W3MPQFNs - Warcraft 3 MPQ filename detector

[xsuperloadx]

This my little program can detect every file which Warcraft 3 loads from any MPQ archive.
That doesn't mean it will detect every file in map archive, it generally detects less files than RMPQEx, but it could be useful if some jass trickery were used to hide filenames (I don't know such map, so I hope there are some :D).

Press Start to attach to Warcraft 3 process.
Press Stop to detach from Warcraft 3 process.

You can open MPQ archive and press save listfile in archive to save files which are in archive only.

It will probably need admin rights because it writes to Warcraft 3 process memory.

It works on versions 1.23a - 1.24b. I didn't test other versions, so it should work on more.
EDIT:
I forgot to mention that running more of these things at once can result in undefined behavior.

Details:
It changes 1st instruction in Ordinal268 exported function of Storm module (279 can also be used, but some filenames may miss) to jump to my allocated memory filled with my assembly code which sends filename string to my app, then it jumps back.

[Senethior459]

It looks pretty useful, thanks for sharing!

Are you the author of this, by the way?

Spoiler:

In case anyone doesn't trust it, it's probably safe. Results of a scan:
[ArcaVir]
2009-09-16 Found nothing
[G DATA]
2009-09-16 Found nothing
[A-Squared]
2009-09-16 Found nothing
[Ikarus]
2009-09-16 Found nothing
[Avast! antivirus]
2009-09-16 Found nothing
[Kaspersky Anti-Virus]
2009-09-16 Found nothing
[Grisoft AVG Anti-Virus]
2009-09-16 Found nothing
[ESET NOD32]
2009-09-16 Found nothing
[Avira AntiVir]
2009-09-16 Found nothing
[Norman Virus Control]
2009-09-16 Found nothing
[Softwin BitDefender]
2009-09-16 Found nothing
[Panda Antivirus]
2009-09-16 Found nothing
[ClamAV]
2009-09-16 Found nothing
[Quick Heal]
2009-09-16 Found nothing
[CPsecure]
2009-09-16 Found nothing
[Sophos]
2009-09-16 Found nothing
[Dr.Web]
2009-09-16 Found nothing
[VirusBlokAda VBA32]
2009-09-15 Found nothing
[Frisk F-Prot Antivirus]
2009-09-16 Found nothing
[VirusBuster]
2009-09-16 Found nothing
[F-Secure Anti-Virus]
2009-09-16 Found nothing

[Ken]

He would be.

I also must say, this is nice stuff. One suggestion I might make is that for saving files, make default extension be .txt. I dislike having to type it myself.

[xsuperloadx]

Yes, I'm author of this.

And I purposedly not added .txt as default extension to increase awareness of file extensions. I guess it's a stupid idea :D. k i'll fix it.

[Senethior459]

I like it not having the .txt extension. It's an extra four characters; if it actually mattered, you could type them yourself. But it doesn't. Also, when things have a .txt extension and I try to open them, it decides it's an executable text file (script) and asks me if i should run, open in terminal, edit, or cancel. The same exact file, but without .txt, will just open when I try to open it (Yes, this applies to Linux, but files without extensions can be opened by Windows, too. A text file without .txt at the end will still be opened in Notepad by doubleclicking it, as will most any format).

[duckweed2005]

I tested this on DotA All-Stars 6.64 and found out that to get almost all the filenames you either have to :

Method 1: go battle.net or Garena and play -wtf mode with other ppl with -ardm till all heros are picked (to load the data)

or

Method 2: do the same with AI (but theres no 6.64 AI yet)

Can't you add a function to load a existing listfile (like normal MPQ editors) to find out as many filenames as possible before doing the memory scanning part? This will make the process much easier and faster. Thx.


EDIT: Or it would be better to merge this with a MPQ editor =D

[M4R7yN]

Help me.

After loading of any maps, in listfile 2 lines:
Maps\Demo\mapname.w3x
(attributes)

[Fukki]

disable your war3 theme and try again

[M4R7yN]

disable your war3 theme and try again

1 warcraft3 with dota2hq mod
2 warcraft3 with standard theme

i check program on 1 and 2 warcraft3

All the same to delete?

[KangTooJee]

Help me.

After loading of any maps, in listfile 2 lines:
Maps\Demo\mapname.w3x
(attributes)

Please help me.. I got same problem as him..
I never install any war3 theme