HP Structure (Reclass) to be used in a hacks.. [0.1.0d]

[bigginz]

Almost, your current MP is wrong (Steam version)
POINTER_CHAINS = {
"Current HP": [0x03BA8868, 0x38, 0x378, 0x38, 0x18, 0x38, 0x0, 0x378],
"Max HP": [0x03BA8868, 0x38, 0x378, 0x38, 0x18, 0x38, 0x0, 0x388],
"Current ES": [0x03BA8868, 0x38, 0x378, 0x38, 0x18, 0x38, 0x0, 0x38C],
"Max ES": [0x03BA8868, 0x38, 0x378, 0x38, 0x18, 0x38, 0x0, 0x390],
"Current MP": [0x03BA8868, 0x38, 0x378, 0x38, 0x20, 0x38, 0x0, 0x380], # ✅ FIXED!
"Max MP": [0x03BA8868, 0x38, 0x378, 0x38, 0x20, 0x38, 0x0, 0x388],
"Current Spirit": [0x03BA8868, 0x38, 0x378, 0x38, 0x20, 0x38, 0x0, 0x3A8],
"Max Spirit": [0x03BA8868, 0x38, 0x378, 0x38, 0x20, 0x38, 0x0, 0x3AC],
}

[sturmi]

yeah, i've noticed this too...

[Zdetyh]

Hi, I can't manage to find the new base offset for the Standalone Client. Does anyone has it and happy to share ???

[darkxell133]

base offset: 0x03BA8868 should working for Steam and Standalone

an I think it would be better to use an AOB Scan for the function that accessing the base offset
so this wouldnt break after every Patch

[yandev]

I'm currently trying to find out about items in players inventory.. so far I found the pointer to the amount of current items in inventory at "PathOfExileSteam.exe"+03BA8868 + 38 + 228 + 378 + 8 + 30 + 8 + 190 - so I looked at nearby memory regions, and at 170 as last offset instead of 190, I found something that has something to do with each inventory slot

Edit:

So every day I learn more :-) today I learned that dissecting structs in CE is sometimes not very accurate, I did the same in ReclassEx and now found a pointer for every item slot in inventory :-)

image.png

I somehow cant delete attachments, but this is how it looked in CE struct dissect view (which was not that accurate), and the image here is with ReclassEx, and this was shows at the address I gave, there is a pointer for each slot in inventory. so far I only found the items position index, and nothing about any item ID or a way to find that item but maybe someone will

[singed420]

anyone got the address and offset for 0.1.1e? or any pattern? the old pattern seems outdated.

[lovingfather]

anyone got the address and offset for 0.1.1e? or any pattern? the old pattern seems outdated.

I personally don’t understand why you would base anything on this piece of information. It’s clearly unmaintained—perhaps even abandoned. I also wonder why it hasn’t been deleted entirely, as it doesn’t align with the forum’s purpose. It’s neither a bot nor a program. -GPT TRANSLATION

[singed420]

I personally don’t understand why you would base anything on this piece of information. It’s clearly unmaintained—perhaps even abandoned. I also wonder why it hasn’t been deleted entirely, as it doesn’t align with the forum’s purpose. It’s neither a bot nor a program. -GPT TRANSLATION

because idk where else I could discuss these infos. been google seaching POE2 reversing and not much info been found besides here.

[lovingfather]

because idk where else I could discuss these infos. been google seaching POE2 reversing and not much info been found besides here.

I understand your frustration and the situation you're in, and I'm sorry. However, at this point, you'd be better off watching YouTube videos, learning reversing in general, and applying it to POE2 through trial and error on your own. I say this kindly—to help you move forward rather than just waiting. -GPT TRANSLATION

[darkxell133]

to get the healt and mana Base address is realy easy with Cheat Engine
step1: scan for health
step2: change equip to change max healt
step3: repeat step 1 and two until u have 3 or 2 addresses left add the second address to your list(im not sure which one is the right address if it doesnt work with the second address try it with the first one)
step4: right click one of the adresses in CE an click on PointerScanthis address
step5: set Maximum Offset Value to 1000 and Max Level to 5( u now get a big list of Base Addresses)
step6: Go back to charackter selection and login with any char
step7: repeat step 1, 2 and 3
step8: go back to the BigList from the pointerscan press CTR+R add the address and click OK
Now u have to repeat this a few times after that the most of the base should work

[lovingfather]

to get the healt and mana Base address is realy easy with Cheat Engine
step1: scan for health
step2: change equip to change max healt
step3: repeat step 1 and two until u have 3 or 2 addresses left add the second address to your list(im not sure which one is the right address if it doesnt work with the second address try it with the first one)
step4: right click one of the adresses in CE an click on PointerScanthis address
step5: set Maximum Offset Value to 1000 and Max Level to 5( u now get a big list of Base Addresses)
step6: Go back to charackter selection and login with any char
step7: repeat step 1, 2 and 3
step8: go back to the BigList from the pointerscan press CTR+R add the address and click OK
Now u have to repeat this a few times after that the most of the base should work

If this eventually works after some rounds of searching, it breaks again with the next small patch. This doesn't seem to align with "best practices." -GTP TRANSLATE

[darkxell133]

yeah it could break after each patch
with the base address u can look wich function access it then use ghidra to reverse it and get the function that doesnt change every patch
and then creat an AOB of it to use this as a starting point like ExileCore or GameHelper
an easyer way is us ILSpy on one of them to find the AOB that they use for the RootUI

[lalaokie]

to get the healt and mana Base address is realy easy with Cheat Engine
step1: scan for health
step2: change equip to change max healt
step3: repeat step 1 and two until u have 3 or 2 addresses left add the second address to your list(im not sure which one is the right address if it doesnt work with the second address try it with the first one)
step4: right click one of the adresses in CE an click on PointerScanthis address
step5: set Maximum Offset Value to 1000 and Max Level to 5( u now get a big list of Base Addresses)
step6: Go back to charackter selection and login with any char
step7: repeat step 1, 2 and 3
step8: go back to the BigList from the pointerscan press CTR+R add the address and click OK
Now u have to repeat this a few times after that the most of the base should work

thanks for this man brand new to this but was able to pull something together!

import time
import pymem
import pymem.process
import win32api
import win32gui
import win32con

# Game process name
PROCESS_NAME = "PathOfExileSteam.exe"

# Offsets (Verify with Cheat Engine!)
OFFSETS = {
    "CurMP": [0x38, 0x0, 0x80, 0x2B0, 0x230],
    "MaxMP": [0x38, 0x0, 0x80, 0x2B0, 0x22C],
    "CurHP": [0x70, 0x0, 0x80, 0x2B0, 0x1E0],
    "MaxHP": [0x38, 0x0, 0x80, 0x2B0, 0x1DC]
}

# HP & MP usage thresholds
HEAL_HP = 70  # Use health flask when HP drops below 70%
HEAL_MP = 40  # Use mana flask when MP drops below 40%

# Connect to memory
try:
    pm = pymem.Pymem(PROCESS_NAME)
    module = pymem.process.module_from_name(pm.process_handle, PROCESS_NAME)
    base_address = module.lpBaseOfDll + 0x03B9AD28  # New base address
    print(f"✅ Connected to: {PROCESS_NAME}")
    print(f"✅ Dynamic Base Address: {hex(base_address)}")
except Exception as e:
    print(f"❌ Error: {e}")
    exit()

# Find game window
def find_poe_window():
    hwnd_list = []
    def win_enum_handler(hwnd, ctx):
        if win32gui.IsWindowVisible(hwnd):
            title = win32gui.GetWindowText(hwnd)
            if "path of exile" in title.lower():
                ctx.append(hwnd)
    win32gui.EnumWindows(win_enum_handler, hwnd_list)
    return hwnd_list[0] if hwnd_list else None

game_window = find_poe_window()
if not game_window:
    print("❌ Game window not found.")
    exit()
else:
    print(f"✅ Game window found! HWND: {game_window}")

# Pointer calculation function
def get_pointer_address(base, offsets):
    try:
        address = pm.read_longlong(base)
        for offset in offsets[:-1]:
            address = pm.read_longlong(address + offset)
            if not address:
                return None
        return address + offsets[-1]
    except pymem.exception.MemoryReadError as e:
        print(f"❌ Memory read error: {e}")
        return None

# Main loop
while True:
    try:
        max_hp_addr = get_pointer_address(base_address, OFFSETS["MaxHP"])
        cur_hp_addr = get_pointer_address(base_address, OFFSETS["CurHP"])
        max_mp_addr = get_pointer_address(base_address, OFFSETS["MaxMP"])
        cur_mp_addr = get_pointer_address(base_address, OFFSETS["CurMP"])

        if None in [max_hp_addr, cur_hp_addr, max_mp_addr, cur_mp_addr]:
            print("❌ Invalid memory address. Retrying...")
            time.sleep(1)
            continue

        current_hp = pm.read_int(cur_hp_addr)
        max_hp = pm.read_int(max_hp_addr)
        current_mp = pm.read_int(cur_mp_addr)
        max_mp = pm.read_int(max_mp_addr)

        hp_percent = (current_hp / max_hp) * 100 if max_hp != 0 else 0
        mp_percent = (current_mp / max_mp) * 100 if max_mp != 0 else 0

        print(f"❤️ HP: {current_hp}/{max_hp} ({hp_percent:.2f}%) | 💧 MP: {current_mp}/{max_mp} ({mp_percent:.2f}%)")

        if hp_percent <= HEAL_HP:
            time.sleep(0.2)
            win32api.PostMessage(game_window, win32con.WM_KEYDOWN, ord('1'), 0)
            win32api.PostMessage(game_window, win32con.WM_KEYUP, ord('1'), 0)

        if mp_percent <= HEAL_MP:
            time.sleep(0.2)
            win32api.PostMessage(game_window, win32con.WM_KEYDOWN, ord('2'), 0)
            win32api.PostMessage(game_window, win32con.WM_KEYUP, ord('2'), 0)

    except Exception as e:
        print(f"❌ General error: {e}")

    time.sleep(0.5)[/I][/I]

edit: there we go lol

[sturmi]

New base address (path of exile 2 steam v0.1.1f) is:

0x03B9AD18

[lalaokie]

base address is "0x03BB2158"
Fairly new so sorry if wrong


Edit 3/27/2025 base address is

# "PathOfExileSteam.exe"+03BC1DF8