CVars in Dragonflight

[Trioxygen]

Has anyone figured out how CVars are stored in 10.0.0.46597

They used to be a linked list (kind of like the object manager) with a pointer to the name and a pointer to the value. Pointer to the name still works, but having troubles finding out how to find the value. The next works (weirdly for about half of them)

const CVarOffset = 0x3497ef0;
const FIRST = 0x10;
const NAME = 0x20;

let current = this.readMemory(FIRST, UINT64);

const namePtr = readMemory<number>(this.handle, current + NAME, UINT64);
const valuePtr = readMemory<number>(this.handle, namePtr - 0x60, UINT64);
const name = this.readString(namePtr);
const value = this.readString(valuePtr)

const next = readMemory<number>(this.handle, current, UINT64); // etc

[Razzue]

Has anyone figured out how CVars are stored in 10.0.0.46597

They used to be a linked list (kind of like the object manager) with a pointer to the name and a pointer to the value. Pointer to the name still works, but having troubles finding out how to find the value. The next works (weirdly for about half of them)

const CVarOffset = 0x3497ef0;
const FIRST = 0x10;
const NAME = 0x20;

let current = this.readMemory(FIRST, UINT64);

const namePtr = readMemory<number>(this.handle, current + NAME, UINT64);
const valuePtr = readMemory<number>(this.handle, namePtr - 0x60, UINT64);
const name = this.readString(namePtr);
const value = this.readString(valuePtr)

const next = readMemory<number>(this.handle, current, UINT64); // etc

I mean .. I haven't checked in retail quite yet, but in classic it seems it's stored in a pointer array (so not a linked list like OM)

Will peek on retail later tonight though 🤔

[Razzue]

After a quick dump/test, it seems my patterns are still accurate..
Pointer array starting @ 7FF684ACEC00 [Game + 39CEC00]
Pointers.JPG

Auto loot cvar is still @ ( [Game + 39CEC00] + 14 * 0x8 )
Though name and value offsets changed from classic
Seems value is at 0x14, then name you can get via pointer from 0x50, or just read the string from 0x68
AutoLoot.JPG

No idea if that's what you were going for :shrug: and i don't think all of these are writable either (I know you can write to auto loot and ctm(0/1), but not sure how much I trust that)

[Trioxygen]

After a quick dump/test, it seems my patterns are still accurate..
Pointer array starting @ 7FF684ACEC00 [Game + 39CEC00]
Pointers.JPG

Auto loot cvar is still @ ( [Game + 39CEC00] + 14 * 0x8 )
Though name and value offsets changed from classic
Seems value is at 0x14, then name you can get via pointer from 0x50, or just read the string from 0x68
AutoLoot.JPG

No idea if that's what you were going for :shrug: and i don't think all of these are writable either (I know you can write to auto loot and ctm(0/1), but not sure how much I trust that)

I will check later tonight. What I do is use a CVar to 'send' events from game to a fully out of process bot. Thanks a lot, will let you know.

[Thordekk]

someone have idb named?