WoW Memory Editing WoW Memory Editing for learning purposes only.
This section is more advanced than others on MMOwned Read the section specific rules, infractions will be given out if u break them! That is including the expectations! - If you don't meet them then don't post
09-26-2009
New User
Join Date: May 2008
Posts: 16
Reputation: 3
public const uint staticClientConnection = 0x1139F80, // client connection, same address every boot
objectManagerOffset = 0x2C34, // offset from the ClientConnection to the object manager
LocalGuid = 0x1118100
Thx Apoc :-D
Donate to remove ads, get your "DONATOR title, and get access to the MMOwned community's elite Shoutbawx.
09-26-2009
Contributor
Join Date: May 2007
Location: Dragon Shores
Posts: 690
Reputation: 167
Level up: 28%, 651 Points needed
Quote:
Originally Posted by
Smarter public const uint staticClientConnection = 0x1139F80, // client connection, same address every boot
objectManagerOffset = 0x2C34, // offset from the ClientConnection to the object manager
LocalGuid = 0x1118100
Thx Apoc :-D
The localguid is also stored as a member of the objectmanager.
[[0x1118100]+0x2C34]+0xC0 ] if my memory serves me right.
__________________
“Saying that Java is nice because it works on all OSes is like saying that anal sex is nice because it works on all genders.”
“If Java had true garbage collection, most programs would delete themselves upon execution.”
09-26-2009
Master Sergeant
Join Date: Apr 2009
Posts: 83
Reputation: 13
Level up: 23%, 388 Points needed
Lua_DoString : 0x007CF6B0 *Changed 3.2.2.10505
09-27-2009
Master Sergeant
Join Date: May 2008
Posts: 88
Reputation: 17
Level up: 32%, 342 Points needed
Lua_GetLocalizedText at 0x0069A2B0? Rather a question because I am a noob.
__________________
Viano
http://www.mmowned.com/forums/bots-programs/171327-wow-toons-name-generator.html
Last edited by Viano; 09-27-2009 at 12:49 PM .
09-27-2009
Corporal
Join Date: Jul 2006
Posts: 20
Reputation: 5
Level up: 24%, 380 Points needed
Should be: 0x0069ABF0
09-28-2009
Master Sergeant
Join Date: May 2008
Posts: 88
Reputation: 17
Level up: 32%, 342 Points needed
Quote:
Originally Posted by
MaiN New patch already O.o
Seems like statics didn't change
Code:
...
SetTarget found at 0x4C4940
...
ClickToMove found at 0x69F2D0
...
Those 2 seem to be wrong.
__________________
Viano
http://www.mmowned.com/forums/bots-programs/171327-wow-toons-name-generator.html
09-28-2009
New User
Join Date: Jun 2009
Posts: 4
Reputation: 1
Level up: 20%, 322 Points needed
Quote:
Originally Posted by
Smarter public const uint staticClientConnection = 0x1139F80, // client connection, same address every boot
objectManagerOffset = 0x2C34, // offset from the ClientConnection to the object manager
LocalGuid = 0x1118100
Thx Apoc :-D
Why is the client connection at the address 0x1139F80 = 0 for me?
I found a grate tutorial on how to find the client connection and off set on here that I should have bookmarked now I forget how to do it and cant find it with search. Anyone have it bookmark?
09-29-2009
Private
Join Date: Mar 2009
Posts: 2
Reputation: 5
Level up: 31%, 276 Points needed
Quote:
Originally Posted by
TheWolph Why is the client connection at the address 0x1139F80 = 0 for me?
I found a grate tutorial on how to find the client connection and off set on here that I should have bookmarked now I forget how to do it and cant find it with search. Anyone have it bookmark?
http://img11.imageshack.us/img11/917...tionandscu.jpg
That's how you find g_ClientConnection and the s_curMgr. curObj is s_curMgr + 0xAC.
09-29-2009
Site Donator
Join Date: Feb 2008
Posts: 161
Reputation: 17
Level up: 26%, 520 Points needed
Aura updates
Code:
AURA_COUNT_1 = 0xDD8, //3.2.0a 0x0DC8, //0xDB0, 3.1.3 old
AURA_COUNT_2 = 0xc5c, //0xF4C, //3.2.0a 0xC4C, //0xC34,
AURA_TABLE_1 = 0xC58, //3.2.0a 0xC48, //0xC30,
AURA_TABLE_2 = 0xC60, //3.2.0a 0xC50, //0xC38,
AURA_SIZE = 0x18,
AURA_SPELL_ID = 0x8
CAn you confirm it plz.
10-01-2009
Corporal
Join Date: Apr 2008
Posts: 17
Reputation: 7
Level up: 99%, 3 Points needed
My little contrib
Code:
[11:17:45]: CFindPattern : 0x7CF6B0 -> Lua_Dostring
[11:17:45]: CFindPattern : 0x7CE460 -> Lua_Register
[11:17:45]: CFindPattern : 0x8049F0 -> Lua_Error
[11:17:45]: CFindPattern : 0x401A30 -> Lua_Reload
[11:17:45]: CFindPattern : 0x803340 -> lua_gettop
[11:17:45]: CFindPattern : 0x803360 -> lua_settop
[11:17:45]: CFindPattern : 0x8033C0 -> lua_remove
[11:17:45]: CFindPattern : 0x803430 -> lua_insert
[11:17:45]: CFindPattern : 0x8034E0 -> lua_replace
[11:17:45]: CFindPattern : 0x8035C0 -> lua_pushvalue
[11:17:45]: CFindPattern : 0x803620 -> lua_type
[11:17:45]: CFindPattern : 0x803640 -> lua_typename
[11:17:45]: CFindPattern : 0x803660 -> lua_iscfunction
[11:17:45]: CFindPattern : 0x803690 -> lua_isnumber
[11:17:45]: CFindPattern : 0x8036D0 -> lua_isstring
[11:17:45]: CFindPattern : 0x803700 -> lua_rawequal
[11:17:46]: CFindPattern : 0x803750 -> lua_equal
[11:17:46]: CFindPattern : 0x803960 -> lua_tothread
[11:17:46]: CFindPattern : 0x803930 -> lua_tocfunction
[11:17:46]: CFindPattern : 0x8038C0 -> lua_objlen
[11:17:46]: CFindPattern : 0x8037A0 -> lua_tonumber
[11:17:46]: CFindPattern : 0x8037E0 -> lua_tointeger
[11:17:46]: CFindPattern : 0x803850 -> lua_tostring
[11:17:46]: CFindPattern : 0x803980 -> lua_touserdata
[11:17:46]: CFindPattern : 0x803820 -> lua_toboolean
[11:17:46]: CFindPattern : 0x803A10 -> lua_pushnumber
[11:17:46]: CFindPattern : 0x803A40 -> lua_pushinteger
[11:17:46]: CFindPattern : 0x803A70 -> lua_pushstring
[11:17:46]: CFindPattern : 0x803C40 -> lua_pushboolean
[11:17:46]: CFindPattern : 0x803B70 -> lua_pushcclosure
[11:17:46]: CFindPattern : 0x8039F0 -> lua_pushnil
[11:17:46]: CFindPattern : 0x804070 -> lua_setfield
[11:17:46]: CFindPattern : 0x804B20 -> lua_getfield
Function prototype can be found there
[Only registered and activated users can see links. ]
If somone know the address of lua_gettabble and lua_getglobal pls post it ^^
Tnx
10-01-2009
Contributor
Join Date: Sep 2006
Location: Jaedenar O.o
Posts: 569
Reputation: 162
Level up: 58%, 336 Points needed
Quote:
Originally Posted by
Viano Those 2 seem to be wrong.
They're not.
SetTarget is CGGameUI__Target (call it with a GUID)
ClickToMove is CGPlayer_C::ClickToMove
Signature for ClickToMove:
Code:
[UnmanagedFunctionPointer(CallingConvention.ThisCall)]
private delegate int ClickToMoveSignature(IntPtr baseAddress, ClickToMoveType clickType, [MarshalAs(UnmanagedType.LPArray, SizeConst = 2)] uint[] guid, [MarshalAs(UnmanagedType.LPArray, SizeConst = 3)] float[] clickPos, float precision);
__________________
http://www.main-dev.com/
I was here. ~Dragon[Sky] I was here too. ~Kuiren
10-01-2009
Sergeant
Join Date: Nov 2008
Posts: 67
Reputation: 32
Level up: 16%, 423 Points needed
Quote:
Originally Posted by
berserk85 My little contrib
Code:
[11:17:45]: CFindPattern : 0x7CF6B0 -> Lua_Dostring
[11:17:45]: CFindPattern : 0x7CE460 -> Lua_Register
[11:17:45]: CFindPattern : 0x8049F0 -> Lua_Error
[11:17:45]: CFindPattern : 0x401A30 -> Lua_Reload
[11:17:45]: CFindPattern : 0x803340 -> lua_gettop
[11:17:45]: CFindPattern : 0x803360 -> lua_settop
[11:17:45]: CFindPattern : 0x8033C0 -> lua_remove
[11:17:45]: CFindPattern : 0x803430 -> lua_insert
[11:17:45]: CFindPattern : 0x8034E0 -> lua_replace
[11:17:45]: CFindPattern : 0x8035C0 -> lua_pushvalue
[11:17:45]: CFindPattern : 0x803620 -> lua_type
[11:17:45]: CFindPattern : 0x803640 -> lua_typename
[11:17:45]: CFindPattern : 0x803660 -> lua_iscfunction
[11:17:45]: CFindPattern : 0x803690 -> lua_isnumber
[11:17:45]: CFindPattern : 0x8036D0 -> lua_isstring
[11:17:45]: CFindPattern : 0x803700 -> lua_rawequal
[11:17:46]: CFindPattern : 0x803750 -> lua_equal
[11:17:46]: CFindPattern : 0x803960 -> lua_tothread
[11:17:46]: CFindPattern : 0x803930 -> lua_tocfunction
[11:17:46]: CFindPattern : 0x8038C0 -> lua_objlen
[11:17:46]: CFindPattern : 0x8037A0 -> lua_tonumber
[11:17:46]: CFindPattern : 0x8037E0 -> lua_tointeger
[11:17:46]: CFindPattern : 0x803850 -> lua_tostring
[11:17:46]: CFindPattern : 0x803980 -> lua_touserdata
[11:17:46]: CFindPattern : 0x803820 -> lua_toboolean
[11:17:46]: CFindPattern : 0x803A10 -> lua_pushnumber
[11:17:46]: CFindPattern : 0x803A40 -> lua_pushinteger
[11:17:46]: CFindPattern : 0x803A70 -> lua_pushstring
[11:17:46]: CFindPattern : 0x803C40 -> lua_pushboolean
[11:17:46]: CFindPattern : 0x803B70 -> lua_pushcclosure
[11:17:46]: CFindPattern : 0x8039F0 -> lua_pushnil
[11:17:46]: CFindPattern : 0x804070 -> lua_setfield
[11:17:46]: CFindPattern : 0x804B20 -> lua_getfield
Function prototype can be found there
[Only registered and activated users can see links. ]
If somone know the address of lua_gettabble and lua_getglobal pls post it ^^
Tnx
lua_getfield should be (for 3.2.2.10505) 0x803D00, yours one points to luaL_findtable.
lua_gettable - 0x00803CD0
lua_getglobal is defined as
#define lua_getglobal(L,s) lua_getfield(L, LUA_GLOBALSINDEX, (s))
10-01-2009
Knight-Lieutenant
Join Date: Mar 2007
Posts: 263
Reputation: 38
Level up: 77%, 165 Points needed
Quote:
Originally Posted by
TheWolph Why is the client connection at the address 0x1139F80 = 0 for me?
I found a grate tutorial on how to find the client connection and off set on here that I should have bookmarked now I forget how to do it and cant find it with search. Anyone have it bookmark?
It's 0 for me aswell, something isnt right at my side or it's the wrong offset :X
10-01-2009
New User
Join Date: Mar 2008
Posts: 26
Reputation: 1
Level up: 16%, 422 Points needed
Quote:
Originally Posted by
FartBlast It's 0 for me aswell, something isnt right at my side or it's the wrong offset :X
I'm using pClientConnection = ReadInt(0x12705B0); and pObjMgr = ReadInt(pClientConnection + 0x2d94);
It's perfectly fine.
PS: IDA is da shit
Last edited by grosfilsdepute; 10-01-2009 at 10:41 PM .
Reason: img
10-02-2009
Corporal
Join Date: Jul 2009
Posts: 31
Reputation: 23
Level up: 15%, 599 Points needed
focus target guid = 0x0113D7C8
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
All times are GMT -4. The time now is 08:58 AM .