HP Structure (Reclass) to be used in a hacks.. [0.1.0d]

[KronosQC]

Offsets 0.1.0f -

<pathofexile.exe>+ 03B8FEE8 {0x60, 0x68, 0x38, 0x20, 0x208, 0x28} HPRegen  ->Float
<pathofexile.exe>+ 03B8FEE8 {0x60, 0x68, 0x38, 0x20, 0x208, 0x2C} MaxHP -> int32
<pathofexile.exe>+ 03B8FEE8 {0x60, 0x68, 0x38, 0x20, 0x208, 0x30} CurrentHP -> int32

<pathofexile.exe>+ 03B8FEE8 {0x60, 0x68, 0x38, 0x20, 0x208, 0x78} MPRegen ->Float
<pathofexile.exe>+ 03B8FEE8 {0x60, 0x68, 0x38, 0x20, 0x208, 0x80} MaximumMP -> int32
<pathofexile.exe>+ 03B8FEE8 {0x60, 0x68, 0x38, 0x30, 0x208, 0x7C} CurrentMP  -> int32

HealthPercentage = (double)HealthCurrent / HealthMax * 100;
ManaPercentage = (double)ManaCurrent / ManaMax * 100;

Ok, pointer+offsets fixed for new update..

Test.png

test3.png

[KronosQC]

Like a bot for autoing health potion in c++.
I also provided the ptr adress and all the offsets, if you want to use another coding language :P.

[KronosQC]

i'm coding a quick dll to see if it works correctly. i will post if yes.

[Xab3r]

i'm coding a quick dll to see if it works correctly. i will post if yes.

Tested, works just fine, thank you! Would you mind if I will show how to integrate this with behavior trees to automate potions ?

using EyeAuras.Memory;
using EyeAuras.Memory.MPFS;
using EyeAuras.Memory.Scaffolding;

ISendInputUnstableScriptingApi SendInput { get; set; } = GetService<ISendInputUnstableScriptingApi>(); //could be used to generate inputs

Log.Info("Hello, world! I will be reading Current/Max HP values");
Main();

void Main()
{
    using var process =
        LocalProcess.ByProcessName("pathofexile"); //uses naive memory read RPM under the hood

    Log.Info($"Process: {process}");
    var modules = process.GetProcessModules(); //enumerate all loaded modules
    var memory = process.MemoryOfModule("pathofexile.exe"); //get specific module by name
    Log.Info($"Module: {memory}, base: {memory.BaseAddress.ToHexadecimal()}");

    const long PlayerOffset = 0x03886DB0; //v 4.1.0d ?

    //run this script until it is cancelled by trigger or user
    while (!cancellationToken.IsCancellationRequested)
    {
        using var forced = new ForcedDelayBlock(TimeSpan.FromMilliseconds(100));  //read at most 10 times per second

        var currentHp = memory.Read<uint>(memory.BaseAddress + PlayerOffset, 0x38, 0x18, 0x40, 0x20, 0x208, 0x30);
        var maxHp = memory.Read<uint>(memory.BaseAddress + PlayerOffset, 0x38, 0x18, 0x40, 0x20, 0x208, 0x2C);

        //now you can either use those values directly, e.g. use potion
        //SendInput.KeyPress(Key.D1);
        //or, the better approach would be to store those as variables and then use 
        //them as a part of BehaviorTree which will check values and act accordingly
        //i.e. run both memory analysis + behavior tree
        Variables["CurrentHp"] = currentHp;
        Variables["MaxHp"] = maxHp;
    }
}

[KronosQC]

Thanks for letting me know and for testing @Xab3r !! Can i get in touch to you on discord ? Just add kronosqc

[coyes]

Thank you, that was exactly what i was searching for.
Here is a simple Auto Heal in Python I did using your contribution =)

Utility

import ctypes

kernel32 = ctypes.windll.kernel32

def FindDMAAddy(hProc, base, offsets, arch=64):
    size=8
    if (arch == 32): size = 4
    adress = ctypes.c_uint64(base)
    for offset in offsets:
        kernel32.ReadProcessMemory(hProc, adress, ctypes.byref(adress), size, 0)
        adress = ctypes.c_uint64(adress.value + offset)
    return(adress.value)

Autoheal

import time
import win32api, win32gui
import win32con
from pymem import Pymem
import utility

###Autopot  by coys####
# Addresses by KronosQC, ty
#"PathOfExile.exe"+03886DB0
#38  18 40 20 208 2c - MaxHP
#38  18 40 20 208 30 - CurHP
#38  18 40 20 208 7c - MaxMP
#38  18 40 20 208 80 - CurMP
process_name = "PathOfExile.exe"
pointer = 0x03886DB0
offsets_CurHP = [0x38, 0x18, 0x40, 0x20, 0x208, 0x30]
offsets_MaxHP = [0x38, 0x18, 0x40, 0x20, 0x208, 0x2c]
offsets_CurMP = [0x38, 0x18, 0x40, 0x20, 0x208, 0x80]
offsets_MaxMP = [0x38, 0x18, 0x40, 0x20, 0x208, 0x7c]

# Heals %
heal_hp = 70
heal_mp = 40

#Handle+Base
try:
    pm = Pymem(process_name)
    print(f"Conectado ao processo: {process_name}")
    hProc = pm.process_handle
    base_pointer = pm.base_address + pointer
except Exception as e:
    print(f"Erro ao conectar ao processo: {e}")
    exit()

janela_jogo = win32gui.FindWindow(None, "Path of Exile 2")
if not janela_jogo:
    print("Janela do jogo não encontrada.")
    exit()

#healbot 
while True:
    try:
        maxhp_address = utility.FindDMAAddy(hProc, base_pointer, offsets_MaxHP, 64)
        curhp_address = utility.FindDMAAddy(hProc, base_pointer, offsets_CurHP, 64)
        maxmana_address = utility.FindDMAAddy(hProc, base_pointer, offsets_MaxMP, 64)
        curmana_address = utility.FindDMAAddy(hProc, base_pointer, offsets_CurMP, 64)
        current_hp = pm.read_int(curhp_address)
        max_hp = pm.read_int(maxhp_address)
        current_mp = pm.read_int(curmana_address)
        max_mp = pm.read_int(maxmana_address)

        hp_percent = (current_hp / max_hp) * 100 if max_hp != 0 else 0
        mp_percent = (current_mp / max_mp) * 100 if max_mp != 0 else 0

        if hp_percent <= heal_hp:
            time.sleep(0.2)
            win32api.PostMessage(janela_jogo, win32con.WM_KEYDOWN, ord('1'), 0)
            win32api.PostMessage(janela_jogo, win32con.WM_KEYUP, ord('1'), 0)

        if mp_percent <= heal_mp:
            time.sleep(0.2)
            win32api.PostMessage(janela_jogo, win32con.WM_KEYDOWN, ord('2'), 0)
            win32api.PostMessage(janela_jogo, win32con.WM_KEYUP, ord('2'), 0)

    except Exception as e:
        print(f"Erro ao acessar memória: {e}")

    time.sleep(0.5)

I apreaciate any tips in how to improve and how to do better =)

Edit*
Amazing post too Xab3r that was very helpful

[XORReverseEngineering]

Thank you, that was exactly what i was searching for.
Here is a simple Auto Heal in Python I did using your contribution =)

Utility

import ctypes

kernel32 = ctypes.windll.kernel32

def FindDMAAddy(hProc, base, offsets, arch=64):
    size=8
    if (arch == 32): size = 4
    adress = ctypes.c_uint64(base)
    for offset in offsets:
        kernel32.ReadProcessMemory(hProc, adress, ctypes.byref(adress), size, 0)
        adress = ctypes.c_uint64(adress.value + offset)
    return(adress.value)

Autoheal

import time
import win32api, win32gui
import win32con
from pymem import Pymem
import utility

###Autopot  by coys####
# Addresses by KronosQC, ty
#"PathOfExile.exe"+03886DB0
#38  18 40 20 208 2c - MaxHP
#38  18 40 20 208 30 - CurHP
#38  18 40 20 208 7c - MaxMP
#38  18 40 20 208 80 - CurMP
process_name = "PathOfExile.exe"
pointer = 0x03886DB0
offsets_CurHP = [0x38, 0x18, 0x40, 0x20, 0x208, 0x30]
offsets_MaxHP = [0x38, 0x18, 0x40, 0x20, 0x208, 0x2c]
offsets_CurMP = [0x38, 0x18, 0x40, 0x20, 0x208, 0x80]
offsets_MaxMP = [0x38, 0x18, 0x40, 0x20, 0x208, 0x7c]

# Heals %
heal_hp = 70
heal_mp = 40

#Handle+Base
try:
    pm = Pymem(process_name)
    print(f"Conectado ao processo: {process_name}")
    hProc = pm.process_handle
    base_pointer = pm.base_address + pointer
except Exception as e:
    print(f"Erro ao conectar ao processo: {e}")
    exit()

janela_jogo = win32gui.FindWindow(None, "Path of Exile 2")
if not janela_jogo:
    print("Janela do jogo não encontrada.")
    exit()

#healbot 
while True:
    try:
        maxhp_address = utility.FindDMAAddy(hProc, base_pointer, offsets_MaxHP, 64)
        curhp_address = utility.FindDMAAddy(hProc, base_pointer, offsets_CurHP, 64)
        maxmana_address = utility.FindDMAAddy(hProc, base_pointer, offsets_MaxMP, 64)
        curmana_address = utility.FindDMAAddy(hProc, base_pointer, offsets_CurMP, 64)
        current_hp = pm.read_int(curhp_address)
        max_hp = pm.read_int(maxhp_address)
        current_mp = pm.read_int(curmana_address)
        max_mp = pm.read_int(maxmana_address)

        hp_percent = (current_hp / max_hp) * 100 if max_hp != 0 else 0
        mp_percent = (current_mp / max_mp) * 100 if max_mp != 0 else 0

        if hp_percent <= heal_hp:
            time.sleep(0.2)
            win32api.PostMessage(janela_jogo, win32con.WM_KEYDOWN, ord('1'), 0)
            win32api.PostMessage(janela_jogo, win32con.WM_KEYUP, ord('1'), 0)

        if mp_percent <= heal_mp:
            time.sleep(0.2)
            win32api.PostMessage(janela_jogo, win32con.WM_KEYDOWN, ord('2'), 0)
            win32api.PostMessage(janela_jogo, win32con.WM_KEYUP, ord('2'), 0)

    except Exception as e:
        print(f"Erro ao acessar memória: {e}")

    time.sleep(0.5)

I apreaciate any tips in how to improve and how to do better =)

Edit*
Amazing post too Xab3r that was very helpful

thank you, it's working

[setim]

did it worked for you? I tested, and nothing happened

I just try it, it work.

[kunto2020]

thanks bro for CE

[KronosQC]

No problemo , glad you guys are happy!

[spdkllz]

Could you also provide offsets for ES?

Edit: Also mana pointers do not work for me, the returned values for CurMana and MaxMana do not match game values

[KronosQC]

Could you also provide offsets for ES?

Edit: Also mana pointers do not work for me, the returned values for CurMana and MaxMana do not match game values

Yeah i will take a look into it..

[spdkllz]

Looked around a bit and found the ES offsets for anyone interested:

offsets_CurES = [0x38, 0x18, 0x40, 0x20, 0x208, 0xB8]
offsets_MaxES = [0x38, 0x18, 0x40, 0x20, 0x208, 0xB4]


Edit: One observation, the offsets stop working if I go to character selection page and go back in the game. I end up having to restart POE client to get offsets working again.

[coyes]

Looked around a bit and found the ES offsets for anyone interested:

offsets_CurES = [0x38, 0x18, 0x40, 0x20, 0x208, 0xB8]
offsets_MaxES = [0x38, 0x18, 0x40, 0x20, 0x208, 0xB4]


Edit: One observation, the offsets stop working if I go to character selection page and go back in the game. I end up having to restart POE client to get offsets working again.

That was also happening with me, and tbf idk why, i double checked with CE table and they really change if you go to the log in screen.

Could you also provide offsets for ES?

Edit: Also mana pointers do not work for me, the returned values for CurMana and MaxMana do not match game values

Idk how familiar you are with CE, but you can open the CE table, get the pointer, go the memory view and analyse the Data Structure, and you can find other things related with your character there. Mana/Life/ES/Mov.speed/Etc

https://i.imgur.com/iGd4asf.png img tutorial

[Enuma]

Maybe im asking for a lot here, im a bit noobish to make script correctly.
Ive found following info on one of the CE/Scripting forums, all thanks go to strixxr, original poster.

Would anyone be kind enough to look into or make a CE script for zoom hack?

Infinite Zoom
 
F3 0F 5D 0D ? ? ? 02 F3 0F 11 8F
 
NOP 8 bytes with: 0x90 0x90 0x90 0x90 0x90 0x90 0x90 0x90