Warface Reverse Engineering, Addresses and Resources Thread

[_PuRe.LucK*]

Wanted to make a RE thread to bring some magicz in MPGH.

To start off:

- Warface dump (look at attachment)

struct SSystemGlobalEnvironment
{
	IDialo****tem*                pDialo****tem;
	I3DEngine*                    p3DEngine;
	INetwork*                     pNetwork;
	ICryLobby*                    pLobby;
	IScriptSystem*                pScriptSystem;
	IPhysicalWorld*               pPhysicalWorld;
	IFlowSystem*                  pFlowSystem;
	IInput*                       pInput;
	IMusicSystem*                 pMusicSystem;
	IStatoscope*                  pStatoscope;
	IAnimationGraphSystem*        pAnimationGraphSystem;
	ICryPak*                      pCryPak;
	IFileChangeMonitor*           pFileChangeMonitor;
	IProfileLo****tem*            pProfileLo****tem;
	IParticleManager*             pParticleManager;
	IOpticsManager*               pOpticsManager;
	IFrameProfileSystem*          pFrameProfileSystem;
	ITimer*                       pTimer;
	ICryFont*                     pCryFont;
	IGame*                        pGame;
	ILocalMemoryUsage*            pLocalMemoryUsage;
	IEntitySystem*                pEntitySystem;
	IConsole*                     pConsole;
	Telemetry::ITelemetrySystem*  pTelemetrySystem;
	ISoundSystem*                 pSoundSystem;
	ISystem*                      pSystem;
	ICharacterManager*            pCharacterManager;
	IAISystem*                    pAISystem;
	ILog*                         pLog;
	ICodeCheckpointMgr*           pCodeCheckpointMgr;
	IMovieSystem*                 pMovieSystem;
	INameTable*                   pNameTable;
	IVisualLog*                   pVisualLog;
	IRenderer*                    pRenderer;
	IHardwareMouse*               pHardwareMouse;
	IMaterialEffects*             pMaterialEffects;
	JobManager::IJobManager*      pJobManager;
	ISoftCodeMgr*                 pSoftCodeMgr;
	IGameStream*                  pGameStream;
	IOverloadSceneManager*        pOverloadSceneManager;
	IFlashUI*                     pFlashUI;
	IServiceNetwork*              pServiceNetwork;
	IRemoteCommandManager*        pRemoteCommandManager;
};

class SSystemGlobalEnvironment
{
public:
      //...
	IRenderer* getIRenderer() 
	{ 
		return (IRenderer*)*(DWORD*)((DWORD)this + 0x78); 
	} 
};

class IRenderer
{
public:
    virtual void Function0(); 
    virtual void Function1(); 
    virtual void Function2(); 
    virtual void Function3(); 
    virtual void Function4(); 
    virtual void Function5(); 
    virtual void Function6(); 
    virtual void Function7(); 
    virtual void Function8(); 
    virtual void Function9(); 
    virtual void Function10(); 
    virtual void Function11(); 
    virtual void Function12(); 
    virtual void Function13(); 
    virtual void Function14(); 
    virtual void Function15(); 
    virtual void Function16(); 
    virtual void Function17(); 
    virtual void Function18(); 
    virtual void Function19(); 
    virtual void Function20(); 
    virtual void Function21(); 
    virtual void Function22(); 
    virtual void Function23(); 
    virtual void Function24(); 
    virtual void Function25(); 
    virtual void Function26(); 
    virtual void Function27(); 
    virtual void Function28(); 
    virtual void Function29(); 
    virtual void Function30(); 
    virtual void Function31(); 
    virtual void Function32(); 
    virtual void Function33(); 
    virtual void Function34(); 
    virtual void Function35(); 
    virtual void Function36(); 
    virtual void Function37(); 
    virtual void Function38(); 
    virtual void Function39(); 
    virtual void Function40(); 
    virtual void Function41(); 
    virtual void Function42(); 
    virtual void Function43(); 
    virtual void Function44(); 
    virtual void Function45(); 
    virtual void Function46(); 
    virtual void Function47(); 
    virtual void Function48(); 
    virtual void Function49(); 
    virtual void Function50(); 
    virtual void Function51(); 
    virtual void Function52(); 
    virtual void Function53(); 
    virtual void Function54(); 
    virtual void Function55(); 
    virtual int  GetWhiteTextureId();
    virtual void Draw2dImage (float xpos,float ypos,float w,float h,int texture_id,float s0=0,float t0=0,float s1=1,float t1=1,float angle=0,float r=1,float g=1,float b=1,float a=1,float z=1);
    virtual void Function58(); 
    virtual void Function59(); 
    virtual void Function60(); 
    virtual void Function61(); 
    virtual int  SetPolygonMode(int mode);
    virtual int  GetHeight(); 
    virtual int  GetWidth(); 
    virtual void Function65(); 
    virtual void Function66(); 
    virtual void Function67(); 
    virtual void Function68(); 
    virtual void Function69(); 
    virtual void Function70(); 
    virtual void Function71(); 
    virtual void Function72(); 
    virtual void Function73(); 
    virtual void Function74(); 
    virtual void Function75(); 
    virtual void Function76(); 
    virtual void Function77(); 
    virtual void Function78(); 
    virtual void Function79(); 
    virtual void Function80(); 
    virtual void Function81(); 
    virtual void Function82(); 
    virtual void Function83(); 
    virtual void Function84(); 
    virtual void Function85(); 
    virtual void Function86(); 
    virtual void Function87(); 
    virtual void Function88(); 
    virtual void Function89();
    virtual void Function90();
    virtual void Function91();
    virtual void Function92();
    virtual void Function93();
    virtual void Function94();
    virtual void Function95();
    virtual void Function96();
    virtual void Function97();
    virtual void Function98();
    virtual void Function99();
    virtual void Function100();
    virtual void Function101();
    virtual void Function102();
    virtual void Function103();
    virtual void Function104();
    virtual void Function105();
    virtual void Function106();
    virtual void Function107();
    virtual void Function108();
    virtual void Function109();
    virtual void Function110();
    virtual void Function111();
    virtual void Function112();
    virtual void Function113();
    virtual void Function114();
    virtual void Function115();
    virtual void Function116();
    virtual void Function117();
    virtual void Function118();
    virtual void Function119();
    virtual void Function120();
    virtual void Function121();
    virtual void Function122();
    virtual void Function123();
    virtual void Function124();
    virtual void Function125();
    virtual void Function126();
    virtual void Function127();
    virtual void Function128();
    virtual void Function129();
    virtual void Function130();
    virtual void Function131();
    virtual void Function132();
    virtual void Function133();
    virtual void Function134();
    virtual void Function135();
    virtual void Function136();
    virtual void Function137();
    virtual void Function138();
    virtual void Function139();
    virtual void Function140();
    virtual void Function141();
    virtual void Function142();
    virtual void Function143();
    virtual void Function144();
    virtual void Function145();
    virtual void Function146();
    virtual void Function147();
    virtual void Function148();
    virtual void Function149();
    virtual void Function150();
    virtual void Function151();
    virtual void Function152();
    virtual void Function153();
    virtual void Function154();
    virtual void Function155();
    virtual void Function156();
    virtual void Function157();
    virtual void Function158();
    virtual void Function159();
    virtual void Function160();
    virtual void Function161();
    virtual void Function162();
    virtual void Function163();
    virtual void Function164();
    virtual void Function165();
    virtual void Function166();
    virtual void Function167();
    virtual void Function168();
    virtual void Function169();
    virtual void Function170();
    virtual void Function171();
    virtual void Function172();
    virtual void Function173();
    virtual void Function174();
    virtual void Function175();
    virtual void Function176();
    virtual void Function177();
    virtual void Function178();
    virtual void Function179();
    virtual void Function180();
    virtual void Function181();
    virtual void Function182();
    virtual void Function183();
    virtual void Function184();
    virtual void Function185();
    virtual void Function186();
    virtual void Function187();
    virtual void Function188();
    virtual void Function189();
    virtual void Function190();
    virtual void Function191();
    virtual void Function192();
    virtual void Function193();
    virtual void Function194();
    virtual void Function195();
    virtual void Function196();
    virtual void Function197();
    virtual void Function198();
    virtual void Function199();
    virtual void Function200();
    virtual void DrawLabel( );
    virtual void Function202();
    virtual void Function203();
    virtual void Function204();
    virtual void Function9999();
    virtual void SetState(int State, int AlphaRef=-1);
    virtual void Function206();
    virtual void Function207();
    virtual void Function208();
    virtual void Function209();
    virtual void Function210();
    virtual void Function211();
    virtual void Function212();
    virtual void Function213();
    virtual void Function214();
    virtual void Function215();
    virtual void Function216();
    virtual void Function217();
    virtual void Function218();
    virtual void Function219();
    virtual void Function220();
    virtual IRenderAuxGeom* GetIRenderAuxGeom();
};

Pointer to class:

mov     eax, ds:dword_1725C18

SSystemGlobalEnvironment *g_pSSGE = (DWORD*)0x1725C18

bool WorldToScreen(float* vEntPos, float* vOut)
{
    pRenderer->ProjectToScreen( vEntPos[0], vEntPos[1], vEntPos[2], &vOut[0], &vOut[1], &vOut[2] ); 
    
    if( vOut[2] < 0.0f  || vOut[2] > 1.0f ) {
        return 0;
    }
    vOut[0] *= ( 640  / 100.0f ); 
    vOut[1] *= ( 480 / 100.0f );
    vOut[2] *= 1.0f; 
     
    return ( (vOut[2] < 1.0f) ); 
}

ProjectToScreen is a pointer to a function in the IRenderer class which you can achieve using by initializing it with the SSystemGlobalEnvironment class.

with that you are able to access pRenderer which has some nice render functions and worldtoscreen matrix

[Timeless74]

does not work.
When I start the program opens a message that says is missing ij15.dll

[advHack]

That's because it's not a hack. It is a dumped version of the Game, only developers can use this.

By the way.. This is just copy & pasted from another site.. And the information is given is outdated (beside the SSGEV pointer).. The source you copied is from February 2013.. Great work..