-
Member
[Classic] 1.13.3.32790
ObjMgrPtr: WowClassic.exe + 0x238AB38
FirstObject: 0x18
NextObject: 0x70
ObjectType: 0x20
LocalPlayerGUID: WowClassic.exe + 0x268B660
MouseoverGUID: WowClassic.exe + 0x25ACD00
CameraBase: WowClassic.exe + 0x25AD818
InGameFlag: WowClassic.exe + 0x25ACCF8
GameVersion: WowClassic.exe + 0x1C4B224
GameBuild: WowClassic.exe + 0x1C4B22C
LastHardwareAction: WowClassic.exe + 0x22CAD30
LuaTainted: WowClassic.exe + 0x26D5C48
ObjectCreatedBy: 0x534
IsBobbing: 0x14C
-
Post Thanks / Like - 4 Thanks
-
Member
namecachebase: 0x1FB3B28
-
Post Thanks / Like - 1 Thanks
Vialet (1 members gave Thanks to Buntstift for this useful post)
-
Member
static const DWORD_PTR
CameraPtr = 0x25AD818, // 32790
CameraPtrOffset = 0x3330, // 32790
GetActiveCamera = 0xDB26C0; // 32790
CGUnit_C__UnitReaction = 0xD710E0, // 32790
CGWorldFrame__Intersect = 0x115E670; // 32790
namespace Unit {
static const DWORD_PTR
Position = 0x1600, // 32790
UnitName1 = 0x17B8, // 32790
UnitName2 = 0xE0; // 32790
}
namespace Lua
{
static const DWORD_PTR
FrameScript_ExecuteBuffer = 0x332CC0, // 32790
FrameScript_GetLocalizedText = 0x8B08A0; // 32790
}
namespace Player {
static const DWORD_PTR
Position = 0x1600, // 32790
GUID = 0x58; // 32790
}
namespace Packet
{
static const DWORD_PTR
ClientServices__Send = 0x1322A60, // 32790
ClientServices__Connection = 0xB6FCF0; // 32790
}
namespace NameCache {
static const DWORD_PTR
NameCachePtr = 0x1FB3B28, // 32790
GUID = 0x20, // 32790
Name = 0x31; // 32790
}
Interestingly, with this release Wow.exe was renamed to WowClassic.exe.
Last edited by oldmanofmen; 12-12-2019 at 03:32 PM.
-
Post Thanks / Like - 2 Thanks
Vialet,
Buntstift (2 members gave Thanks to oldmanofmen for this useful post)
-
Member
Code:
ActiveTerrainSpell = 0x22E5060
CameraBase = 0x25AD818
GameBuild = 0x1C4B22C
GameReleaseDate = 0x1C4B238
GameVersion = 0x1C4B224
InGameFlag = 0x25ACCF8
IsLoadingOrConnecting = 0x2278BD0
LastHardwareAction = 0x22CAD30
ObjectMgrPtr = 0x238AB38
Code:
enum class FunctionOffsets
{
CheckSpellAttribute = 0x1910FF0,
FrameScript_ExecuteBuffer = 0x332CC0,
FrameScript_GetLocalizedText = 0x0,
FrameScript_GetText = 0x32F5C0,
FrameTime_GetCurTimeMs = 0x2B95D0,
Item_GetSpellIdById = 0x0,
Item_GetSpellIdByObj = 0x0,
Item_UseItem = 0x0,
PartyInfo_GetActiveParty = 0xE0C290,
Party_FindMember = 0xE0C000,
PetInfo_FindSpellById = 0xF19DA0,
PetInfo_SendPetAction = 0x0,
Specialization_IsTalentSelectedById = 0xE5D650,
SpellBook_CastSpell = 0xDD2480,
SpellBook_FindSlotBySpellId = 0xDD4790,
SpellBook_FindSpellOverrideById = 0xDD61E0,
SpellBook_GetOverridenSpell = 0xDD4EC0,
SpellDB_GetRow = 0x1911050,
Spell_ClickSpell = 0x7834B0,
Spell_GetMinMaxRange = 0x787380,
Spell_GetSomeSpellInfo = 0x190F640,
Spell_GetSpellCharges = 0x789990,
Spell_GetSpellCooldown = 0x0,
Spell_GetSpellType = 0x767F30,
Spell_HandleTerrainClick = 0x78F870,
Spell_IsInRange = 0x79B9A0,
Spell_IsPlayerSpell = 0xDDC5E0,
Spell_IsSpellKnown = 0x8BD060,
Spell_IsStealable = 0xDD2220,
Unit_CanAttack = 0x89E4B0,
Unit_GetAuraByIndex = 0x777C80,
Unit_GetFacing = 0x8B02B0,
Unit_GetPosition = 0x16D240,
Unit_GetPowerMax = 0x1134510,
Unit_GetPower = 0x1134360,
Unit_Interact = 0xD7CC80,
Unit_IsFriendly = 0x8BC320,
WorldFrame_GetCurrent = 0x0,
WorldFrame_Intersect = 0x115E670,
};
Last edited by Vialet; 12-11-2019 at 04:47 PM.
-
Post Thanks / Like - 1 Thanks
Buntstift (1 members gave Thanks to Vialet for this useful post)
-
Member
CurrentTargetGUID: 0x21E5850
LastTargetGUID: 0x21E5860 (thanks PhoenixVip1337)
Last edited by Unbaar; 12-12-2019 at 12:26 AM.
-
Post Thanks / Like - 1 Thanks
Vialet (1 members gave Thanks to Unbaar for this useful post)
-
Member
uint64_t ptr_my_old_TARGET = 0x21E5850+0x10; (/targetlasttarget)
-
Contributor
Code:
PetInfo_SendPetAction = 0xF1BBA0,
Spell_GetSpellCooldown = 0x789DD0,
also patterns for those broke
Code:
{ "PetInfo_SendPetAction", "4C 89 4C 24 20 48 89 4C 24 08 55 53 41 56 41 57 48 8D 6C 24 ? 48 81 EC ? 01 00 00 4C 8B F9 45 8B F0 B9 02 00 00 00 48 8B DA E8 ? ? ? ? 84 C0", SignatureType::NORMAL, 0x0, 0x0 },
{ "Spell_GetSpellCooldown", "48 83 EC 58 44 8B D1 C6 44 24 48 00 F7 DA 48 8D 05 ? ? ? ? 41 8B D2 48 1B C9 81 E1 B8 00 00", SignatureType::NORMAL, 0x0, 0x0 },
{ "Spell_GetSpellCooldown_Classic", "48 83 EC 58 44 8B D1 C6 44 24 48 00 41 F7 D8 48 8D 05 ? ? ? ? 44 8B C2 41 8B D2 48 1B C9 81 E1 B8 00 00 00", SignatureType::NORMAL, 0x0, 0x0 },
also Spell_GetSpellCooldown changed to
Code:
bool __cdecl Spell_GetSpellCooldown(uint32_t spellId, int unk_0, bool isPet, uint64_t* duration, uint64_t* start, uint64_t* enabled, uint64_t unk_1, uint64_t* modrate, uint64_t unk_2)
-
Post Thanks / Like - 1 Thanks
Buntstift (1 members gave Thanks to ejt for this useful post)
-
Member
Does anyone have the address for the MoveTo function?
-
Contributor
Originally Posted by
oldmanofmen
Does anyone have the address for the MoveTo function?
.text:00000000008D2440 MoveTo should be it
-
Post Thanks / Like - 1 Thanks
oldmanofmen (1 members gave Thanks to charles420 for this useful post)
-
Active Member
Originally Posted by
charles420
.text:00000000008D2440 MoveTo should be it
How you find this one? Can you give some hints?
And anyone who found playernamecache?
-
Contributor
Originally Posted by
NoxiaZ
How you find this one? Can you give some hints?
And anyone who found playernamecache?
Stop the begging, do some work. These get posted every patch. Open IDA, go the the address look at xrefs and find a way to locate it yourself.
-
Active Member
Originally Posted by
aeo
Stop the begging, do some work. These get posted every patch. Open IDA, go the the address look at xrefs and find a way to locate it yourself.
This have nothing to do with begging, but that i yet have no idea how to locate PlayerNameChache, so would be nice with some hints to know what i need to look for to locate it.
Everyone start at stage one, you also been there...
-
Contributor
I was and you have every hint you could ever need. You just need to put in some effort. Go back to an old version or this version. Open the binary in IDA and look at the offset (NameCachePtr = 0x1FB3B28 ). Look for references, look for string around it. Look for UnitName lua function.
-
Active Member
Originally Posted by
aeo
I was and you have every hint you could ever need. You just need to put in some effort. Go back to an old version or this version. Open the binary in IDA and look at the offset (NameCachePtr = 0x1FB3B28 ). Look for references, look for string around it. Look for UnitName lua function.
This is actually the way i done finding the "RedMessage/SystemMessage" and the "SpellBookPtr" was with a few hints, but i have no luck with the NameCachePtr yet.
I dont expect anyone to give me the answer, but only ask for some ideas and hints when im stuck (as this time)
In IDA i thought i should look at ".rdata:0000000001C47F98 0000000C C PlayerNames" - But havent figured out how that works yet, only thing i could figure out was that the pointer must start with 1FB3xxx, because this came up all the time.
Didnt know about the lua function "UnitName", thank you ill take a look and hopefully being able to find it next time !
-
Member
Code:
SpellBookSpellsPtr = 0x25adb08
first spellBookObj at SpellBookSpellsPtr - 0x20
learnedSpellsCount at SpellBookSpellsPtr - 0x28