• Welcome to Valhalla Legends Archive.
 

Getting player names and IP from Warcraft 3's Memory.

Started by kinz, February 29, 2008, 07:05 AM

Previous topic - Next topic

kinz

Using OllyDBG or ArtMoney i can search Warcraft 3's memory for a known IP or username, i see its stored in some sort of structure which includes id, username, ip and port.

How do i search for it without knowing anyone's IP or username, there has to be some sort of reference or something?

iago

Find it once with a known username, set a breakpoint when it's read (or written), that'll give you a starting point.

Hope I helped! :)
This'll make an interesting test for broken AV:
QuoteX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


brew

kinz: the username seems to be statically stored.

.text:190299B7                 push    10h
.text:190299B9                 push    offset byte_19044C78
.text:190299BE                 lea     ecx, [ebp+var_10]
.text:190299C1                 push    ecx
.text:190299C2                 call    SStrNCpy

Hmmmm... looks like your answer is 19044C78!
<3 Zorm
Quote[01:08:05 AM] <@Zorm> haha, me get pussy? don't kid yourself quik
Scio te esse, sed quid sumne? :P

kinz

Ah thanks guys, looks like i have more to learn with the debugging. Ill try to see how you got to that bit of coding brew.

kinz

I take back my post