Trying to learn IDA memory searching

[radarlove]

Hi,

So I found myself an old tutorial on how to find basic stuff using IDA: http://www.ownedcore.com/forums/worl...ple-stuff.html ([Tutorial] How to find simple stuff)

I downloaded the IDA 6.4 trial version and tried it out using the tutorial, unfortunately I wasnt able to get very far since the tutorial doesnt have the exact same working as the latest version of IDA.

I'm searching for the offset of "GetMinimapZoneText".

First, I opened the WoW executable and searched for the string, got the following:


After double clicking on the line I get the following screen:


My question is: What do I do next to get the offset? Do I need another tool to get it?
Any help would be greatly appreciated!

thx,
RL

TO A MOD READING: CAN YOU PLEASE CHANGE TITLE TO: Trying to learn IDA memory searching

[Bananenbrot]

Your auto analysis hasn't finished yet. So IDA hasn't yet identified those characters as strings and it looks different.
Analysis should be done by now...

[Xartrick]

TO A MOD READING: CAN YOU PLEASE CHANGE TITLE TO: Trying to learn IDA memory searching

You can change it yourself:

Edit Post (on the first thread's message (your's)) > Go Advanced > Title

[FinnX]

You can change it yourself:

Edit Post (on the first thread's message (your's)) > Go Advanced > Title

Only the post's title is edited then, not the thread title. Just tried it out :P

[radarlove]

Your auto analysis hasn't finished yet. So IDA hasn't yet identified those characters as strings and it looks different.
Analysis should be done by now...

Ah..... again my impatience....
I'll try again this evening Thanks...

Now that we're talking IDA, which strings should i look for to get:
chatBufferStart, NextMessage, chatBufferPos

Help is appreciated!

thx,
RL

[radarlove]

So just tried it out, waited for IDA to analyse, and got this as result while looking for "GetMinimapZoneText":



Now when I doubleclick that data part I get the following:



How do I continue to look for the correct offset now?

Thx,
RL

[Xartrick]

You can press X to get references to this symbol.