[INFO] D3 Memory Reading

[KillerJohn]

Many thanks KillerJohn

Your example code in the OP works great. However, it is my bad that I did not mention clear enough for what I actually needed. Actually, I should have said "remaining active buff time". For instance, in an image from your TurboHUD thread below:
Attachment 13147
Skill Diamond Skin in slot 3 shows its cooldown as 12 seconds and its remaining buff time as 5 seconds. (5 seconds is what I needed)

I tried adapting your code with attribute Buff_Active (0x204)

However, it returns either 1 (active) or 0 (inactive). So, I guess that I used the wrong attribute.

Could you please point out the right one?

Well it is a very complex problem. Every skill can have multiple "icons". Every icon can have a "count" (usually meaning the stacks, Buff_Icon_Count0) and a start (Buff_Icon_Start_Tick0) and a finish (Buff_Icon_End_Tick0) timestamp.
Most skills are using icon index 0 to store their buff data, but there are many (!) exceptions you have to hard-code in your code.
And there are very complex buffs, like Combination Strike, which has FOUR parallel internal icon data - each for a specific spirit generator...
Another example is the mantra of whatever for monk, which has two timers. Once for a very short shielding stuff and one for the skill buff itself.

TLDR: "remaining buff time" is not a simple value, but a 1:N relation and it's messed up like shit.

EDIT: also there are skills which has only one timer but the icon index is different for each Rune of the skill...

EDIT2: if you want specific hard coded skill remaining times, then here is a little help for diamond skin which is using icon index 0 for all of it's runes:

- Diamond skin skill is 0x1274F
- Buff_Icon_End_Tick0 attribute is 0x1F1

int SkillFinishTicks = GetAttribHelper(your_player_characters_acd_FormulaMapData, your_player_characters_acd_FormulaMapMask, 0x1F1, 0x1274F, 0);
double seconds_left = (SkillFinishTicks > CurrentTick) ? (SkillFinishTicks - CurrentTick) / 60.0d : 0;

[Basic32992]

Thanks again for your help KillerJohn

Hard coding is enough for me.

Edit: I have one more question... does the attribute mask concept apply with player's resource (eg. hatred/discipline, spirit, mana, etc.)?
I found a thread:
http://www.ownedcore.com/forums/diab...ml#post2550171 (How can i get the character attributes like life and mana?)
but I couldn't get the value of the resource from 0x408 (as it is stated that it was for 1.0.4).

[boredevil]

first read the attrib eGameAttributes::Resource_Type_Primary or eGameAttributes::Resource_Type_Secondary. that will give you the value, you need to mask eGameAttributes::Resource_Cur with

[Basic32992]

Thanks, boredevil

Got it now

[KillerJohn]

updated OP with 1.0.8 changes

[tuisful]

Hi
Thanks for ur work which give me a lot of inspiration
I've coded in Autoit but I used to be familiar with c#.
No offence, I went crazy with the large block of codes which obviously intend to realize various functionalities. Nonetheless, I checed
most of them, and I also found other infos sur this forum that some parts are not exactly like older version of D3, because all
my works fonction very well before 1.08

There is substantial divergence in acd address and acd_container, which may lead dis-function of all attribute-reading, I've made some
tests based on ur c# codes, unfortunately failed, thus I'd like to know ur results and opinion about this issue.

[KillerJohn]

Hi
Thanks for ur work which give me a lot of inspiration
I've coded in Autoit but I used to be familiar with c#.
No offence, I went crazy with the large block of codes which obviously intend to realize various functionalities. Nonetheless, I checed
most of them, and I also found other infos sur this forum that some parts are not exactly like older version of D3, because all
my works fonction very well before 1.08

There is substantial divergence in acd address and acd_container, which may lead dis-function of all attribute-reading, I've made some
tests based on ur c# codes, unfortunately failed, thus I'd like to know ur results and opinion about this issue.

Sorry, my english is not perfect, and I don't really understand what you are talking about.
First post is already updated and have to work in 1.0.8.
Those C# codes in OP works perfectly in TurboHUD.

[tuisful]

Sorry, my english is not perfect, and I don't really understand what you are talking about.
First post is already updated and have to work in 1.0.8.
Those C# codes in OP works perfectly in TurboHUD.

thanks for ur reply which is what I needed - the fact that it works in 1.08, I will keeping trying
lol, I've read ur reply in another thread[named 1.0.8.16416 offsets], wish u guys can figure out what the new data structure in 1.08
since I thought it could be the cause to my failure

[tuisful]

thanks for ur reply which is what I needed - the fact that it works in 1.08, I will keeping trying
lol, I've read ur reply in another thread[named 1.0.8.16416 offsets], wish u guys can figure out what the new data structure in 1.08
since I thought it could be the cause to my failure

Finally it works
I comfirm ur codes are absolutly correct, thank u

[KillerJohn]

updated OP with 1.0.8a changes (ObjectManager offset)

        public readonly int SNOGroup_StringList_Addr = 0x18DD188;
        public readonly int SNOGroup_GameBalance_Addr = 0x18E0198;
        public readonly int CharacterManager_address = 0x1833EC4;

updated OP with code for player data reading

[shopher]

Join Date: 6/5 post: 1
But anyway.

First of all it is great to see all this data and person who is digging tons of data to get D3 exploration easier. Thank you.
The question I had is have you consider to write simple kernel-level driver to read D3 memory. Are you sure that the API you're using in TurboHUD is not being monitored by Blizz?

            public bool ReadMem(int addr, object O, int size)
            {
                return ReadProcessMemory(iProcessHandle, (IntPtr)addr, O, size, 0);
            }

            [DllImport("kernel32.dll", SetLastError = true)]
            public static extern bool ReadProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress, [Out, MarshalAs(UnmanagedType.AsAny)] object lpBuffer, int dwSize, int lpNumberOfBytesRead);

It is pretty much detectable: Detecting ReadProcessMemory - Sysinternals Forums
http://stackoverflow.com/questions/1...cations-memory

Also do you provide R\O or R\W access to the TurboHUD sources?

[KillerJohn]

Join Date: 6/5 post: 1
But anyway.

First of all it is great to see all this data and person who is digging tons of data to get D3 exploration easier. Thank you.
The question I had is have you consider to write simple kernel-level driver to read D3 memory. Are you sure that the API you're using in TurboHUD is not being monitored by Blizz?



It is pretty much detectable: Detecting ReadProcessMemory - Sysinternals Forums
windows - Who read/write my application's memory - Stack Overflow

Also do you provide R\O or R\W access to the TurboHUD sources?

1) most data I have is not found by me. Other people found them ages ago, I just collected them, made them up-to-date, corrected them, understood them, improved and re-published. I'm not some kind of low-level digger, because I'm noob for that.
2) I have no idea what Blizzard monitors, and I don't care about it. They could detect memory reading apps since 10 years, but they never did. I have to think that they are not allowed (for any reason) to detect what is accessing their process handle, or just they can't use that information as proof.
3) TurboHUD's source is closed. If I have time, I publish some code and methods here, regarding memory reading and structures.

[DarthTon]

The question I had is have you consider to write simple kernel-level driver to read D3 memory. Are you sure that the API you're using in TurboHUD is not being monitored by Blizz?

To be able to monitor memory reads from another process warden needs to hook NtReadVirtualMemory in that particular process or kernel. This can be prevented either by making your process protected or by executing NtReadVirtualMemory syscall manually.

[shopher]

2) I have no idea what Blizzard monitors, and I don't care about it. They could detect memory reading apps since 10 years, but they never did. I have to think that they are not allowed (for any reason) to detect what is accessing their process handle, or just they can't use that information as proof.

Would you use your primary D3 acc to run TurboHUD with?

3) TurboHUD's source is closed. If I have time, I publish some code and methods here, regarding memory reading and structures.

Thanks,

[shopher]

To be able to monitor memory reads from another process warden needs to hook NtReadVirtualMemory in that particular process or kernel. This can be prevented either by making your process protected or by executing NtReadVirtualMemory syscall manually.

Yep, I thought ReadProcessMemory allocates buffer and does RPC call to remote NtReadVirtualMemory which can be hooked. But looks like ReadProcessMemory is a wrapper around NtReadVirtualMemory which is inproc and goes directly to kernel to copy memory of remote process.

Thanks.