Here are the current relevant game scans:
Diablo III.exe ( Build: 1.0.3.10485)
Code:
0x00996210 0007 - [MAPHACK] GetMinimapMarker
0x00943cd0 0009 - [HACK_CMD] ConsoleInput
---------------------------------------------------------------------------
0x00748800 0014 - [HIDE CRASH] ExecErrorReport
0x00717ed0 0014 - [HIDE CRASH] UnhandledExceptionFilter
0x004a4730 0007 - [???] MenuCallBack
0x00458100 0010 - [PKT SNIFFER] ParseServerMessage
0x003cbe61 0008 - [PKT_SNIFFER] SendMessage
0x00351bb0 0010 - [???] GetEntityName
0x0032d286 0014 - [MAPHACK]
0x0032d22f 0015 - [MAPHACK]
0x003299d0 0015 - [MAPHACK] IsMinimapMarkerVisible
0x002d8761 0009 - [MAPHACK?] Target check crap
0x00263f30 0008 - [HACK_CMD?] ChatMsg
0x0020dea0 0012 - [PKT_SNIFFER] SendClientAction
0x0020999d 0011 - [PKT_SNIFFER] Intercepting client action
0x0017f860 0017 - [BOT] RenderGameFrame
0x0017cdc0 0010 - [BOT] Intercept action on entity
0x00150a00 0008 - [???] Window stuff
0x000c7700 0009 - [???] GetEntityAttrib
There are more but these are most relevant and unlikely to be fake.
Also the *Buddy bots are detectable by Warden... You see there is a scan function in Warden that goes over every DLL and makes a signature of it. That means, if you forcefully load 'any' DLL into Diablo III Warden can see it. It doesn't matter if you promise not to change the process, you actually have to physically hide to truly be undetectable to this anti-cheat. (for example: a ReadProcessMemory hook)
If Autoit injects any helper libraries into the target process that too could be causing bans.
There are over 80 unique scans returning to Blizzard the state of other DLLs loaded into the game process. That is any DLL loaded with LoadLibrary(), There is also 5 scans looking for any memory created with VirtualAlloc(...), this can also be stuff put on the heap via a new operator, HeapAlloc, or free(). As all of those ultimately being put into a VirtualAlloc'd memory space.
Hopefully this article will make people realize that warden is alive and real. Bot authors need to take a more aggressive stance against it if they hope to narrow down the detection mechanisms.
Here are the current relevant game scans:
