MMOwned - World of Warcraft Exploits, Hacks, Bots and Guides

Homepage Register FAQ Members Mark Forums Read Advertise Marketplace FPSowned


Go Back   MMOwned - World of Warcraft Exploits, Hacks, Bots and Guides > World of Warcraft > Bots and Programs > WoW Memory Editing
Reload this Page White Paper : Memory reading
WoW Memory Editing WoW Memory Editing for learning purposes only.

Reply
 
LinkBack Thread Tools
(#16)
Old
tttommeke is Offline
Banned
Rep Power: 0
Reputation: 1
tttommeke is a name known to all
 
Posts: 632
Join Date: Jul 2007
12-07-2007

I don't code in C# but the know z and the dynamic z must be searched in the same types
Reply With Quote

Donate to remove ads.
(#17)
Old
localhostage is Offline
Site n00b.. (A leecher if I've been here for more than a month and can't earn 5 rep)
Rep Power: 2
Reputation: 1
localhostage is an unknown quantity at this point
 
Posts: 14
Join Date: Aug 2007
12-07-2007

as in they must both be searched as a float (4 byte) value? i've converted my buffer (byte[] array) into float and did sucessfully obtain the correct Z value. so next i tried to scan upwards to find the dynamic Z but to no avail. sometimes i'd find it but then tried to hit the found player base address + 0xA54C (mana) to locate the dynamic mana, but that returns 0. so i think i'm deffinately doing something wrong here when scanning for my base address.
Reply With Quote
(#18)
Old
tttommeke is Offline
Banned
Rep Power: 0
Reputation: 1
tttommeke is a name known to all
 
Posts: 632
Join Date: Jul 2007
12-07-2007

Float != 4Byte, I just discovered that searching in 4 byte will just give you a faster result (not much change but...)

Float : -454,4466
4Byte = 22554564
Reply With Quote
(#19)
Old
schlumpf's Avatar
schlumpf is Offline
^Nothing is as it seems.

Rep Power: 5
Reputation: 551
schlumpf is a name known to allschlumpf is a name known to allschlumpf is a name known to allschlumpf is a name known to allschlumpf is a name known to allschlumpf is a name known to all
 
Posts: 1,539
Join Date: Nov 2006
Location: Germany (DE)
12-07-2007

dont use those "4 byte" / "2 byte" names ... its still Long ("8 byte"), Integer ("4 byte"), Short ("2 byte"), Byte / Character, float, double (float*2)..
Reply With Quote
(#20)
Old
tttommeke is Offline
Banned
Rep Power: 0
Reputation: 1
tttommeke is a name known to all
 
Posts: 632
Join Date: Jul 2007
12-07-2007

Easier to use those schlumpf, because I also could say dword etc and then nobody would understand it.
Reply With Quote
(#21)
Old
localhostage is Offline
Site n00b.. (A leecher if I've been here for more than a month and can't earn 5 rep)
Rep Power: 2
Reputation: 1
localhostage is an unknown quantity at this point
 
Posts: 14
Join Date: Aug 2007
12-07-2007

okay so i am searching by 4 byte but using the BitConverter class to convert into a float. You think if i change to converting into a Int16 this might fix it? i'm at work now and can't test the code so won't be able to do testing till i get home.

or did i just confuse my self, i think i need to do BitConvert.ToDouble(); since double = float * 2 correct? and you said float is a 2 byte.

*edit* i found this page [Only registered and activated users can see links. ] which states:


float 4 bytes
float _Complex 8 bytes
double 8 bytes
double _Complex 16 bytes
long double 8 bytes

Code:
            int z = 0xDBBCDC;
            int start = 0x07000BF0;
            int offset = 0x2000;

            ProcessMemoryReader procMemReader = new ProcessMemoryReader();
            procMemReader.ReadProcess = GetProcess();
            procMemReader.OpenProcess();

            int bytesRead = 0;
            byte[] staticZbuff = procMemReader.ReadProcessMemory((IntPtr)z, 4, out bytesRead);
            int knownZ = BitConverter.ToInt16(staticZbuff, 0);

            int dynamicZ;
            do
            {
                // read
                byte[] playerStart = procMemReader.ReadProcessMemory((IntPtr)start, 4, out bytesRead);
                dynamicZ = BitConverter.ToInt16(playerStart, 0);

                // increment
                start += offset;
            } while (dynamicZ != knownZ);

            procMemReader.CloseHandle();

            Console.WriteLine("found player address @ {0}", start - 0xBF0);
            Console.ReadKey();

Last edited by localhostage; 12-07-2007 at 04:27 PM.
Reply With Quote
(#22)
Old
Cypher's Avatar
Cypher is Offline
Kynox's Pimp OMGRECURSION
Legendary User
Rep Power: 9
Reputation: 793
Cypher is a splendid one to beholdCypher is a splendid one to beholdCypher is a splendid one to beholdCypher is a splendid one to beholdCypher is a splendid one to beholdCypher is a splendid one to beholdCypher is a splendid one to behold
 
Posts: 2,009
Join Date: Apr 2006
Location: Your mums bedroom
12-08-2007

Quote:
Originally Posted by tttommeke View Post
Easier to use those schlumpf, because I also could say dword etc and then nobody would understand it.
Dword is a typdef not a new data type, just use the normal names.



If freedom is outlawed, only outlaws will have freedom.
I'm not being rude, you're just insignificant.
Reply With Quote
(#23)
Old
tttommeke is Offline
Banned
Rep Power: 0
Reputation: 1
tttommeke is a name known to all
 
Posts: 632
Join Date: Jul 2007
12-08-2007

Yes I know it is, but I never really saw the normal names because everyone is using others. The standard types are unknown to me
Reply With Quote
(#24)
Old
localhostage is Offline
Site n00b.. (A leecher if I've been here for more than a month and can't earn 5 rep)
Rep Power: 2
Reputation: 1
localhostage is an unknown quantity at this point
 
Posts: 14
Join Date: Aug 2007
12-08-2007

okay i found the base address, silly mistakes. i've verified by pulling dynamic x,y,z but when i do base + heath or mana i get 0. are those accurate?
Reply With Quote
(#25)
Old
Cypher's Avatar
Cypher is Offline
Kynox's Pimp OMGRECURSION
Legendary User
Rep Power: 9
Reputation: 793
Cypher is a splendid one to beholdCypher is a splendid one to beholdCypher is a splendid one to beholdCypher is a splendid one to beholdCypher is a splendid one to beholdCypher is a splendid one to beholdCypher is a splendid one to behold
 
Posts: 2,009
Join Date: Apr 2006
Location: Your mums bedroom
12-09-2007

Quote:
Originally Posted by tttommeke View Post
Yes I know it is, but I never really saw the normal names because everyone is using others. The standard types are unknown to me
http://msdn2.microsoft.com/en-us/library/aa383751.aspx

There you go.



If freedom is outlawed, only outlaws will have freedom.
I'm not being rude, you're just insignificant.
Reply With Quote
(#26)
Old
Croak is Offline
Site Donator
Rep Power: 1
Reputation: 8
Croak is an unknown quantity at this point
 
Posts: 61
Join Date: Dec 2007
12-13-2007

Nice read. I used to toy around in Gunbound with TSearch, it will be fun to hop back into memory editing.
Reply With Quote
(#27)
Old
Wonderland is Offline
Private
Rep Power: 2
Reputation: 8
Wonderland is an unknown quantity at this point
 
Posts: 10
Join Date: Jun 2007
12-19-2007

Very good post =) +rep
Reply With Quote
(#28)
Old
Miguel9614 is Offline
Corporal
Rep Power: 2
Reputation: 25
Miguel9614 is on a distinguished road
 
Posts: 30
Join Date: Aug 2007
01-21-2008

I found this quite useful, thank you. I'd love if you made some more like it, maybe some info on the mob structs? Forgive me, I've only just started =P
Reply With Quote
(#29)
Old
suicidity is Offline
Banned
Rep Power: 0
Reputation: 89
suicidity will become famous soon enough
 
Posts: 652
Join Date: Oct 2006
Location: In your attic.
01-21-2008

Mig i will be posting an updated Source to the public MMOwned bot.

I'm only going to be releasing the base because the community hasn't supported the project yet and hasn't put forth effort to contribute to it, but it will have last patches' cheap mob structs it has the player structs and is a complete base ready to be a bot.

I'll post it after I finish my job.
Reply With Quote
(#30)
Old
Miguel9614 is Offline
Corporal
Rep Power: 2
Reputation: 25
Miguel9614 is on a distinguished road
 
Posts: 30
Join Date: Aug 2007
01-22-2008

Thanks suicidity, sounds good. I was actually going to try and contribute to it, but VB express was giving me a stupid error when I tried to compile. But I'm looking forward to the updated source.
Reply With Quote
Reply

Donate to remove ads.

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On



Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.2.0
vBulletin Skin developed by: vBStyles.com


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344