wow之找人物坐标

I think I found a way to track down dynamic allocated data: some static pointers(like player position) are very kindly mirrored by WoW into the dynamic zones, at known offsets.
The routine is pretty simple:
1. Read static pointer
2. Scan memory for that value
3. Move character just a bit
4. Repeat
5. ...
6. Profit?


Considering they are float and you know their exact value at any time by reading the static pointers, you only need maybe 3 or 4 scans of memory to identify the dynamic allocated memory origins.

Another aproach could be to track down the calls for kernel32.VirtualAlloc (11 calls in WoW) to find the start address of the dynamic data segments when they get allocated by the system.