HP Structure (Reclass) to be used in a hacks.. [0.1.0d]

**yandev** · 01-15-2025

Is anyone able to find the offsets for the amount of exalted orbs in inventory, and the amount of exalted orbs in a stack? Struggling hard to find them

Originally Posted by KronosQC

Updated 14-01-2025 for last update !

My scipt is

Code:

import ctypes
import pymem
import pymem.process
import ctypes.wintypes
import time

def FindDMAAddy(hProc, base, offsets, arch=64):
    size = 8 if arch == 64 else 4
    address = ctypes.c_uint64(base)
    for offset in offsets:
        ctypes.windll.kernel32.ReadProcessMemory(hProc, address, ctypes.byref(address), size, 0)
        address = ctypes.c_uint64(address.value + offset)
    return address.value

def main():
    process_name = "PathOfExileSteam.exe"
    pointer = 0x03B8FEE8
    offsets = {
        "CurMP": [0x60, 0x68, 0x38, 0x30, 0x208, 0x7C],
        "MaxMP": [0x38, 0x18, 0x40, 0x20, 0x208, 0x80],
    }

    try:
        # Attach to the process
        pm = pymem.Pymem(process_name)
        print(f"Connected to process: {process_name}")
        hProc = pm.process_handle
        base_pointer = pm.base_address + pointer

        # Continuously print current and maximum mana values
        while True:
            cur_mp_address = FindDMAAddy(hProc, base_pointer, offsets["CurMP"], 64)
            max_mp_address = FindDMAAddy(hProc, base_pointer, offsets["MaxMP"], 64)

            cur_mp = pm.read_int(cur_mp_address)
            max_mp = pm.read_int(max_mp_address)

            mana_percentage = (cur_mp / max_mp * 100) if max_mp != 0 else 0

            print(f"Current Mana: {cur_mp}, Maximum Mana: {max_mp}, Mana Percentage: {mana_percentage:.2f}%")

            time.sleep(0.5)  # Update every 0.5 seconds

    except Exception as e:
        print(f"An error occurred: {e}")

if __name__ == "__main__":
    main()

And my console gives me : Current Mana: 5671, Maximum Mana: 1111913399, Mana Percentage: 0.00%

So I feel like using your offsets the current mana is in reality my maximum mana, are you sure these offsets are correct?

**KronosQC** · 01-15-2025

Originally Posted by yandev

Is anyone able to find the offsets for the amount of exalted orbs in inventory, and the amount of exalted orbs in a stack? Struggling hard to find them

My scipt is

Code:

import ctypes
import pymem
import pymem.process
import ctypes.wintypes
import time

def FindDMAAddy(hProc, base, offsets, arch=64):
    size = 8 if arch == 64 else 4
    address = ctypes.c_uint64(base)
    for offset in offsets:
        ctypes.windll.kernel32.ReadProcessMemory(hProc, address, ctypes.byref(address), size, 0)
        address = ctypes.c_uint64(address.value + offset)
    return address.value

def main():
    process_name = "PathOfExileSteam.exe"
    pointer = 0x03B8FEE8
    offsets = {
        "CurMP": [0x60, 0x68, 0x38, 0x30, 0x208, 0x7C],
        "MaxMP": [0x38, 0x18, 0x40, 0x20, 0x208, 0x80],
    }

    try:
        # Attach to the process
        pm = pymem.Pymem(process_name)
        print(f"Connected to process: {process_name}")
        hProc = pm.process_handle
        base_pointer = pm.base_address + pointer

        # Continuously print current and maximum mana values
        while True:
            cur_mp_address = FindDMAAddy(hProc, base_pointer, offsets["CurMP"], 64)
            max_mp_address = FindDMAAddy(hProc, base_pointer, offsets["MaxMP"], 64)

            cur_mp = pm.read_int(cur_mp_address)
            max_mp = pm.read_int(max_mp_address)

            mana_percentage = (cur_mp / max_mp * 100) if max_mp != 0 else 0

            print(f"Current Mana: {cur_mp}, Maximum Mana: {max_mp}, Mana Percentage: {mana_percentage:.2f}%")

            time.sleep(0.5)  # Update every 0.5 seconds

    except Exception as e:
        print(f"An error occurred: {e}")

if __name__ == "__main__":
    main()

And my console gives me : Current Mana: 5671, Maximum Mana: 1111913399, Mana Percentage: 0.00%

So I feel like using your offsets the current mana is in reality my maximum mana, are you sure these offsets are correct?

"CurMP": [0x60, 0x68, 0x38, 0x30, 0x208, 0x7C],
"MaxMP": [0x38, 0x18, 0x40, 0x20, 0x208, 0x80],

CurMp Seems to be correct, but for maxmp you didnt changed the offsets : [0x38, 0x18, 0x40, 0x20, 0x208, 0x80],
ah sorry just saw that i miss copy pasted the offsets let me fix right now XD

Edit: Fixed in first post.. these are the offsets needed:
{0x60, 0x68, 0x38, 0x20, 0x208,

**KronosQC** · 01-15-2025

Just tested working good..

test3.png

**yandev** · 01-15-2025

Originally Posted by KronosQC

"CurMP": [0x60, 0x68, 0x38, 0x30, 0x208, 0x7C],
"MaxMP": [0x38, 0x18, 0x40, 0x20, 0x208, 0x80],

CurMp Seems to be correct, but for maxmp you didnt changed the offsets : [0x38, 0x18, 0x40, 0x20, 0x208, 0x80],
ah sorry just saw that i miss copy pasted the offsets let me fix right now XD

Edit: Fixed in first post.. these are the offsets needed:
{0x60, 0x68, 0x38, 0x20, 0x208,

Using your offsets from first post I can still only access your current mana (which is max mana)
when I try to access "MaxMP": [0x60, 0x68, 0x38, 0x20, 0x208, 0x80],
I get the error
Error accessing memory: Could not read memory at: 1773200000, length: 4 - GetLastError: 299

**nttrung9x** · 01-15-2025

Hi, can you scan out the offsets of Energy?

**KronosQC** · 01-15-2025

Originally Posted by yandev

Using your offsets from first post I can still only access your current mana (which is max mana)
when I try to access "MaxMP": [0x60, 0x68, 0x38, 0x20, 0x208, 0x80],
I get the error
Error accessing memory: Could not read memory at: 1773200000, length: 4 - GetLastError: 299

I've only found the pointer + offsets for health but it should be the same offsets used before for mana and energy shield, i'll take a look in reclass just to see if these remains unchanged..

**yandev** · 01-16-2025

Originally Posted by KronosQC

I've only found the pointer + offsets for health but it should be the same offsets used before for mana and energy shield, i'll take a look in reclass just to see if these remains unchanged..

Thanks, keep us updated

**XORReverseEngineering** · 01-18-2025

PoE v0.1.1

Code:

"PathOfExile.exe"+03CC4858 { 0x380, 0x0, 0x128, 0x80, 0x2A8, 0x230 } 4 Bytes // current mana
"PathOfExile.exe"+03CC4858 { 0x380, 0x0, 0x128, 0x80, 0x2A8, 0x22C } 4 Bytes // total mana
"PathOfExile.exe"+03CC4858 { 0x380, 0x0, 0x128, 0x80, 0x2A8, 0x1E0 } 4 Bytes // current health
"PathOfExile.exe"+03CC4858 { 0x380, 0x0, 0x128, 0x80, 0x2A8, 0x1DC } 4 Bytes // total health without reservation
"PathOfExile.exe"+03CC4858 { 0x380, 0x0, 0x128, 0x80, 0x2A8, 0x268 } 4 Bytes // current ES
"PathOfExile.exe"+03CC4858 { 0x380, 0x0, 0x128, 0x80, 0x2A8, 0x264 } 4 Bytes // total ES

I also find health with reservation and the rest of the health offsets, without mana

Code:

"PathOfExile.exe"+03CC4858 { 0x380, 0x0, 0x2B0, 0xC8, 0x68, 0x50, 0x378 } 4 Bytes // current health
"PathOfExile.exe"+03CC4858 { 0x380, 0x0, 0x2B0, 0xC8, 0x68, 0x50, 0x380 } 4 Bytes // health with reservation
"PathOfExile.exe"+03CC4858 { 0x380, 0x0, 0x2B0, 0xC8, 0x68, 0x50, 0x37C } 4 Bytes // total health
"PathOfExile.exe"+03CC4858 { 0x380, 0x0, 0x2B0, 0xC8, 0x68, 0x50, 0x384 } 4 Bytes // current ES
"PathOfExile.exe"+03CC4858 { 0x380, 0x0, 0x2B0, 0xC8, 0x68, 0x50, 0x388 } 4 Bytes // total ES

**Zdetyh** · 01-19-2025

Hi guys,

Just edited this Python script with XORR updated offsets.
The script keeps returning this :

Could not read memory at: 200, length: 8 - GetLastError: 299
Could not read memory at: 200, length: 8 - GetLastError: 299
Could not read memory at: 200, length: 8 - GetLastError: 299

Code:

import asyncio
import time

import win32api
import win32con
import win32gui
from pymem import Pymem


process_name = "PathOfExile.exe"
pm = Pymem(process_name)
base_offset = 0x03CC4858
base_address = pm.base_address + base_offset
handle = win32gui.FindWindow(None, "Path of Exile 2")
offsets = {
    "CurHP": [0x380, 0x2B0, 0xC8, 0x68, 0x50, 0x378],
    "MaxHP": [0x380, 0x2B0, 0xC8, 0x68, 0x50, 0x37C],
    "CurMP": [0x380, 0x128, 0x80, 0x2A8, 0x230],
    "MaxMP": [0x380, 0x128, 0x80, 0x2A8, 0x22C],
    
}
# Heals %
hp_threshold = 75
mp_threshold = 20


def get_final_address(pm: Pymem, base_address: int, offsets: list[int]) -> int:
    addr = pm.read_longlong(base_address)
    for offset in offsets[:-1]:
        addr = pm.read_longlong(addr + offset)
    return addr + offsets[-1]


async def hp_routine():
    while True:
        try:
            curhp_address = get_final_address(pm, base_address, offsets["CurHP"])
            # print(f"curhp_address: {curhp_address}")
            maxhp_address = get_final_address(pm, base_address, offsets["MaxHP"])
            # print(f"maxhp_address: {maxhp_address}")

            current_hp = pm.read_int(curhp_address)
            max_hp = pm.read_int(maxhp_address)

            hp_percent = (current_hp / max_hp) * 100 if max_hp != 0 else 0
            # print(f"HP: {current_hp} / {max_hp} ({hp_percent})")

            if hp_percent <= hp_threshold:
                win32api.PostMessage(handle, win32con.WM_KEYDOWN, ord("1"), 0)
                win32api.PostMessage(handle, win32con.WM_KEYUP, ord("1"), 0)
                current_time = time.strftime("%H:%M:%S")
                print(f"[{current_time}]: Used HP potion")
                await asyncio.sleep(0.5)
            await asyncio.sleep(0.2)
        except Exception as e:
            print(str(e))


async def mp_routine():
    while True:
        try:
            curmp_address = get_final_address(pm, base_address, offsets["CurMP"])
            # print(f"curmp_address: {curmp_address}")
            maxmp_address = get_final_address(pm, base_address, offsets["MaxMP"])
            # print(f"maxmp_address: {maxmp_address}")

            current_mp = pm.read_int(curmp_address)
            max_mp = pm.read_int(maxmp_address)

            mp_percent = (current_mp / max_mp) * 100 if max_mp != 0 else 0
            # print(f"MP: {current_mp} / {max_mp} ({mp_percent})")

            if mp_percent <= mp_threshold:
                win32api.PostMessage(handle, win32con.WM_KEYDOWN, ord("2"), 0)
                win32api.PostMessage(handle, win32con.WM_KEYUP, ord("2"), 0)
                current_time = time.strftime("%H:%M:%S")
                print(f"[{current_time}]: Used MP potion")
                await asyncio.sleep(0.5)
            await asyncio.sleep(0.2)
        except Exception as e:
            print(str(e))
            
async def main():
    async with asyncio.TaskGroup() as tg:
        print(f"Autoheal is ON")
        tg.create_task(hp_routine())
        tg.create_task(mp_routine())


if __name__ == "__main__":
    asyncio.run(main())

Any idea where the issue is ? Sorry I'm very new to coding, but keen to progress. Haven't found a tangible explanation online. My assumption are that the Offsets are not the ones I have. (yes I have the correct game version)
Thanks

**XORReverseEngineering** · 01-19-2025

Originally Posted by Zdetyh

Hi guys,

Just edited this Python script with XORR updated offsets.
The script keeps returning this :

Could not read memory at: 200, length: 8 - GetLastError: 299
Could not read memory at: 200, length: 8 - GetLastError: 299
Could not read memory at: 200, length: 8 - GetLastError: 299

Code:

import asyncio
import time

import win32api
import win32con
import win32gui
from pymem import Pymem


process_name = "PathOfExile.exe"
pm = Pymem(process_name)
base_offset = 0x03CC4858
base_address = pm.base_address + base_offset
handle = win32gui.FindWindow(None, "Path of Exile 2")
offsets = {
    "CurHP": [0x380, 0x2B0, 0xC8, 0x68, 0x50, 0x378],
    "MaxHP": [0x380, 0x2B0, 0xC8, 0x68, 0x50, 0x37C],
    "CurMP": [0x380, 0x128, 0x80, 0x2A8, 0x230],
    "MaxMP": [0x380, 0x128, 0x80, 0x2A8, 0x22C],
    
}
# Heals %
hp_threshold = 75
mp_threshold = 20


def get_final_address(pm: Pymem, base_address: int, offsets: list[int]) -> int:
    addr = pm.read_longlong(base_address)
    for offset in offsets[:-1]:
        addr = pm.read_longlong(addr + offset)
    return addr + offsets[-1]


async def hp_routine():
    while True:
        try:
            curhp_address = get_final_address(pm, base_address, offsets["CurHP"])
            # print(f"curhp_address: {curhp_address}")
            maxhp_address = get_final_address(pm, base_address, offsets["MaxHP"])
            # print(f"maxhp_address: {maxhp_address}")

            current_hp = pm.read_int(curhp_address)
            max_hp = pm.read_int(maxhp_address)

            hp_percent = (current_hp / max_hp) * 100 if max_hp != 0 else 0
            # print(f"HP: {current_hp} / {max_hp} ({hp_percent})")

            if hp_percent <= hp_threshold:
                win32api.PostMessage(handle, win32con.WM_KEYDOWN, ord("1"), 0)
                win32api.PostMessage(handle, win32con.WM_KEYUP, ord("1"), 0)
                current_time = time.strftime("%H:%M:%S")
                print(f"[{current_time}]: Used HP potion")
                await asyncio.sleep(0.5)
            await asyncio.sleep(0.2)
        except Exception as e:
            print(str(e))


async def mp_routine():
    while True:
        try:
            curmp_address = get_final_address(pm, base_address, offsets["CurMP"])
            # print(f"curmp_address: {curmp_address}")
            maxmp_address = get_final_address(pm, base_address, offsets["MaxMP"])
            # print(f"maxmp_address: {maxmp_address}")

            current_mp = pm.read_int(curmp_address)
            max_mp = pm.read_int(maxmp_address)

            mp_percent = (current_mp / max_mp) * 100 if max_mp != 0 else 0
            # print(f"MP: {current_mp} / {max_mp} ({mp_percent})")

            if mp_percent <= mp_threshold:
                win32api.PostMessage(handle, win32con.WM_KEYDOWN, ord("2"), 0)
                win32api.PostMessage(handle, win32con.WM_KEYUP, ord("2"), 0)
                current_time = time.strftime("%H:%M:%S")
                print(f"[{current_time}]: Used MP potion")
                await asyncio.sleep(0.5)
            await asyncio.sleep(0.2)
        except Exception as e:
            print(str(e))
            
async def main():
    async with asyncio.TaskGroup() as tg:
        print(f"Autoheal is ON")
        tg.create_task(hp_routine())
        tg.create_task(mp_routine())


if __name__ == "__main__":
    asyncio.run(main())

Any idea where the issue is ? Sorry I'm very new to coding, but keen to progress. Haven't found a tangible explanation online. My assumption are that the Offsets are not the ones I have. (yes I have the correct game version)
Thanks

add 0x0 after each 0x380 in offsets

Code:

import asyncio
import time

import win32api
import win32con
import win32gui
from pymem import Pymem


process_name = "PathOfExile.exe"
pm = Pymem(process_name)
base_offset = 0x03CC4858
base_address = pm.base_address + base_offset
handle = win32gui.FindWindow(None, "Path of Exile 2")
offsets = {
    "CurHP": [0x380, 0x0, 0x2B0, 0xC8, 0x68, 0x50, 0x378],
    "MaxHP": [0x380, 0x0, 0x2B0, 0xC8, 0x68, 0x50, 0x380],
    "CurMP": [0x380, 0x0, 0x128, 0x80, 0x2A8, 0x230],
    "MaxMP": [0x380, 0x0, 0x128, 0x80, 0x2A8, 0x22C],
    
}
# Heals %
hp_threshold = 75
mp_threshold = 20


def get_final_address(pm: Pymem, base_address: int, offsets: list[int]) -> int:
    addr = pm.read_longlong(base_address)
    for offset in offsets[:-1]:
        addr = pm.read_longlong(addr + offset)
    return addr + offsets[-1]


async def hp_routine():
    while True:
        try:
            curhp_address = get_final_address(pm, base_address, offsets["CurHP"])
            # print(f"curhp_address: {curhp_address}")
            maxhp_address = get_final_address(pm, base_address, offsets["MaxHP"])
            # print(f"maxhp_address: {maxhp_address}")

            current_hp = pm.read_int(curhp_address)
            max_hp = pm.read_int(maxhp_address)

            hp_percent = (current_hp / max_hp) * 100 if max_hp != 0 else 0
            # print(f"HP: {current_hp} / {max_hp} ({hp_percent})")

            if hp_percent <= hp_threshold:
                win32api.PostMessage(handle, win32con.WM_KEYDOWN, ord("1"), 0)
                win32api.PostMessage(handle, win32con.WM_KEYUP, ord("1"), 0)
                current_time = time.strftime("%H:%M:%S")
                print(f"[{current_time}]: Used HP potion")
                await asyncio.sleep(0.5)
            await asyncio.sleep(0.2)
        except Exception as e:
            print(str(e))


async def mp_routine():
    while True:
        try:
            curmp_address = get_final_address(pm, base_address, offsets["CurMP"])
            # print(f"curmp_address: {curmp_address}")
            maxmp_address = get_final_address(pm, base_address, offsets["MaxMP"])
            # print(f"maxmp_address: {maxmp_address}")

            current_mp = pm.read_int(curmp_address)
            max_mp = pm.read_int(maxmp_address)

            mp_percent = (current_mp / max_mp) * 100 if max_mp != 0 else 0
            # print(f"MP: {current_mp} / {max_mp} ({mp_percent})")

            if mp_percent <= mp_threshold:
                win32api.PostMessage(handle, win32con.WM_KEYDOWN, ord("2"), 0)
                win32api.PostMessage(handle, win32con.WM_KEYUP, ord("2"), 0)
                current_time = time.strftime("%H:%M:%S")
                print(f"[{current_time}]: Used MP potion")
                await asyncio.sleep(0.5)
            await asyncio.sleep(0.2)
        except Exception as e:
            print(str(e))
            
async def main():
    async with asyncio.TaskGroup() as tg:
        print(f"Autoheal is ON")
        tg.create_task(hp_routine())
        tg.create_task(mp_routine())


if __name__ == "__main__":
    asyncio.run(main())

**Zdetyh** · 01-19-2025

Thanks XORR for your reply.

**PanCrucian** · 02-03-2025

Have anyone new offsets? Thx

**darkxell133** · 02-03-2025

BaseOffset should be 0x03BB9188 (this should be UI-Root Child [1] this contains all UI-Base-Elements )
and after this u should follow the UI path over the Children of each UI-Element
The pointer of the Children is 0x38 so every -> should be 0x38 within the Code
Root -> 0x378 -> 18 -> 0 (this address + 378 CurHP / +37C MaxHPwith reservation / +380MaxHPwithout reservation) im not sure with the MaxHP couldnt test it
Root -> 0x378 -> 18 -> 0(this address + 384 CurES / +388 MaxES)
Root -> 0x378 -> 20 -> 0(this address +378 CurMana /+37C MaxManawithReservation / +380MaxManawithout reservation)

base offset = 0x03BB9188

"CurHP": [0x38x378, 0x38, 0x18, 0x38, 0x0,0x378],
"MaxHP": [0x38,0x378, 0x38, 0x18, 0x38, 0x0,0x380],
"CurES": [0x38,0x378, 0x38, 0x18, 0x38, 0x0,0x384],
"MaxES": [0x38,0x378, 0x38, 0x18, 0x38, 0x0,0x388],
"CurMP": [0x38,0x378, 0x38, 0x20, 0x38, 0x0,0x378],
"MaxMP": [0x38,0x378, 0x38, 0x20, 0x38, 0x0,0x380],

**Zdetyh** · 02-04-2025

Hi, thanks for sharing they were working perfectly, do you have the new one by any chance ?

They just did an update today. Thanks

Originally Posted by darkxell133

BaseOffset should be 0x03BB9188 (this should be UI-Root Child [1] this contains all UI-Base-Elements )
and after this u should follow the UI path over the Children of each UI-Element
The pointer of the Children is 0x38 so every -> should be 0x38 within the Code
Root -> 0x378 -> 18 -> 0 (this address + 378 CurHP / +37C MaxHPwith reservation / +380MaxHPwithout reservation) im not sure with the MaxHP couldnt test it
Root -> 0x378 -> 18 -> 0(this address + 384 CurES / +388 MaxES)
Root -> 0x378 -> 20 -> 0(this address +378 CurMana /+37C MaxManawithReservation / +380MaxManawithout reservation)

base offset = 0x03BB9188

"CurHP": [0x38x378, 0x38, 0x18, 0x38, 0x0,0x378],
"MaxHP": [0x38,0x378, 0x38, 0x18, 0x38, 0x0,0x380],
"CurES": [0x38,0x378, 0x38, 0x18, 0x38, 0x0,0x384],
"MaxES": [0x38,0x378, 0x38, 0x18, 0x38, 0x0,0x388],
"CurMP": [0x38,0x378, 0x38, 0x20, 0x38, 0x0,0x378],
"MaxMP": [0x38,0x378, 0x38, 0x20, 0x38, 0x0,0x380],

**sturmi** · 02-05-2025

base offset: 0x03BA8868

Cur HP	0x38	0x378	0x38	0x18	0x38	0x0	0x378
Max HP	0x38	0x378	0x38	0x18	0x38	0x0	0x388
Cur ES	0x38	0x378	0x38	0x18	0x38	0x0	0x38C
Max ES	0x38	0x378	0x38	0x18	0x38	0x0	0x390
Cur MP	0x38	0x378	0x38	0x20	0x38	0x0	0x80
Max MP	0x38	0x378	0x38	0x20	0x38	0x0	0x388
Cur Spirit	0x38	0x378	0x38	0x20	0x38	0x0	0x3A8
Max Spirit	0x38	0x378	0x38	0x20	0x38	0x0	0x3AC

Only tested with the steam version.

PathOfExile2Steam.v0.1.1c.zip

Shout-Out

User Tag List

Thread: HP Structure (Reclass) to be used in a hacks.. [0.1.0d]

Thread Tools

Search Thread

Similar Threads

[Buying] I want to buy a software that can be used in the multiplayer robot hall, and I want

experience to be used in bgs?

Fun dueling exploit (can only be used in shattrath)

Guide to be cool in WoW

OwnedCore Forums

casino

CoreCoins

My OwnedCore

About Us

Casino