|  |
WoW Memory Editing WoW Memory Editing for learning purposes only.
This section is more advanced than others on MMOwned Read the section specific rules, infractions will be given out if u break them!That is including the expectations! - If you don't meet them then don't post |
 | 
07-23-2009
| | New User | | | Join Date: Jun 2007
Posts: 39
Reputation: 1 Level up: 3%, 486 Points needed |   | | | Need Help with GetBattlefieldWinner
I've been searching for the static addy for GetBattlefieldWinner but I've had no luck. I've also heard that it may be broken now. I'm going to keep searching, but I only found the 3.1.2 address. This project doesn't use BlackMagic so please don't point me in that direction. Alternativly, I can find another method to determine if the BG is finished. If anyone has any ideas that would be great!
Last edited by 0_00_0; 07-23-2009 at 02:56 PM.
|
Donate to remove ads, get your "DONATOR title, and get access to the MMOwned community's elite Shoutbawx.
07-23-2009
| | Knight-Lieutenant | | | Join Date: Jan 2008
Posts: 277
Reputation: 18 Level up: 32%, 479 Points needed |  | | | Hook lua_Register, and find it yourself.
Pattern the 3.1.2 address, and apply that to the new WoW.exe.
Lua functions are _easy_ to get. |
07-23-2009
|  | Contributor | | | Join Date: May 2007 Location: Schockiland
Posts: 412
Reputation: 144 Level up: 92%, 71 Points needed | | | | 0x726C70
What does BlackMagic have to do with using vfuncs? |
07-23-2009
| | New User | | | Join Date: Jun 2007
Posts: 39
Reputation: 1 Level up: 3%, 486 Points needed | | | Quote:
Originally Posted by SKU  0x726C70
What does BlackMagic have to do with using vfuncs? | Sorry I haven't worked with BlackMagic yet i assumed that's how it worked.
So that address doesn't work for me. I tried reading as a bool in C++ and tried monitoring on CE as a 1 byte. Am I supposed to be reading it differently? |
07-23-2009
| | Knight-Lieutenant | | | Join Date: Jan 2008
Posts: 277
Reputation: 18 Level up: 32%, 479 Points needed | | | Quote:
Originally Posted by 0_00_0 Sorry I haven't worked with BlackMagic yet i assumed that's how it worked.
So that address doesn't work for me. I tried reading as a bool in C++ and tried monitoring on CE as a 1 byte. Am I supposed to be reading it differently? | Lol. It is a lua function. |
07-23-2009
|  | Knight-Lieutenant | | | Join Date: Apr 2009 Location: Germany
Posts: 352
Reputation: 13 Level up: 5%, 666 Points needed | | | Thats a really easy function to reverse. Have fun. Code: .text:00726C70 sub_726C70 proc near ; DATA XREF: .data:00A42BECo
.text:00726C70
.text:00726C70 var_C = qword ptr -0Ch
.text:00726C70 arg_0 = dword ptr 8
.text:00726C70
.text:00726C70 push ebp
.text:00726C71 mov ebp, esp
.text:00726C73 push ecx
.text:00726C74 cmp dword_11DA88C, 0
.text:00726C7B jnz short loc_726C92
.text:00726C7D mov eax, [ebp+arg_0]
.text:00726C80 push eax
.text:00726C81 call lua_pushnil
.text:00726C86 add esp, 4
.text:00726C89 mov eax, 1
.text:00726C8E mov esp, ebp
.text:00726C90 pop ebp
.text:00726C91 retn
.text:00726C92 ; ---------------------------------------------------------------------------
.text:00726C92
.text:00726C92 loc_726C92: ; CODE XREF: sub_726C70+Bj
.text:00726C92 mov ecx, dword_11DA890
.text:00726C98 fild dword_11DA890
.text:00726C9E test ecx, ecx
.text:00726CA0 jge short loc_726CA8
.text:00726CA2 fadd ds:dbl_9876D8
.text:00726CA8
.text:00726CA8 loc_726CA8: ; CODE XREF: sub_726C70+30j
.text:00726CA8 mov edx, [ebp+arg_0]
.text:00726CAB sub esp, 8
.text:00726CAE fstp [esp+0Ch+var_C]
.text:00726CB1 push edx ; int
.text:00726CB2 call lua_pushnumber
.text:00726CB7 add esp, 0Ch
.text:00726CBA mov eax, 1
.text:00726CBF mov esp, ebp
.text:00726CC1 pop ebp
.text:00726CC2 retn
.text:00726CC2 sub_726C70 endp
Second hint: Quote: |
Result: Integer - Faction/team that has won the battlefield. Results are: nil if nobody has won, 0 for Horde and 1 for Alliance in a battleground, 0 for Green Team and 1 for Yellow in an arena.
|
Last edited by flo8464; 07-23-2009 at 05:19 PM.
|
07-23-2009
|  | Warden's Mediator Legendary User | | | Join Date: Dec 2006 Location: Raping your Stack
Posts: 879
Nominated 10 Times in 3 Posts Reputation: 822 Points: 30,261, Level: 25 | Level up: 86%, 239 Points needed | | | Code: signed int __cdecl lua_GetBattlefieldWinner(int a1)
{
signed int result; // eax@2
if ( dword_11DA88C )
{
lua_pushnumber(a1, (long double)(unsigned int)dword_11DA890);
result = 1;
}
else
{
sub_91AF60(a1);
result = 1;
}
return result;
}
Hexrays really shines in situations like these.
Last edited by kynox; 07-23-2009 at 07:15 PM.
|
07-23-2009
| | Knight-Lieutenant | | | Join Date: Apr 2009 Location: Germany
Posts: 352
Reputation: 13 Level up: 5%, 666 Points needed | | | We are talking about the same function?
And which version are you using? For me it looks like: Code: signed int __thiscall sub_726C70(int this, int a2)
{
signed int result; // eax@2
double v3; // ST04_8@5
int v4; // [sp+8h] [bp-4h]@1
v4 = this;
if ( dword_11DA88C )
{
__asm { fild dword_11DA890 }
if ( dword_11DA890 < 0 )
__asm { fadd ds:dbl_9876D8 }
__asm { fstp [esp+0Ch+var_C] }
lua_pushnumber(a2, v3);
result = 1;
}
else
{
lua_pushnil(a2);
result = 1;
}
return result;
}
|
07-23-2009
| | Warden's Mediator Legendary User | | | Join Date: Dec 2006 Location: Raping your Stack
Posts: 879
Nominated 10 Times in 3 Posts Reputation: 822 Points: 30,261, Level: 25 | Level up: 86%, 239 Points needed | | | | The latest, with FPU support. That double you see, 9876D8(4.294967296e9) is used for casting an integer into a double if it exceeds 2^32 from my understanding. |
07-23-2009
|  | Kynox's sister's pimp Legendary User | | | Join Date: Apr 2006 Location: ntdll.dll
Posts: 4,577
Nominated 64 Times in 5 Posts  TOTM/W Award(s): 1 Reputation: 1120 Points: 64,180, Level: 37 | Level up: 47%, 2,020 Points needed | | | Quote:
Originally Posted by kynox The latest, with FPU support. That double you see, 9876D8(4.294967296e9) is used for casting an integer into a double if it exceeds 2^32 from my understanding. | Inb4 "where do I download it".
I still get people asking me where I downloaded the latest version of IDA (5.5), and they're shocked when I say "I bought it". |
07-23-2009
|  | Contributor | | | Join Date: Dec 2006 Location: 0x005FCB40
Posts: 415
Reputation: 164 Level up: 35%, 522 Points needed | | | Quote:
Originally Posted by Cypher Inb4 "where do I download it".
I still get people asking me where I downloaded the latest version of IDA (5.5), and they're shocked when I say "I bought it". |
Well IDA 5.5 isn't that expensive. But Hex-Rays is like $2299 USD, i would buy it.. if i had that much money to spend on a hobby. 
__________________  Thank You Scrubs, 2001 - 2009
|
07-23-2009
|  | MMOwned WebDev Legendary User | | | Join Date: Jan 2008
Posts: 2,268
Nominated 8 Times in 4 Posts Reputation: 1095 Points: 28,488, Level: 24 | Level up: 76%, 412 Points needed | | | Quote:
Originally Posted by Cypher Inb4 "where do I download it".
I still get people asking me where I downloaded the latest version of IDA (5.5), and they're shocked when I say "I bought it". | Did you buy HexRays too!?!?!?!!! |
07-23-2009
| | Kynox's sister's pimp Legendary User | | | Join Date: Apr 2006 Location: ntdll.dll
Posts: 4,577
Nominated 64 Times in 5 Posts TOTM/W Award(s): 1 Reputation: 1120 Points: 64,180, Level: 37 | Level up: 47%, 2,020 Points needed | | | Quote:
Originally Posted by Apoc Did you buy HexRays too!?!?!?!!! | Nah. I intend to eventually though. Currently I don't use it very much, I prefer converting the code from ASM to C myself. |
07-23-2009
| | Contributor | | | Join Date: Dec 2006 Location: 0x005FCB40
Posts: 415
Reputation: 164 Level up: 35%, 522 Points needed | | | Quote:
Originally Posted by Cypher Nah. I intend to eventually though. Currently I don't use it very much, I prefer converting the code from ASM to C myself. | One thing i found useful for hex-rays but is when a structure is referenced it will automatically detect (providing it has enough information, form return types ect.) and name it accordingly in the C code.
__________________ Thank You Scrubs, 2001 - 2009
| |
Posting Rules
| You may not post new threads You may not post replies You may not post attachments You may not edit your posts
HTML code is Off
| | |
All times are GMT -4. The time now is 04:59 AM.
|
