ctfwriteup.com
Search…
⌃K

Until the Cows Come Home

In Player::GetFastTravelDestinations, there are 4 large basic blocks that contain important strings:
  • Town
  • UnbearableWoods
  • TailMountains
  • GoldFarm
Obviously, these are the locations that the player is able to travel to. Let's take a look at these 4 basic blocks:
Town
UnbearableWoods
TailMountains
GoldFarm
Each basic block contains the following information:
  • Two numbers that indicate the position of the destination in the UI presented to the player (these do not need to be changed and could be interpreted as 4 slots available).
  • A small number, which is very likely the length of the location's name.
  • The destination name (pointer to the destination name string).
Near the string "Town", we can find two hidden strings "Cowabungalow" and "CowLevel". These look like hidden locations:
Hidden locations Cowabungalow and CowLevel
Now we conclude:
Index
Destination
0x4
Town
0xf
UnbearbaleWoods
0xd
TailMountains
0x8
GoldFarm
0xc
Cowabungalow
0x8
CowLevel