Some Memory Address Pointers

[zewt]

just sharing some pointers i found. some may be useful, some maybe not enjoy.

Health: "Diablo III.exe"+00FF13E4 + 0x18 + 0xC8 + 0xC + 0x298 + 0x2C

[projectbarcelona]

Just a quick note. You have one listed as "Hatred" I tried it with my Wizard which doesn't have hatred, they have arcane power and it seems like it only shows the maximum arcane power not the current power unlike your health address which shows current health instead of maximum health. Would be interesting to be able to grab both current and maximum for both.

[JoshRMT]

I'm an experienced software developer, but very new to the reversing scene. I just have a real quick question regarding your memory addresses, don't be afraid to be as technical as necessary. I'm just wondering how you go about taking a memory address and then finding it based on the 'static address' you found originally. In other words, how would you find something like 'maximum health' and then trace it back to the original static address?

Thanks!

[caosmen]

Hi Josh,

try out the Cheat Engine Tutorials. Several Methods are there explained.
also you can scan around these areas of pointer to find near by information too. like scan for armor you see in the next 10 memories you dex, vit, and some more. one memory base with trees have most time near around other memorys who are in relation.

sorry for the bad explanation, my english isnt the best .

[BitHacker]

Edited: Lack of info...

[zewt]

Offsets are NFG... lol ....

Please see video...
Download reclass2.mp4 from Sendspace.com - send big files the easy way

0x18 + 0xC8 + 0xC


NOTHING BUT ZEROOOOOOOOOOOOO AT ALL THOSE LOCATIONS..

Anyone have the real offsets???

Really? Your saying my offsets are wrong and then asking for the right ones? lol

[sdq928]

Thanks.But all I see is zero.

[zewt]

Thanks.But all I see is zero.

sdq, i will check again tomorrow but if autopots was working for you like you said it was, these should work fine.

[EternalSilence]

just sharing some pointers i found. some may be useful, some maybe not enjoy.

Health: "Diablo III.exe"+00FE31CC + 0x18 + 0xC8 + 0xC + 0x2A0 + 0x14
Hatred: "Diablo III.exe"+00FE31CC + 0x18 + 0xC8 + 0xC + 0x1CC + 0x11C
Armor: "Diablo III.exe"+00FE31CC + 0x18 + 0xC8 + 0xC + 0x368 + 0x8

I found also what I believe to be a coordinate. Can anyone confirm whether this is truly an x or y coordinate?

In menu's i get a float value of: 64.72097778 (could be useful to detect if we are at menu or in a game)

Here it is:

"Diablo III.exe"+00DF2E84 + 0x8

Just some clarification for people.. you read the integer @ 00FE31CC, add 0x18 to it, read the integer again, add 0xC8, etc...

[truetarin]

Works fine for me, thanks!
Do you have any other addresses, e.g. coords?

[zewt]

Works fine for me, thanks!
Do you have any other addresses, e.g. coords?

Hey thanks for confirming. I found a pointer which i think is a coordinate but im not 100% on it. I will keep digging today at some point.

[ARMqt]

hey guys,

I just programming on an directx overlay and its done but i try to fill my test text with values but all I see is zeros too.

Just some clarification for people.. you read the integer @ 00FE31CC, add 0x18 to it, read the integer again, add 0xC8, etc...

yea ofc like

C# Code:
            int memoryaddress = 0x00FE31CC;
            int pointerbase;

            memoryvalue = oMemory.Read((IntPtr)memoryaddress, 4, out bytesread);
            pointerbase = BitConverter.ToInt32(memoryvalue, 0);
            pointerbase += 0x18;

            memoryvalue = oMemory.Read((IntPtr)pointerbase, 4, out bytesread);
            pointerbase = BitConverter.ToInt32(memoryvalue, 0);
            pointerbase += 0xC8;

            ...

but after add the 0xC8 offset the pointer points to nothing (debug code with VS)

I tested my code - another program with pointers like this "HP: 0x0057C310 + 0x98 + 0x4 + 0x288 + 0x24 + 0x458" too and it works

iam not really good with memory, maybe i get something wrong with the pointers?!


sorry for my english and mess up this thread.

EDIT: even with CE i found nothing

[truetarin]

                BlackMagic diablo = new BlackMagic();
                diablo.OpenProcessAndThread(SProcess.GetProcessFromWindowTitle("Diablo III"));
                IntPtr baseDiablo = diablo.MainModule.BaseAddress;
                Console.WriteLine("baseDiablo: " + baseDiablo);

                // Try to get current health
                uint value = diablo.ReadUInt((uint)baseDiablo + 0xFE31CC);
                value += 0x18;
                value = diablo.ReadUInt(value);
                value += 0xC8;
                value = diablo.ReadUInt(value);
                value += 0xC;
                value = diablo.ReadUInt(value);
                value += 0x2A0;
                value = diablo.ReadUInt(value);
                value += 0x14;
                float hp = diablo.ReadFloat(value);

Works for me

[ARMqt]

oh yea i forgot to add the base address "Diablo III.exe"+00FE31CC

well thx truetarin

[caosmen]

oh yea i forgot to add the base address "Diablo III.exe"+00FE31CC

well thx truetarin

HI,

i think you all forget the base... dont scam him that it not work. he proved it with a tool. and yes all work if you do it right way !