SendCharacterState question

02/25/2021 16:52 Aeryas#1

Hello everyone.

From my understanding as I look at the SendCharacterStatePacket function, it requires that the destionation should be a float* (float pointer).

Casting the coordinates into float* like the following:

PHP Code:


			
float finalDest[2] = { charPos.x + 20.f, charPos.y };

doesn't seem to do the job. It seems that the character is teleporting in place, while it should move +20.f in the X plane. My coordinates are ok, updating real-time & before the cast is made, so that shouldn't be a problem either.

I've tried casting even the "Y" coord into it (thinking that it requires it), but as the function error says, it requires just "fDest=(x,y)".

I've put a breakpoint on the error and it doesn't seem to get triggered while testing, so I don't really know what I'm doing wrong here.

Any help is appreciated!

Thank you very much!

02/25/2021 18:26 MrCrisp#2

Keep in mind that Metin's PIxelPosition != Metin Coordinates. 100 in PixelPosition equals to 1 Coordinate point.

02/25/2021 21:31 Aeryas#3

Quote:

Originally Posted by MrCrisp

Keep in mind that Metin's PIxelPosition != Metin Coordinates. 100 in PixelPosition equals to 1 Coordinate point.

Thanks, I've checked that also by dividing the player character's entity coordinates by 100 and I get the same result...the character flickers in place, everything dissapears while the "teleport" occurs and it stays in place.

I've tried to cast the coordinates as TPixelPosition as well, but the game crashes if I do it then like so:

PHP Code:


			
typedef struct VEC3{
    float x;
    float y;
    float z;
}VEC3, *LPVECTOR3;

typedef VEC3 TPixelPosition;
// some other code, etc etc 
// in the tele function:
TPixelPosition pos;
pos.x = getPlayerPosition().x;
pos.y = getPlayerPosition().y;

Tele(pos, 0.f, 0, 0);

I've tried manually setting and inverting coordinate values that I got from the map, same thing happens.

I'm kinda out of ideas to be honest...

02/25/2021 22:15 MrCrisp#4

Quote:

Originally Posted by Aeryas

Thanks, I've checked that also by dividing the player character's entity coordinates by 100 and I get the same result...the character flickers in place, everything dissapears while the "teleport" occurs and it stays in place.

I've tried to cast the coordinates as TPixelPosition as well, but the game crashes if I do it then like so:

PHP Code:

typedef struct VEC3{ float x; float y; float z; }VEC3, *LPVECTOR3; typedef VEC3 TPixelPosition; // some other code, etc etc // in the tele function: TPixelPosition pos; pos.x = getPlayerPosition().x; pos.y = getPlayerPosition().y; Tele(pos, 0.f, 0, 0);

I've tried manually setting and inverting coordinate values that I got from the map, same thing happens.

I'm kinda out of ideas to be honest...

I'm not quite sure what you are trying to achieve here. Why do you divide the player coordinates? If you want to send a packet, the data inside the packet needs to be formed such that it applies to the correct form.

The header of the SendCharacterStatePacket function looks like this:

Code:

bool CPythonNetworkStream::SendCharacterStatePacket(const TPixelPosition& c_rkPPosDst, float fDstRot, UINT eFunc, UINT uArg)

The PixePosition argument is just a typedef.

Code:

typedef struct D3DXVECTOR3 {
  FLOAT x;
  FLOAT y;
  FLOAT z;
} D3DXVECTOR3, *LPD3DXVECTOR3;

As mentioned earlier, if you want to "teleport" to some point, you have to multiply your coordinates by 100.

It would be easier if you can provide some snippets of your code, e.g. what you are trying to achieve.

02/26/2021 18:57 Aeryas#5

Thanks alot MrCrisp for the info. My original values of coordinates were returned from the CInstance, so they were already in their normal float values that should be sent back with the state packet. What I did not notice until I mouseovered the minimap, was the fact that the Y position of the mobs was absolute and what was expected to be sent back was the absolute value as well ( in the entity list, their values were negative ). I've overlooked that simple thing and I was a bit dissapointed of myself xD.

In terms of what I'm trying to achieve with these is a ranged waithack & a custom map teleporter mainly. One thing I've noticed tho is that the waithack doesn't work after fixing the issue.

Using "teleport(mobpos) => attack => teleport(backtoprevposition) doesn't seem to attack the mob, even if the packet was sent. I've tried a bot that already does that and that one seems to work, but mine doesn't ��. I'll try to fiddle with some sleep values & see what's going on. If you have a piece of advice on this one, I'll really appreciate it.

Thank you very much once again!

02/26/2021 21:42 MrCrisp#6

Quote:

Originally Posted by Aeryas

Thanks alot MrCrisp for the info. My original values of coordinates were returned from the CInstance, so they were already in their normal float values that should be sent back with the state packet. What I did not notice until I mouseovered the minimap, was the fact that the Y position of the mobs was absolute and what was expected to be sent back was the absolute value as well ( in the entity list, their values were negative ). I've overlooked that simple thing and I was a bit dissapointed of myself xD.

In terms of what I'm trying to achieve with these is a ranged waithack & a custom map teleporter mainly. One thing I've noticed tho is that the waithack doesn't work after fixing the issue.

Using "teleport(mobpos) => attack => teleport(backtoprevposition) doesn't seem to attack the mob, even if the packet was sent. I've tried a bot that already does that and that one seems to work, but mine doesn't ��. I'll try to fiddle with some sleep values & see what's going on. If you have a piece of advice on this one, I'll really appreciate it.

Thank you very much once again!

Glad that you figured it out! :)

For the range-waithack: Did you send a character state packet? (not sure what the correct name of the packet is)

02/26/2021 22:01 Aeryas#7

Quote:

Originally Posted by MrCrisp

Glad that you figured it out! :)

For the range-waithack: Did you send a character state packet? (not sure what the correct name of the packet is)

Yes I did...What I've tried so far:

PHP Code:


			
for (GInstance::iterator entry = entList.begin(); entry != entList.end(); entry++) {

    if (!entry->second->isEnemyPlayer() && entry->second->getIsMyCharacter() != 1) {

        Vector3 playerPos = GetPlayerPosition(Base);
        Vector3 mobPos = entry->second->GetPosition();
        float dist = CalculateDistance(mobPos, playerPos);

        if (dist <= rangeWaithack) {
            mobID = entry->second->GetMobId();
            float mobPosF[2] = { mobPos.x, abs(mobPos.y) };
            float myPos[2] = { playerPos.x, abs(playerPos.y) };
            SendStatePacket(mobPosF);
            SendAttack(0, mobID);
            Sleep(valAOESleep); // that's some sleep I've set so it can reach the target just for testing, so I can adjust it golbally and test different values
                            // doesn't work either with our without it
            SendStatePacket(myPos);
        }
    }
}

Also tried getting a single mobID and sending state packet to it from a thread, attacking from a separate thread the mobID, same, doesn't seem to work...:p

If I outrange the stone for example and take out the distance check, then outrange the stone, I can see that it snaps me to it, so the send state function works. I'm also using it to teleport around thr map and works fine, so that's not the problem.

If I take out the waithack and attack single target just with the send function, it works as well, so the send is working correctly.

I've tested with a bigger paid bot just to make sure that the range works on this server and it does with that one, so that's not somehow limited by the server.

02/27/2021 04:16 ones-and-zer0es.mpeg#8

it helps that you posted your exact code but its still kinda useless since we dont know what GetPlayerPosition, GetPosition, CalculateDistance and the other functions exactly do.

i assume that the entList is the aliveMap or how ever its called, its made up of a map that contains the vid and the pointer to the instance. is there a difference between entry->first and mobID or are the values equal? if not, your GetMobId is probably broken.

02/27/2021 18:48 Aeryas#9

Quote:

Originally Posted by ones-and-zer0es.mpeg

it helps that you posted your exact code but its still kinda useless since we dont know what GetPlayerPosition, GetPosition, CalculateDistance and the other functions exactly do.

i assume that the entList is the aliveMap or how ever its called, its made up of a map that contains the vid and the pointer to the instance. is there a difference between entry->first and mobID or are the values equal? if not, your GetMobId is probably broken.

Cheers, thanks for the reply. The "entList" is indeed a map of all the sorrounding units.

I get their IDs and coordinates, so that's not an issue. Testing the "teleportation" to the mobs seems to be working, sending attack packets works as well, but put together like shown above ( with and without the sleep part ) doesn't seem to be working. That's the only issue I have.

I've tried spam-teleporting on them with different sleep timers between calls and sending packets separately, same result.

02/28/2021 22:39 Aeryas#10

Ok, so what I've discovered is that the SendStatePacket function has to "walk" to the unit in order to register hits, therefore it goes hitting one mob, gets back to it's original place and repeats. On my screen it doesn't look like that, it stays in place, but watching it with another character seems to do so.

The problem with that is that it takes too much time to attack the mobs, therefore it seems unreliable to go back & forth. What I've noticed with a premium bot is that that one attacks few mobs at once and never leaves it's original place, it just "shakes" in place ( like mine does when I put no sleep timer between the teleport function and attack phases ). Are they using some other methods? That's what I'm trying to achieve, but with no success.

Thanks for your attention and help, I really appreciate it.

03/01/2021 22:38 sad666#11

What is your bFunc value in TPacketCGMove packet ? When you use this value as 0 you tell the server that character is there so you should be able to use attack packet without any delay.

03/07/2021 12:03 musty19945#12

Did u solved ? Can u help me "SendCharacterStatePacket"

[Only registered and activated users can see links. Click Here To Register...]

Quote:

float mobPosF[2] = { x, abs(y) };
float rot = 0.2f;
DWORD Adres = *(DWORD*)irisBattlePointer; //*(DWORD*)irisBattlePointer; 00A09370
DWORD Calls = 0x071D240;
__asm
{

mov ecx,Adres
push mobPosF
push rot
push 2 //funcAttack
push 15 //comboType
call Calls
}

03/07/2021 23:13 oatuh998#13

Quote:

Originally Posted by musty19945

Did u solved ? Can u help me "SendCharacterStatePacket"

[Only registered and activated users can see links. Click Here To Register...]

you are in wrong area go up and set breakpoint of first of func with started 55 8B EC and its your SendCharacterStatePacket function address

03/08/2021 10:53 musty19945#14

Quote:

Originally Posted by oatuh998

you are in wrong area go up and set breakpoint of first of func with started 55 8B EC and its your SendCharacterStatePacket function address

[Only registered and activated users can see links. Click Here To Register...]

Code:

void SendCharacterState(float* mobPos, float myRot, uint8_t efunc, uint8_t args)
{
typedef bool(__thiscall* TeleportPacket)(int, const float*, float, uint8_t, uint8_t);
const auto wPacket = reinterpret_cast<TeleportPacket>(Base + 0x16E990); /* SendCharacterState function call */

if (wPacket) {
wPacket(*reinterpret_cast<uintptr_t*>(Base + myNetPointer), mobPos, myRot, efunc, args);
}

}

Usign :

Code:

float mobPos[2] = { mx, abs(my) }; 
float rot = 10.f; 
SendCharacterState(mobPos,rot,15,0);

but I'm still getting this error.
[Only registered and activated users can see links. Click Here To Register...]