My D3 botting framework

[barthen]

Download
BarthenBot.rar

What you'll find in the rar file:

- mid3advanced
My replacement for the original d3advanced.dll. Consist mainly of the assembly code of the original updated for the latest patch and a D3D EndScene Hook.

- D3Advanced .NET
Contains mostly the reflected source code of the original, with the Framelock crap removed

- ati2Net
This is a module manager for my bots. It searches the current directory for module dlls and tries to load them

- Snowshoes
This is my conversion of the Sarkoth bot created by nupogodi on blizzhackers. I added a Mira bot and an Auction House bot.

- ati2DemoModule
You don't need this to run the bot. It's just a module to test de API functions


My dll is not thread safe. Its functions should be called from Diablo's main thread. In Snowshoes you have examples on how to use it properly.

If you want to run the bot as it is you'll need a Wizard with the following skills:

- Hydra
- Teleport with wormhole rune
- Blizzard
- Archon
- Magic Weapon
- Familiar

There's also a Demon Hunter routine bit I didn't program it, so I don't know if it'll work as it is.

The included Witch Doctor routine was just for leveling through the Act 3 catapult (now nerfed).

----------------------

HOW TO USE IT

First you'll have to update the offsets to the latest version (the included source works with 1.0.3.10485)

If you want to use it right now, just compile mid3advanced, D3Advanced .NET, ati2Net and Snowshoes. On the Debug folder you should have all the dlls and a .bat file named carga.bat that loads a dll injector (edit the bat file to the correct folders or use another dll injector of your choice).

If the injection was successful, you should get a message box (I did it in order to attach a debugger easily). When you press Ok you should get a second messagebox if the .NET 4 CLR was loaded correctly. Press Ok again.

You should see your Diablo game with a red cross hair. Now you can use F11 to start my framework and F12 to stop it.

If you press F11 the Snowshoes window should appear. You need a wizard character with the savepoint at the gates of the cemetery. Go to you character login screen and press the green button to start Snowshoes.

What the bot does is teleport several times in a row to get closer to the cellar. If it's not there leave the game. If it's there cast Magic Weapon and Familiar, go into the cellar, cast Hydra and Blizzard on Sarkoth, cast Archon, kill stuff and pick up items.

It should sell and repair when needed too.

Hope you like it.


----------------------

WHY I'M POSTING THIS

The main reason is that Diablo 3 sucks a big time and I've had enough of it

Blizzard is the only company capable of destroying its franchises.

[karliky]

Thanks for sharing, I've also get bored of this game like you, now i'm waiting for Guild Wars 2

Offtopic: Eres español? Buen trabajo :P

[aadidassler]

Thanks for this. I'm building my own and this will definitely help me when I get stuck.

[kingwa5]

thinks barthen

[asdcxy]

i tried using the usepower function from your mid3advanced file

it now looks like this:

#define ACTOR_GETLOCALACTOR1 171A020h
#define ACTOR_GETLOCALACTOR2 9815A0h
#define ACTOR_GETLOCALACTOR3 82A380h
#define ACTOR_GETLOCALPLAYER3 811D10h
int _gameUsePowerCall = 0x97EF80;

typedef void* (__cdecl *tsub_817390)(int a1);
tsub_817390 GetACDPtrFromGUID = (tsub_817390)0x817390;

bool Game_UsePowerACD2(int power, void* acd) {
	_asm {
		push    ebp
		mov     ebp, esp
		sub     esp, 30h
		cmp     dword ptr ds:ACTOR_GETLOCALACTOR1, 0
		push    esi
		mov     esi, eax
		jz      short loc_1000465F
		mov     eax, ACTOR_GETLOCALACTOR2
		call    eax
		test    eax, eax
		jz      short loc_1000465F
		mov     eax, [eax+4]
		push    eax
		mov     ecx, ACTOR_GETLOCALPLAYER3
		call    ecx
		add     esp, 4
		test    eax, eax
		jnz     short loc_10004666
		
loc_1000465F:                           ; CODE XREF: sub_10004630+10j
		
		xor     al, al
		pop     esi
		mov     esp, ebp
		pop     ebp
		retn

		loc_10004666:                           ; CODE XREF: sub_10004630+2Dj
		mov     eax, [eax+8Ch]
		push    eax
		mov     edx, ACTOR_GETLOCALACTOR3
		call    edx
		mov     [ebp-8], eax
		xor     eax, eax
		mov     [ebp-48], eax
		mov     [ebp-44], eax
		mov     [ebp-40], eax
		mov     [ebp-36], eax
		mov     [ebp-16], eax
		mov     [ebp-32], eax
		mov     [ebp-28], eax
		mov     [ebp-24], eax
		mov     [ebp-20], eax
		mov     [ebp-12], eax
		mov     eax, [ebp+8]
		mov     ecx, [eax]
		add     esp, 4
		mov     [ebp-44], esi
		mov     [ebp-48], esi
		mov     dword ptr [ebp-40], 1
		mov     [ebp-36], ecx
		mov     dword ptr [ebp-16], 0FFFFFFFFh
		push    esi
		mov     eax, [ebp-8]
		lea     esi, [ebp-4]
		push    esi             ; _DWORD
		push    1               ; _DWORD
		push    1               ; _DWORD
		lea     esi, [ebp-48]
		call    _gameUsePowerCall
		add     esp, 0Ch
		pop     esi
		mov     [ebp-4], eax
		xor     eax, eax
		cmp     [ebp-4], eax
		pop     esi
		setnz   al
		mov     esp, ebp
		pop     ebp
		retn


	}
}

bool Game_UsePowerACD(int power, void* acd) {
	_asm {
		push    ebp
		mov     ebp, esp
		mov     eax, [ebp+12]
		push    eax
		mov     eax, [ebp+8]
		call    Game_UsePowerACD2
		add     esp, 4
		pop     ebp
		retn
	}
}

struct objmgrobj
{
	int guid_ractor; //0
	int guid_acd; // 4
	char name[64]; // 8
	DWORD unk1[4]; // 72
	DWORD actorlink; // 88
	DWORD unk2[21]; // 92
	WoWPos pos; // 176
	DWORD unk3[68]; // 188
	DWORD data1; // 460
	DWORD unk4[11];// 464
	DWORD data2; // 508
	DWORD unk5[96]; // 512
	ctmstruct* ctm; // 896
	DWORD unk6[41]; // 900
};
        bool UsePower(DWORD snopower, objmgrobj target)
        {
			void* pACD = GetACDPtrFromGUID(target.guid_acd);
            if (pACD != 0)
            {
                return Game_UsePowerACD(snopower, pACD);
            }
            return false;
        }

UsePower(SNOPowerId::Walk, tar);

but when i call it it crashes because it tries to write to 0x00000000
i didn't do much more than updating the offsets and i don't understand what's wrong now, thanks for your help