TaxiButtons - How to determine where they lead to?

[Tanaris4]

All-

I'm trying to reverse UI Frames further, and right now I'm trying to determine where I can fly to once I interact w/a flight master. I can easily enough traverse through all of the UIFrames to find those named "TaxiButton," but I'm not sure how to determine where they lead.

I've tried looking at the structure to see if maybe there is a pointer to a string of the location, but haven't found this. Anyone have any ideas or has anyone reversed this?

Note: I am doing this out of process, but would even love some function names to reverse maybe? I'm just not sure how to continue further, I'm a bit stuck.

Thanks,
~ Tanaris

[TOM_RUS]

Related lua API's:
GetNumRoutes
TaxiGetDestY
TaxiGetDestX
TaxiGetSrcY
TaxiGetSrcX
TaxiNodeSetCurrent
TaxiNodeGetType
CloseTaxiMap
TakeTaxiNode
TaxiNodeCost
TaxiNodePosition
TaxiNodeName
NumTaxiNodes
SetTaxiMap

Hint: all data stored in DBC files.

[Tanaris4]

Yea I feel dumb, already got it:

    MemoryAccess *memory = [[Controller sharedInstance] wowMemoryAccess];
    
    int32_t totalNodes = [memory readInt:0x12C06CC];    // 14354: lua_NumTaxiNodes
    int32_t tablePtr = [memory readInt:0x12C06C4];      // 14354: lua_TaxiNodeName
    
    if ( totalNodes > 0 && tablePtr > 0 ){
        
        int i = 0;
        for ( ; i < totalNodes; i++ ){

            UInt32 ptr = [memory readUInt:(0x30 * i) + tablePtr];
            
            UInt32 stringPtr = [memory readUInt:ptr + 0x14];
            
            NSString *location = [memory readString:stringPtr withLen:0x100];
            
            log(LOG_DEV, @"%d: 0x%X %@", i + 1, stringPtr, location);   // this id number (i+1) corresponds to the TaxiButton number
        }
    }

What is strange, is I don't think 0x12C06C4 is actually a DBC, even though it looks like one. (I got the offset from TaxiNodeName)