| | WoW Memory Editing WoW Memory Editing for learning purposes only.
This section is more advanced than others on MMOwned Read the section specific rules, infractions will be given out if u break them!That is including the expectations! - If you don't meet them then don't post |  | | 
07-03-2009
| | Site Donator | | | Join Date: Sep 2008
Posts: 138
Reputation: 8 Level up: 47%, 377 Points needed |  | | | Checking for global cooldown I've been trying to find a way to check if the global cooldown is active (or if I am for whatever reason unable to cast anything), but have been unsuccessful. Right now I am calculating how long it should be based on haste and am waiting for that period of time.. but that's awfully kludgy. Is there a way to check for this? | Donate to remove ads, get your "DONATOR title, and get access to the MMOwned community's elite Shoutbawx. 
07-03-2009
| | Knight-Lieutenant | | | Join Date: Jan 2008
Posts: 275
Reputation: 17 Level up: 21%, 558 Points needed |  | | | You can use either UnitCastingInfo() or GetSpellCooldown().
I believe it is possible to do through those, however could be a better way. | 
07-03-2009
|  | MaiN's Biatch Legendary User | | | Join Date: Mar 2007 Location: VirtualAllocEx
Posts: 1,115
Nominated 26 Times in 3 Posts  TOTM/W Award(s): 1 Reputation: 727 Points: 36,171, Level: 28 | Level up: 95%, 129 Points needed |     | | sub_805B10 seems to set a bool that indicates if there's global cooldown present at
sub_805B10 + 2F
mov dword ptr [esi+0D8h], 1
and the other function that set's it false, sub_805AD0
sub_805AD0 + 2F
mov dword ptr [esi+0D8h], 0
they are completly identical except for that the one at sub_805AD0 set's it to 0 and the other one 1
Im not sure if it's related but you could take a look atleast it wont hurt  | 
07-04-2009
|  | Kynox's sister's pimp Legendary User | | | Join Date: Apr 2006 Location: ntdll.dll
Posts: 4,185
Nominated 63 Times in 4 Posts  TOTM/W Award(s): 1 Reputation: 1085 Points: 55,512, Level: 35 | Level up: 14%, 3,188 Points needed |     | | | Fyi, the actual GCD is stored globally as a countdown timer measured in milliseconds.
Too lazy to dig up the address right now because I just moved house, but bump this thread in a couple of days and I might. | 
07-06-2009
| | Site Donator | | | Join Date: Sep 2008
Posts: 138
Reputation: 8 Level up: 47%, 377 Points needed |  | | | From what I see those two functions get called all the time. Even when I mountain walk off to an area with no other NPCs/players it gets spammed when I'm not casting. I see no consistency in the arg passed to the function. How do you know these functions pertain to GCD? | 
07-07-2009
|  | MaiN's Biatch Legendary User | | | Join Date: Mar 2007 Location: VirtualAllocEx
Posts: 1,115
Nominated 26 Times in 3 Posts  TOTM/W Award(s): 1 Reputation: 727 Points: 36,171, Level: 28 | Level up: 95%, 129 Points needed |     | | | I found them with MHS when i checked it looked as if they were only used when GCD is present :s | 
07-07-2009
|  | Contributor | | | Join Date: Oct 2006 Location: In your attic.
Posts: 1,205
Reputation: 148 Level up: 25%, 831 Points needed |     | | | A private server is good for this because you can speed hack your game and slow it down for use with something like CheatEngine.
The GCD though should start at say 500(ms) then count down to 0(ms); Anyways Good luck! | 
07-07-2009
| | Site Donator | | | Join Date: Mar 2007
Posts: 766
Reputation: 20 Level up: 31%, 629 Points needed |     | | | Don't you mean 1500ms? Also, just use MHS to speedhack on live on a trial :P It takes quite a while to get caught. Usually. | 
07-07-2009
|  | MaiN's Biatch Legendary User | | | Join Date: Mar 2007 Location: VirtualAllocEx
Posts: 1,115
Nominated 26 Times in 3 Posts  TOTM/W Award(s): 1 Reputation: 727 Points: 36,171, Level: 28 | Level up: 95%, 129 Points needed |     | | Isnt warden looking for API hooks on GTC and QPC?
It sure looked like that not long ago | 
07-07-2009
| | Site Donator | | | Join Date: Mar 2007
Posts: 766
Reputation: 20 Level up: 31%, 629 Points needed |     | | | They are, but you could write a hook for the wrapper function around them, or on the specific calls to the function(in the movement handler, in the spell class, etc). This is going to be my strategy for speeding again. Might migrate to XP(in a VM ofcourse) and just do a kernel hook. I'd like verification from kynox or boogieman that that's how they're detecting it though. Not sure about the server-side detection...
Anyways, usually you don't get caught very quickly speeding on live. Since the chance for them to do the scan for QPC/GTC is random(possibly weighted though). | 
07-08-2009
| | Knight-Lieutenant | | | Join Date: Jan 2008
Posts: 275
Reputation: 17 Level up: 21%, 558 Points needed |  | | Quote:
Originally Posted by lanman92 They are, but you could write a hook for the wrapper function around them, or on the specific calls to the function(in the movement handler, in the spell class, etc). This is going to be my strategy for speeding again. Might migrate to XP(in a VM ofcourse) and just do a kernel hook. I'd like verification from kynox or boogieman that that's how they're detecting it though. Not sure about the server-side detection...
Anyways, usually you don't get caught very quickly speeding on live. Since the chance for them to do the scan for QPC/GTC is random(possibly weighted though). | Thats not how they're detecting it.. | 
07-08-2009
|  | Warden's Mediator Legendary User | | | Join Date: Dec 2006 Location: Raping your Stack
Posts: 774
Nominated 2 Times in 1 Post Reputation: 797 Points: 28,091, Level: 24 | Level up: 53%, 809 Points needed |     | | | The only API hooks Blizzard are checking for are mimic-specific GetCursorPos hooks.
They use a sneaky method for detecting speed hacks. You'll need Warden knowledge to find out how. | 
07-08-2009
|  | Kynox's sister's pimp Legendary User | | | Join Date: Apr 2006 Location: ntdll.dll
Posts: 4,185
Nominated 63 Times in 4 Posts  TOTM/W Award(s): 1 Reputation: 1085 Points: 55,512, Level: 35 | Level up: 14%, 3,188 Points needed |     | | Quote:
Originally Posted by kynox The only API hooks Blizzard are checking for are mimic-specific GetCursorPos hooks.
They use a sneaky method for detecting speed hacks. You'll need Warden knowledge to find out how. |
I reckon with enough windows internals knowledge it would be possible to come up with a workaround without even looking at Warden. | 
07-08-2009
| | Knight-Lieutenant | | | Join Date: Jan 2008
Posts: 275
Reputation: 17 Level up: 21%, 558 Points needed |  | | Quote:
Originally Posted by kynox The only API hooks Blizzard are checking for are mimic-specific GetCursorPos hooks.
They use a sneaky method for detecting speed hacks. You'll need Warden knowledge to find out how. | It is pretty sneaky! | 
07-08-2009
| | Site Donator | | | Join Date: Mar 2007
Posts: 766
Reputation: 20 Level up: 31%, 629 Points needed |     | | Quote:
Originally Posted by kynox The only API hooks Blizzard are checking for are mimic-specific GetCursorPos hooks.
They use a sneaky method for detecting speed hacks. You'll need Warden knowledge to find out how. | Well. I guess I'll start looking at warden now. Any tips? |  | |
Posting Rules
| You may not post new threads You may not post replies You may not post attachments You may not edit your posts HTML code is Off | | | All times are GMT -4. The time now is 06:33 AM. |