64 are those windows _PTR datatypes)

Set the Flag with the |= Or-Operator.. It's better coding style

Also some units have a cannot be tracked-flag... You should remove that one too :P

[DarkLinux]

Im working on mounting inside... Everdox got it to work at one point but lost the offsets...
If you know anything I would love the help!

This is what I got atm

0x32FB5B
0x32FB8B
0x1D8F9B

Thanks!

[Master674]

Im working on mounting inside... Everdox got it to work at one point but lost the offsets...
If you know anything I would love the help!

This is what I got atm

0x32FB5B
0x32FB8B
0x1D8F9B

Thanks!

IsIndoors checks are server side :P

I think you wont be able to mount up inside but its easy to stay on your mount ;D