usepower wrapper

[_Mike]

_Mike, I think you can just spam that function. Have you tried that? Though, I do remember playing with the first 2 args (with 0's and 1's).

Yes I could, but that just feel so hack-ish I would prefer to do it the same way the client itself does it.
To me, getting things working or getting a finished "product" isn't all that important. I'm basically just reversing Diablo to understand how it works.

[ChrisSch]

ChrisSh, I was using the same function in beta. I haven't bothered with my bot after retail.. yet (stuck at inferno right now).

I didn't recognize the hold position problem because I always explicitly walked up to mobs beforehand.

But I just pulled up OllDbg and did some testing with a barb.

Let me note some findings.

1. 0097A310 calls 0097A0D0
2. The first spell ID is the spell the character is "trying" to cast. The second one is the actual spell ID. For example, if the barb is out of fury, the rend skill will just turn into a normal attack.
3. the 3rd DWORD in the use-power struct is 2 when your mouse is not hovering over mobs.
4. The 8th DWORD is the first RActor GUID (i.e. 772E0000)

I don't have a real solution for the hold position problem. But it's easily circumvented by just checking the distances and walking up to the mobs explicitly. If further probing of the function at 0097A0D0 is futile, you can try 0097A310.

I tried everything with the old function. And no success yet.
I don't know why I can't get 0097A0D0 to work, no matter what I do.
But with 0097A310 it works perfectly. That function seems to be much more robust, at the cost of not being able to cast on positions.
Well, I'll use both functions now one for walking and one for attacking

Thanks to everyone who helped!!


_Mike:
Stuff like "Crippling Wave" has a combo-counter, you can look for that.
It gets incremented on each attack and it's time based.
That means when you wait to long (~750ms) it gets reset to 0.

The function itself is called the same way all the time.

So you can spam the spell each frame. It doesn't matter.
Only if you wait too long it won't do the combo attack.

The game client calls the function as fast as the player clicks.
But I don't know how it handles the situation where the player holds down the mousebutton...

[BitHacker]

xzidez,

Did you ever get your asm wrapper question answered? lol I seen the conversation change a little.

-Bit_Hacker

[Tanaris4]

Question for all, I've been able to set up all the registers properly, but for some reason when I compile it wants to over-write EAX with the function ptr to UsePower then do call eax. Has anyone run into this? Or now how to prevent this from happening?

How I'm doing it (note: OS X, so assembly syntax which is op src, dest):

#define UsePower ((signed int (*)(void))0x7028F0)
    // Step 7: Copy RActor struct ptr into eax
    //mov     eax, [ebp+var_AC]
    ptr = (int)&RActorStruct;
    __asm__ __volatile__("movl %0, %%eax" : "=g" (ptr));
    
    //call    UsePower
    UsePower();

When compiled it then does:

0x235e8ead <_Z10_use_poweri+284>:	mov    $0x7028f0,%eax
0x235e8eb2 <_Z10_use_poweri+289>:	call   *%eax

Edit: Fixed, just moved function pointer to ebx and called that

[xzidez]

xzidez,

Did you ever get your asm wrapper question answered? lol I seen the conversation change a little.

-Bit_Hacker

Funny is that it worked again in the retail version.. so no probs now. I still have no idea what the problem was. : D
And since the thread derailed I didnt really repost here

Tanaris4. Yes thats how Ive done it aswel as you can see in my second post