[WoW][5.0.5.16048] x86 Info Dump Thread

[berlinermauer]

Well sorry for asking this silly question but when I follow the VMT-Adress 45 I get to CGObject_C::SetFrameOfReference instead of Interact. Any Idea of what I did wrong?
Did the Offset perhaps change? btw: I searched for the VMT of a CGUNIT and still get an CGObject? Maybe my failure? Did the Size of VMT change to 8 byte per offset?! wtf?!

[mexicaan]

Rebased:

CGGameObject_C__GetPosition = 0x477B10

[Empted]

Well sorry for asking this silly question but when I follow the VMT-Adress 45 I get to CGObject_C::SetFrameOfReference instead of Interact. Any Idea of what I did wrong?
Did the Offset perhaps change? btw: I searched for the VMT of a CGUNIT and still get an CGObject? Maybe my failure? Did the Size of VMT change to 8 byte per offset?! wtf?!

 uint VMT=wow.ReadUInt(player.BaseAddress);
            uint funcPtr = 0x4A79A0 + (uint)ConsoleProgram.wow.MainModule.BaseAddress; //from TOM_RUS post
            uint i = 0;
            for(i=0;;i++)
            {
             uint ptr=ConsoleProgram.wow.ReadUInt(VMT+i*4);
             if (ptr==func) break;
            }
            Console.WriteLine(i+" "+ConsoleProgram.wow.ReadUInt(VMT+(uint)i*4).ToString("X"));

What I did i simply scanning VMT for CGUnit_C::OnRightClick func. It's now VMT+41*4.
P.S. read something about virtual function and inheritance.

[berlinermauer]

Unfortunately VMT+41 lead me to: 0x87FCA0 (CGUNIT_C__GetScale(this)) or 0x47FCA0 if you remove the ImageBase :/

I'll try to build a scanner on my own, however: Is there a "Table of Contents" so that I can check the Functions and Post a dump of the whole vmt?

Or is everything beginning with a CGameObject and CGUnit a VMT Entry? If I'd know the max-entry-count one could also make the for loop secure if the offset is wrong.

[_Mike]

Unfortunately VMT+41 lead me to: 0x87FCA0 (CGUNIT_C__GetScale(this)) or 0x47FCA0 if you remove the ImageBase :/

I'll try to build a scanner on my own, however: Is there a "Table of Contents" so that I can check the Functions and Post a dump of the whole vmt?

Or is everything beginning with a CGameObject and CGUnit a VMT Entry? If I'd know the max-entry-count one could also make the for loop secure if the offset is wrong.

Correct, 41 is GetScale. OnRightClick is 65. (which btw is 0x41 )
Not sure what you mean by "table of contents".. That's exactly what the VMT is.

[radarlove]

I want to retrieve the NPC id from the descriptors. Earlier I was told to to use "OBJECT_FIELD_ENTRY".
Can't find it in this thread. Is it named otherwise here?

thx,
RL

[Empted]

Here are some of virtual function for GameObject, Unit and Player classes. Function number is index in VMT.

GAMEOBJECT:

Function 0: adress=7FF3E0 name=CGObject_C__GetObjectDisplayTransportGUID
Function 1: adress=7FF3F0 name=CGObject_C__GetObjectDisplayPosition
Function 2: adress=7FF410 name=CGObject_C__GetObjectDisplayRawPosition
Function 3: adress=8B06B0 name=CGObject_C__GetObjectDisplaySmoothFacing
Function 4: adress=7FF430 name=CGObject_C__GetObjectDisplayMatrix
Function 5: adress=7FF450 name=CGObject_C__GetObjectDisplayTargetScale
Function 6: adress=7FF460 name=CGObject_C__GetObjectDisplayTargetModelScale
Function 7: adress=7FF470 name=CGObject_C__GetObjectDisplayBaseAlpha
Function 8: adress=7FF4F0 name=CGObject_C__GetObjectDisplayHeight
Function 9: adress=7FF480 name=CGObject_C__GetObjectDisplayName
Function 11: adress=835FA0 name=CGGameObject_C__CanObjectDisplayHighlight
Function 13: adress=8308A0 name=CGGameObject_C__IsObjectDisplayHighlightSuppressed
Function 14: adress=836060 name=CGGameObject_C__HandleObjectDisplayTrackChange
Function 16: adress=8308B0 name=CGGameObject_C__IsObjectDisplayLegalSelection
Function 18: adress=7FF490 name=CGObject_C__ShouldObjectDisplayRenderName
Function 19: adress=7FF4A0 name=CGObject_C__OnObjectDisplayNameVisibilityChanged
Function 20: adress=7FF4B0 name=CGObject_C__UpdateObjectDisplayNameString
Function 21: adress=7FF4C0 name=CGObject_C__GetObjectDisplaySelectionHighlightColor
Function 22: adress=7FF4D0 name=CGObject_C__GetObjectDisplayNamePosition
Function 23: adress=83A890 name=CGGameObject_C__PostInit
Function 24: adress=83AA90 name=CGGameObject_C__Disable
Function 25: adress=834FF0 name=CGGameObject_C__Reenable
Function 26: adress=83AB30 name=CGGameObject_C__PostReenable
Function 28: adress=834D80 name=CGGameObject_C__UpdateWorldObject
Function 31: adress=835EA0 name=CGGameObject_C__GetNamePosition
Function 42: adress=7FF3D0 name=CGObject_C__GetBaseAlpha
Function 44: adress=83A5E0 name=CGGameObject_C__GetRotation
Function 45: adress=8B02C0 name=CGObject_C__SetFrameOfReference
Function 51: adress=8351D0 name=CGGameObject_C__GetModelFileName
Function 55: adress=7FF1C0 name=CGObject_C__GetSelectionHighlightColor
Function 61: adress=830530 name=CGGameObject_C__ShouldRender
Function 65: adress=838760 name=CGGameObject_C__OnRightClick
Function 66: adress=8398F0 name=j_CGGameObject_C__OnRightClick
Function 73: adress=831C60 name=CGGameObject_C__GetName
Function 111: adress=C73520 name=CGUnit_C__IsPointInside
Function 113: adress=7FF3D0 name=CGObject_C__GetBaseAlpha

UNIT:

Function 0: adress=7FF3E0 name=CGObject_C__GetObjectDisplayTransportGUID
Function 1: adress=7FF3F0 name=CGObject_C__GetObjectDisplayPosition
Function 2: adress=7FF410 name=CGObject_C__GetObjectDisplayRawPosition
Function 3: adress=8B06B0 name=CGObject_C__GetObjectDisplaySmoothFacing
Function 4: adress=7FF430 name=CGObject_C__GetObjectDisplayMatrix
Function 5: adress=7FF450 name=CGObject_C__GetObjectDisplayTargetScale
Function 6: adress=7FF460 name=CGObject_C__GetObjectDisplayTargetModelScale
Function 7: adress=7FF470 name=CGObject_C__GetObjectDisplayBaseAlpha
Function 8: adress=7FF4F0 name=CGObject_C__GetObjectDisplayHeight
Function 9: adress=7FF480 name=CGObject_C__GetObjectDisplayName
Function 10: adress=822340 name=CGUnit_C__GetObjectDisplayLevel
Function 11: adress=89C080 name=CGUnit_C__CanObjectDisplayHighlight
Function 12: adress=89C130 name=CGUnit_C__CanObjectDisplayBeTargeted
Function 13: adress=87FCD0 name=CGUnit_C__IsObjectDisplayHighlightSuppressed
Function 14: adress=8877D0 name=CGUnit_C__HandleObjectDisplayTrackChange
Function 15: adress=8877F0 name=CGUnit_C__GetObjectDisplaySelectionPriority
Function 16: adress=8A15E0 name=CGUnit_C__IsObjectDisplayLegalSelection
Function 17: adress=88E9A0 name=CGUnit_C__IsObjectDisplayLowPrioritySelection
Function 18: adress=7FF490 name=CGObject_C__ShouldObjectDisplayRenderName
Function 19: adress=7FF4A0 name=CGObject_C__OnObjectDisplayNameVisibilityChanged
Function 20: adress=7FF4B0 name=CGObject_C__UpdateObjectDisplayNameString
Function 21: adress=7FF4C0 name=CGObject_C__GetObjectDisplaySelectionHighlightColor
Function 22: adress=7FF4D0 name=CGObject_C__GetObjectDisplayNamePosition
Function 23: adress=8AD6E0 name=CGUnit_C__PostInit
Function 24: adress=8ADD60 name=CGUnit_C__Disable
Function 25: adress=8A8940 name=CGUnit_C__Reenable
Function 26: adress=8AE4A0 name=CGUnit_C__PostReenable
Function 27: adress=87E4C0 name=CGUnit_C__HandleOutOfRange
Function 28: adress=894B80 name=CGUnit_C__UpdateWorldObject
Function 29: adress=87E510 name=CGUnit_C__ShouldFadeout
Function 30: adress=8A8F60 name=CGUnit_C__UpdateDisplayInfo
Function 31: adress=8B05B0 name=CGObject_C__GetNamePosition
Function 34: adress=822200 name=CGUnit_C__GetPosition
Function 35: adress=822220 name=CGUnit_C__GetRawPosition
Function 36: adress=822250 name=CGUnit_C__GetFacing
Function 37: adress=822270 name=CGUnit_C__GetRawFacing
Function 41: adress=87FCA0 name=CGUnit_C__GetScale
Function 42: adress=894FA0 name=CGUnit_C__GetModelScale
Function 43: adress=8222E0 name=CGUnit_C__GetTransportGUID
Function 44: adress=7FF2E0 name=CGObject_C__GetRotation
Function 45: adress=8B02C0 name=CGObject_C__SetFrameOfReference
Function 46: adress=883910 name=CGUnit_C__IsQuestGiver
Function 47: adress=898C80 name=CGUnit_C__RefreshInteractIcon
Function 48: adress=883930 name=CGUnit_C__UpdateInteractIcon
Function 49: adress=883960 name=CGUnit_C__UpdateInteractIconAttach
Function 50: adress=88B2C0 name=CGUnit_C__UpdateInteractIconScale
Function 51: adress=8900E0 name=CGUnit_C__GetModelFileName
Function 52: adress=891040 name=CGUnit_C__RenderTargetSelection
Function 53: adress=8912F0 name=CGUnit_C__RenderPetTargetSelection
Function 55: adress=883300 name=CGUnit_C__GetSelectionHighlightColor
Function 57: adress=88A9A0 name=CGUnit_C__LoadGuildTextures
Function 58: adress=8A79B0 name=CGUnit_C__ModelLoaded
Function 59: adress=898ED0 name=CGUnit_C__PreAnimate
Function 60: adress=88BA80 name=CGUnit_C__Animate
Function 61: adress=88B600 name=CGUnit_C__ShouldRender
Function 62: adress=883A40 name=CGUnit_C__GetRenderFacing
Function 63: adress=87F480 name=CGUnit_C__OnSpecialMountAnim
Function 65: adress=8A79A0 name=CGUnit_C__OnRightClick
Function 66: adress=8A7980 name=CGUnit_C__OnLeftClick
Function 67: adress=88D980 name=CGUnit_C__GetMatrix
Function 68: adress=883790 name=CGUnit_C__ObjectNameVisibilityChanged
Function 69: adress=8222F0 name=CGUnit_C__UpdateObjectNameString
Function 70: adress=89E890 name=CGUnit_C__ShouldRenderObjectName
Function 71: adress=822700 name=CGUnit_C__GetObjectModel
Function 72: adress=822310 name=CGUnit_C__GetObjectAnimKitMgr
Function 73: adress=8221F0 name=CGUnit_C__GetObjectName
Function 75: adress=8DB4E0 name=CGUnit_C__CleanUpVehicleBoneAnimsBeforeObjectModelChange
Function 76: adress=880740 name=CGUnit_C__ShouldFadeIn
Function 77: adress=87F800 name=CGUnit_C__GetBaseAlpha
Function 79: adress=C73520 name=CGUnit_C__IsPointInside
Function 80: adress=8DB670 name=CGUnit_C__AddPassenger
Function 81: adress=830A60 name=CGObject_C__GetSpeed
Function 87: adress=900FE0 name=CGUnit_C__PlayUnitSound
Function 88: adress=900850 name=CGUnit_C__PlayFoleySound
Function 91: adress=880340 name=CGUnit_C__IsDeadOrGhost
Function 92: adress=881640 name=CGUnit_C__AddSquelchedEffect
Function 93: adress=88AA70 name=CGUnit_C__GetVirtualItem
Function 94: adress=8833A0 name=CGUnit_C__GetVirtualItemDisplayID
Function 95: adress=884BB0 name=CGUnit_C__GetClientStandState
Function 96: adress=884E80 name=CGUnit_C__GetSpellRank
Function 97: adress=8AD200 name=CGUnit_C__GetDefenseSkillRank
Function 98: adress=8AD230 name=CGUnit_C__GetAttackSkillRank
Function 99: adress=880320 name=CGUnit_C__GetRangedAttackSkillRank
Function 100: adress=885100 name=CGUnit_C__GetSpellCastingTime
Function 101: adress=822330 name=CGUnit_C__GetPitch

PLAYER:

Function 0: adress=7FF3E0 name=CGObject_C__GetObjectDisplayTransportGUID
Function 1: adress=7FF3F0 name=CGObject_C__GetObjectDisplayPosition
Function 2: adress=7FF410 name=CGObject_C__GetObjectDisplayRawPosition
Function 3: adress=8B06B0 name=CGObject_C__GetObjectDisplaySmoothFacing
Function 4: adress=7FF430 name=CGObject_C__GetObjectDisplayMatrix
Function 5: adress=7FF450 name=CGObject_C__GetObjectDisplayTargetScale
Function 6: adress=7FF460 name=CGObject_C__GetObjectDisplayTargetModelScale
Function 7: adress=7FF470 name=CGObject_C__GetObjectDisplayBaseAlpha
Function 8: adress=7FF4F0 name=CGObject_C__GetObjectDisplayHeight
Function 9: adress=7FF480 name=CGObject_C__GetObjectDisplayName
Function 10: adress=822340 name=CGUnit_C__GetObjectDisplayLevel
Function 11: adress=89C080 name=CGUnit_C__CanObjectDisplayHighlight
Function 12: adress=89C130 name=CGUnit_C__CanObjectDisplayBeTargeted
Function 13: adress=87FCD0 name=CGUnit_C__IsObjectDisplayHighlightSuppressed
Function 14: adress=8877D0 name=CGUnit_C__HandleObjectDisplayTrackChange
Function 15: adress=8877F0 name=CGUnit_C__GetObjectDisplaySelectionPriority
Function 16: adress=8A15E0 name=CGUnit_C__IsObjectDisplayLegalSelection
Function 17: adress=88E9A0 name=CGUnit_C__IsObjectDisplayLowPrioritySelection
Function 18: adress=7FF490 name=CGObject_C__ShouldObjectDisplayRenderName
Function 19: adress=7FF4A0 name=CGObject_C__OnObjectDisplayNameVisibilityChanged
Function 20: adress=7FF4B0 name=CGObject_C__UpdateObjectDisplayNameString
Function 21: adress=7FF4C0 name=CGObject_C__GetObjectDisplaySelectionHighlightColor
Function 22: adress=7FF4D0 name=CGObject_C__GetObjectDisplayNamePosition
Function 23: adress=8267D0 name=CGPlayer_C__PostInit
Function 24: adress=8255B0 name=CGPlayer_C__Disable
Function 25: adress=825740 name=CGPlayer_C__Reenable
Function 26: adress=825510 name=CGPlayer_C__PostReenable
Function 27: adress=87E4C0 name=CGUnit_C__HandleOutOfRange
Function 28: adress=894B80 name=CGUnit_C__UpdateWorldObject
Function 29: adress=87E510 name=CGUnit_C__ShouldFadeout
Function 30: adress=8A8F60 name=CGUnit_C__UpdateDisplayInfo
Function 31: adress=8B05B0 name=CGObject_C__GetNamePosition
Function 32: adress=8226F0 name=CGPlayer_C__GetBag
Function 33: adress=8226F0 name=CGPlayer_C__GetBag
Function 34: adress=822200 name=CGUnit_C__GetPosition
Function 35: adress=822220 name=CGUnit_C__GetRawPosition
Function 36: adress=822250 name=CGUnit_C__GetFacing
Function 37: adress=822270 name=CGUnit_C__GetRawFacing
Function 41: adress=87FCA0 name=CGUnit_C__GetScale
Function 42: adress=894FA0 name=CGUnit_C__GetModelScale
Function 43: adress=8222E0 name=CGUnit_C__GetTransportGUID
Function 44: adress=7FF2E0 name=CGObject_C__GetRotation
Function 45: adress=8B02C0 name=CGObject_C__SetFrameOfReference
Function 46: adress=883910 name=CGUnit_C__IsQuestGiver
Function 47: adress=898C80 name=CGUnit_C__RefreshInteractIcon
Function 48: adress=883930 name=CGUnit_C__UpdateInteractIcon
Function 49: adress=883960 name=CGUnit_C__UpdateInteractIconAttach
Function 50: adress=88B2C0 name=CGUnit_C__UpdateInteractIconScale
Function 51: adress=8900E0 name=CGUnit_C__GetModelFileName
Function 52: adress=891040 name=CGUnit_C__RenderTargetSelection
Function 53: adress=8912F0 name=CGUnit_C__RenderPetTargetSelection
Function 55: adress=883300 name=CGUnit_C__GetSelectionHighlightColor
Function 56: adress=814460 name=CGPlayer_C__HandleGuildIDUpdate
Function 57: adress=819060 name=CGPlayer_C__LoadGuildTextures
Function 58: adress=8A79B0 name=CGUnit_C__ModelLoaded
Function 59: adress=80FCF0 name=CGPlayer_C__PreAnimate
Function 60: adress=88BA80 name=CGUnit_C__Animate
Function 61: adress=819AF0 name=CGPlayer_C__ShouldRender
Function 62: adress=883A40 name=CGUnit_C__GetRenderFacing
Function 63: adress=87F480 name=CGUnit_C__OnSpecialMountAnim
Function 65: adress=8A79A0 name=CGUnit_C__OnRightClick
Function 66: adress=8A7980 name=CGUnit_C__OnLeftClick
Function 67: adress=88D980 name=CGUnit_C__GetMatrix
Function 68: adress=883790 name=CGUnit_C__ObjectNameVisibilityChanged
Function 69: adress=8222F0 name=CGUnit_C__UpdateObjectNameString
Function 70: adress=89E890 name=CGUnit_C__ShouldRenderObjectName
Function 71: adress=822700 name=CGUnit_C__GetObjectModel
Function 72: adress=822310 name=CGUnit_C__GetObjectAnimKitMgr
Function 73: adress=8221F0 name=CGUnit_C__GetObjectName
Function 75: adress=8DB4E0 name=CGUnit_C__CleanUpVehicleBoneAnimsBeforeObjectModelChange
Function 76: adress=880740 name=CGUnit_C__ShouldFadeIn
Function 77: adress=87F800 name=CGUnit_C__GetBaseAlpha
Function 79: adress=C73520 name=CGUnit_C__IsPointInside
Function 80: adress=8DB670 name=CGUnit_C__AddPassenger
Function 81: adress=830A60 name=CGObject_C__GetSpeed
Function 82: adress=815680 name=CGPlayer_C__GetAFKText
Function 83: adress=815710 name=CGPlayer_C__GetDNDText
Function 84: adress=815780 name=CGPlayer_C__GetGMText
Function 85: adress=815800 name=CGPlayer_C__GetDevText
Function 86: adress=815860 name=CGPlayer_C__GetComText
Function 87: adress=8E8AA0 name=CGPlayer_C__PlayUnitSound
Function 88: adress=8E8D20 name=CGPlayer_C__PlayFoleySound
Function 89: adress=8E8DD0 name=CGPlayer_C__GetImpactType
Function 92: adress=881640 name=CGUnit_C__AddSquelchedEffect
Function 93: adress=8197D0 name=CGPlayer_C__GetVirtualItem
Function 94: adress=819860 name=CGPlayer_C__GetVirtualItemDisplayID
Function 95: adress=810270 name=CGPlayer_C__GetClientStandState
Function 96: adress=819430 name=CGPlayer_C__GetSpellRank
Function 97: adress=81A8E0 name=CGPlayer_C__GetDefenseSkillRank
Function 98: adress=819FA0 name=CGPlayer_C__GetAttackSkillRank
Function 99: adress=81A060 name=CGPlayer_C__GetRangedAttackSkillRank
Function 100: adress=810490 name=CGPlayer_C__GetSpellCastingTime
Function 101: adress=822330 name=CGUnit_C__GetPitch

ADDED:
LastHardwareAction=0xAD7428 (rebased)

[ccKep]

For those using D3D11:

• CGxDeviceD3d = 0xAD773C
  
  • IDirect3DDevice9 = 0x27F8
    
    • EndScene = 0xA8
    
    
  • IDXGISwapChain = 0x2804
    
    • Present = 0x20

[Shadowhunter12]

Empted,

Thanks for posting the LastHardwareAction... Do you happen to know what the offset for the PerformanceCounter please?

Thanks!

-Shadow

[Thongs]

Empted,

Thanks for posting the LastHardwareAction... Do you happen to know what the offset for the PerformanceCounter please?

Thanks!

-Shadow

rebased
public static uint PerformanceCounter = 0x169730; //OsGetAsyncTimeMs

[Shadowhunter12]

rebased
public static uint PerformanceCounter = 0x169730; //OsGetAsyncTimeMs

Thongs,

Thank you very much for providing, I appreciate it.

Just curious, is there another way to read this performance counter through the managed .NET libraries in the System.Diagnostics namespace PerformanceCounter?

Thank you again!

-Shadow

[TOM_RUS]

Thongs,

Thank you very much for providing, I appreciate it.

Just curious, is there another way to read this performance counter through the managed .NET libraries in the System.Diagnostics namespace PerformanceCounter?

Thank you again!

-Shadow

Environment.TickCount

[Apoc]

Thongs,

Thank you very much for providing, I appreciate it.

Just curious, is there another way to read this performance counter through the managed .NET libraries in the System.Diagnostics namespace PerformanceCounter?

Thank you again!

-Shadow

Stopwatch.GetTimestamp() is a wrapper around QueryPerformanceCounter.

[jarjar1]

Can PerformanceCounter = 0x169730; //OsGetAsyncTimeMs be used as the current game tick as well, or is that different?

[Shadowhunter12]

Can PerformanceCounter = 0x169730; //OsGetAsyncTimeMs be used as the current game tick as well, or is that different?

Apoc & TOM, thanks for your quick responses. I am using Environment.TickCount instead of calling PerformanceCounter directly. One less offset to keep track of.

I appreciate it!

-Shadow