[HELP]Any tool to get Hashcode?

[AGPS]

Anybody tell me how to get Hashcode with some tool? Cheat Engine or IDA? Just like following Hasecode:

#define HASH_LOGIN_FIELD		0xde8625fccffdfc28
#define HASH_PASS_FIELD		0xba2d3316b4bb4104
#define HASH_LOGIN_BTN		0x50893593b5db22a9
#define HASH_AH_BTN			0xC66282304743ECB4
#define HASH_EQUIP_BTN		0x85fe1f4a7c2a9a9c
#define HASH_SEARCH_BTN		0x27fa61f93f895e08
#define HASH_CH_QUEST_BTN	0x0c4a9cc94c0a929b
#define HASH_DIFF_BOX			0x24c050d154bb1689
#define HASH_QUEST_BTN		0xf60e9396faec1cdf
#define HASH_SUBQUEST_BTN	0x1523a2c96e5dfec9
#define HASH_ACCEPT_BTN		0x1ae2209980aaea69
#define HASH_CONFIRM_BTN		0xb4433da3f648a992
#define HASH_START_BTN		0x51a3923949dc80b7
#define HASH_EXIT_GAME		0x5DB09161C4D6B4C6

[boredevil]

int __cdecl sub_854950() just call it. it will dump all loaded ui element names + hash to d3debug.txt

[AGPS]

Got it, thanks boredevil!!!

[AGPS]

Hi, boredevil, thanks very much for your tips, but I'm new with this. I found the corresponding codes in IDA, but I don't know how to invoke D3 functions like int __cdecl sub_854950(), should I use dll inject or some other methods?

.text:00854940 ; ---------------------------------------------------------------------------
.text:00854942                 align 10h
.text:00854950                 push    ebp
.text:00854951                 mov     ebp, esp
.text:00854953                 sub     esp, 210h
.text:00854959                 mov     eax, dword_169CC90
.text:0085495E                 xor     eax, ebp
.text:00854960                 mov     [ebp-4], eax
.text:00854963                 mov     eax, $ofs_ObjectManager
.text:00854968                 push    ebx
.text:00854969                 push    esi
.text:0085496A                 push    edi
.text:0085496B                 mov     edi, [eax+93Ch]
.text:00854971                 push    offset aDumpingUiMap ; "------------ Dumping UI map\n"
.text:00854976                 push    0
.text:00854978                 push    3
.text:0085497A                 push    2
.text:0085497C                 mov     [ebp-210h], edi
.text:00854982                 call    sub_F743E0
.text:00854987                 mov     ecx, [edi]
.text:00854989                 add     esp, 10h
.text:0085498C                 cmp     dword ptr [ecx+44h], 0
.text:00854990                 jnz     short loc_854996
.text:00854992                 xor     ebx, ebx
.text:00854994                 jmp     short loc_8549B5
.text:00854996 ; ---------------------------------------------------------------------------

[boredevil]

yes, you can do it with dll injection.

typedef int (__cdecl* tDumpUiMap)(void);  // make a typedef for the function call
tDumUiMap pFunction = reinterpret_cast<tDumpUiMap>(0x854950);  // create a function pointer of type tDumpUiMap and assign the functions address to it
pFunction();  // call it

[AGPS]

Thanks boredevil , I have done it with CreateRemoteThread. And I got these(just a part):

012.10.22 14:14:52.343813200	Root.NormalLayer.buffs_backgroundScreen.buff ActorInTownBuff:0:2018312327:0 dlg.text	-2253846668416988571
2012.10.22 14:14:52.344095800	Root.NormalLayer.character_details_container.character_details.region.stackpanel.category_offense.stackpanel.crit_damage_bonus.name	-1249166500374697553
2012.10.22 14:14:52.344293800	Root.NormalLayer.shop_dialog_mainPage.shop_item_region.item 1 2.text_name	-4378374163440546843
2012.10.22 14:14:52.344536800	Root.TopLayer.item 2.stack.frame body.stack.main.stack.wrapper.col2.class_reqs	5683326737568238479
2012.10.22 14:14:52.344729200	Root.TopLayer.pvp_match_summary.LayoutRoot.match_summary.ally_2_ready	5935822050921090741
2012.10.22 14:14:52.344901200	Root.NormalLayer.pvp_dialog_main.LayoutRoot.scoreboard.scoreboard_blue_player_1_highlight	7072718003140743052
2012.10.22 14:14:52.345020800	Root.NormalLayer	1
2012.10.22 14:14:52.345135500	Root	-2
2012.10.22 14:14:52.345250800	Root.TopLayer.recipe 2.stack.frame_bottom	1991894682164701610
2012.10.22 14:14:52.345364500	Root.NormalLayer.pvp_dialog_main.LayoutRoot.scoreboard.scoreboard_red_player_4_background	4829648076862657364
2012.10.22 14:14:52.345476200	Root.WindowLayer	2
2012.10.22 14:14:52.345586500	Root.TopLayer.trait 4.stack.body.stack	-9089588477002497165
2012.10.22 14:14:52.345696800	Root.TopLayer.trait 1.stack.top_wrapper	-3221303690352246433
2012.10.22 14:14:52.345807200	Root.TopLayer.in game portrait tooltip 0.TooltipContent.TooltipPlayerLocation	-5310520512701254215
2012.10.22 14:14:52.345918800	Root.NormalLayer.SkillPane_main.LayoutRoot.ActiveSkillSelect.SkillSelectionContainer.SkillSelectionList.SkillSlot2.SkillSelectionLevel	546467294264619288
2012.10.22 14:14:52.346029200	Root.NormalLayer.vendor_dialog_mainPage.enhance_dialog.panel	5324083900559403546
2012.10.22 14:14:52.346138200	Root.TopLayer	3
2012.10.22 14:14:52.346315500	Root.NormalLayer.portraits.stack.pet_stack.portrait_1.hpbar.background	-1105667075485666909
2012.10.22 14:14:52.346633800	Root.NormalLayer.game_dialog_main.HP_ProgressBar_189.background	-2739373454794980770
2012.10.22 14:14:52.347007200	Root.TopLayer.item 2.stack.frame body.width_maintainer	3235075646938580012
2012.10.22 14:14:52.347390500	Root.TopLayer.GameOptions_main.LayoutRoot.OverlayContainer.BattleNet.AuctionFAQ.unnamed156	-4498083395382028034
2012.10.22 14:14:52.347541200	Root.NormalLayer.game_dialog_main.HP_ProgressBar_2	-2319523286606606886
2012.10.22 14:14:52.347663500	Root.NormalLayer.inspect_mainPage.passive_skill_2	1451065292935927860
2012.10.22 14:14:52.347822800	Root.TopLayer.recipe 4.stack.frame body.stack.main.stack.wrapper.col1.stack.rating	-6562322968664698368
2012.10.22 14:14:52.347955800	Root.TopLayer.recipe 0.stack.frame body.stack	-5333924457012885520
2012.10.22 14:14:52.348078800	Root.NormalLayer.BattleNetProfile_main.LayoutRoot.OverlayContainer.HeroesTabContent.ProfileInventoryWindow	217891156382423773
2012.10.22 14:14:52.348212200	Root.NormalLayer.game_dialog_backgroundScreenPC.game_skill_hotbar_arrow_1	7506396466513683415
2012.10.22 14:14:52.348333200	Root.NormalLayer.character_details_container.character_details.region.stackpanel.category_adventurer.stackpanel.bonus_xp_per_kill.name	-5297258252509267032
2012.10.22 14:14:52.348452200	Root.NormalLayer.game_dialog_main.HP_ProgressBar_122.foreground	4797741571421624450
2012.10.22 14:14:52.348607200	Root.NormalLayer.game_dialog_main.HP_Text_82	-3653263560678100947

The hash value is decimal, not hexadecimal, some of them are minus(maybe overflow?), how can I convert the minus decimal hash value to hex value?

[boredevil]

converting it to hex is just "eyecandy" you can do it with the stl:

int main() {
    int64_t val = -5333924457012885520;

    cout <<                  val << std::endl;    
    cout <<        (uint64_t)val << std::endl; // convert to unsigned

    uint64_t uval = val; // compiler takes care for the automatic conversion
    cout << uval << std::endl;
   
    cout << std::hex <<           val << std::endl;
    cout << std::hex << (uint64_t)val << std::endl;

    return 0;
}  

output:

-5333924457012885520
13112819616696666096
13112819616696666096
b5fa17f778fa87f0
b5fa17f778fa87f0  

to sum it up. you can just store em all as int64 and use the negative values without problems. if a function takes an uint64 as argument, the compiler will automatically convert the int64 to uint64. and the hex values are just eyecandy...

[AGPS]

Got it, boredevil.
Another problem, as you said in another post, the sell item D3 function is 0x00A8C1A0 void(__cdecl*)(Acd*), so what's the function for identify an unid item, use an item(like drink health potion)? And how do you get these D3 functions?

[boredevil]

i got no clue how to ident items. sry

for drinking pots i just called the onclick function of the potion button. sarch for "UI_PotionButton_OnRightClick" go to the address where it is referenced. it will bring you to a function that initializes ui elements and it´s onclickfunctions.

.text:013B356D                 push    offset aUi_potionbutto ; "UI_PotionButton_OnLeftClick"
.text:013B3572                 mov     dword_1684708, eax
.text:013B3577                 mov     dword_168470C, offset sub_8B47C0
.text:013B3581                 mov     dword_1684710, offset aUi_potionbutto ; "UI_PotionButton_OnLeftClick"
.text:013B358B                 call    D3__HashString1real
.text:013B3590                 push    offset aUi_potionbut_0 ; "UI_PotionButton_OnRightClick"
.text:013B3595                 mov     dword_1684714, eax
.text:013B359A                 mov     dword_1684718, offset D3__Ui__PotionButton__OnLeftClick  

you can find many things by reading to the stringlist. i didn´t find the sellItem function on my own. i just got it´s address here on from ownedcore.
if you got an address for an older version of d3 you can just use ida + patchdiff2 to keep track of it from patch to patch.

edit:
instead of using the onclickfkt. you coud also use D3::ACD::UseItem to drink a pot

edit2:
to find the identify function you could search for this string: "UI_Inventory_OnRightClick". put a breakpoint on the onclick fkt and step through it. it should at some point lead you to what you are looking for.

[AGPS]

Very nice, boredevil, I can't thank you any more. I will try as your tips.