Structure of data on player?

[Tanaris4]

Has anyone been able to determine how to find things like player life, player mana, etc... ?

I've been trying to while logged on simply by memory scans, etc... But everything I have found so far is stored as a string and is a UI element vs. part of a player struct.

I know it's still way early - but I thought I would ask.

Thanks!

[Ilu]

i would imagine theses values are stored serverside and you wouldn't be able to do anything with the local copies of the values

correct me if i am wrong

[Tanaris4]

I don't want to change them, I just want to read them

if <health low> use <potion>

[stevenyy]

base + offsets = value? do we have offsets yet? not really, probably time to contribute to the info dump if u want to get HP/MP

[Tanaris4]

base + offsets = value? do we have offsets yet? not really, probably time to contribute to the info dump if u want to get HP/MP

Fair enough, that's why I was asking I'm searching around now.

[Nesox]

Been trying to find where they set the TLS, found one place but the size is of the struct they use is smaller than 208 so i'm still trying to find it.

int __cdecl sub_85EC10()
{
  int result; // eax@1

  sub_D048F0((int)&unkTlsIndex38); // TlsAlloc
  sub_85EB70();  // Set's the TlsSlot to a 68 byte struct
  result = BitwiseComplement((int)&unkTlsIndex38); // bitwise complement
  dwTlsIndex = result;
  return result;
}

This grabs the cast speed.

v3 = *(ObjectManager **)(**(_DWORD **)TlsGetValue(dwTlsIndex) + 208;
    if ( v3 )
    {
      v3 = (ObjectManager *)sub_812140(*(_DWORD *)&v3->f0[0], v4);
      if ( v3 )
      {
        v16 = &v12;
        sub_896410((int)v3, -3969)

And this get's the Gold Find value.

    v3 = *(_DWORD *)(**(_DWORD **)TlsGetValue(dwTlsIndex) + 208);
    if ( v3 )
    {
      v3 = sub_812140(*(_DWORD *)v3, v4);
      if ( v3 )
      {
        LODWORD(v17) = &v12;
        sub_896410(v3, -4059);
        v17 = st7_0;

The TLS stuff is used pretty much everywhere so it's safe to assume it's their ObjectManager it looks like a Hash Map but i'm not certain.

Value *__cdecl GetValue(unsigned __int16 a1)
{
  ObjectManager *om; // edx@1

  om = (ObjectManager *)**(_DWORD **)(**(_DWORD **)TlsGetValue(dwTlsIndex) + 0xD0);
  return &om->Buckets[(unsigned int)a1 >> om->NumBucketsLog]->Values[a1 & ((1 << *(_DWORD *)&om->NumBucketsLog) - 1)];
}

The current Hero has several pointers in the BnetService class, most used is at 0xAC i haven't found alot of useful stuff in that struct tho.