Diablo 3 Memory reading & writing

[yolo57]

Hi guys,

I came here after seeing tools like TurboHud and MapHack by Enigma,

I have some knowledge in disasembly language by resolving some "crack me" binary using GDB on Linux etc, and i was wondering when i was using your tools, "How can i do that? with which tools ? "

So i came there to ask you to introduce me, by giving me some answer if you don't mind, for these questions:

- How did you dump the D3 memory ? and the tools for it ? (IDA ?)
- How did you injecte into memory ? (which programing language are you using ? C# ? can i use another one ? like AutoIT ? Python?)
- What tools are needed from the first step to the last step ?

For exemple, for MapHack is simple and light tool which do the job, i wanna be able to do things like that, and not just some "crack me", so Enigma, if you read this, can you tell me, step by step how to develop tools like that ? something like:

1st - Dump D3 Ingame Memory with this "tool" ? how ?
2st - Read the memory and find what you are searching (for exemple, elite monster on map)
3st - Develop some code to inject in memory to show elite in map ?? How?
4st - Inject you code ??? How ?

Thanks a lot !!

[enigma32]

This is not for beginners, especially with current state of D3 with packer and encrypted pointers. But I'l humor you.

#1: I dump using task manager (right click process, Create dump file), or the Win32 API MiniDumpWriteDump.

#2: I started with IDA and HexRays Disassembler, identified algorithms and data structures (you basically need a degree in computer science for this), then ReadProcessMemory but it's kinda shit now with their packer and encrypted pointers

#3, #4 I have no experience with. I've never used a debugger or any type of inject/write with D3.


If I had tried to start reverse engineering D3 now, I'm fairly sure I wouldn't get anywhere.

[yolo57]

i got master degree in computer security, but never worked on things like that, but pretty well understand disassembly.

So then how do you write your code to spawn elite on map ingame for exemple ? with what language is this possible ? how do you attach your executable with D3 process ?

Thanks for your reply

[doityourself]

I haven't checked d3 and never worked with it, but isn't the protection almost the same like overwatch/WoW or hots? Shouldn't be a big problem to get around them then^^