Sending Packets

suigetsu4229 · 07/14/2015, 21:51

Hi, I've noticed neither c# nor autoit will send packets over 127 bytes in size and crash the client. Is this related to the methods of allocating memory in these examples or is there a restriction put up by elementclient (doubtful about this because I've sniffed packets bigger than the "limit")? If it's the latter, are there any workarounds?

Sᴡoosh · 07/15/2015, 09:30

No, it's due to the fact that byte length isn't a byte, it'S a CUInt (packed int). After 127, it is two bytes long with a special encoding.

suigetsu4229 · 07/16/2015, 11:35

Quote:

Originally Posted by Sᴡoosh

No, it's due to the fact that byte length isn't a byte, it'S a CUInt (packed int). After 127, it is two bytes long with a special encoding.

Hey, thanks for your answer. However, I'm still lost as to how to pass two bytes as packet length. Here, in the opcode:

PHP Code:


			
            0x60,                                   //PUSHAD

            0xB8, 0x00, 0x00, 0x00, 0x00,           //MOV EAX, SendPacketAddress

            0x8B, 0x0D, 0x00, 0x00, 0x00, 0x00,     //MOV ECX, DWORD PTR [realBaseAddress]

            0x8B, 0x49, 0x20,                       //MOV ECX, DWORD PTR [ECX+20]

            0xBF, 0x00, 0x00, 0x00, 0x00,           //MOV EDI, packetAddress

            0x6A, 0x00,  <--                        //PUSH packetSize

            0x57,                                   //PUSH EDI

            0xFF, 0xD0,                             //CALL EAX

            0x61,                                   //POPAD

            0xC3                                    //RET

There's only place for one byte to write. I tried adding an additional byte and encoding the length in 128 base, but that produces the same result - crashes the client. Sorry if this is really easy and I'm missing something obvious, but I've tried to do this for a good few hours and I can't seem to figure it out myself.

Sᴡoosh · 07/16/2015, 12:47

Yeah, Push only supports one byte as opcode. There's a different function that handles this correctly. This function was never meant to be called directly by the programmers.

What the hell are you sending in a C22 packet that's over 127 bytes btw?

suigetsu4229 · 07/16/2015, 13:33

Quote:

Originally Posted by Sᴡoosh

Yeah, Push only supports one byte as opcode. There's a different function that handles this correctly. This function was never meant to be called directly by the programmers.

What the hell are you sending in a C22 packet that's over 127 bytes btw?

The packet I'm trying to send is the one that recrafts weapons. Normal crafting packet is 18 or so bytes long, but this packet has additional 128 bytes as it needs to pass to the client itemTypeID and index in inventory of each ingredient. What boggles me, though, is that there's 32 empty bytes after itemTypeID bytes and another 32 after index bytes.

Anywho, there was a russian autocraft for 1.4.6- versions, but I guess it doesn't work anymore and I can't seem to find anything related to how it sends packets.

So, is this possible to be done by sending packets? My knowledge about asm and memory manipulating is still low so I wouldn't know how to find the function you mentioned.

Edit: Never mind, I just had to load packetsize into a register and push that register.

ariesta1503 · 01/16/2017, 23:07

how to find SendPacketAddress please.

Kruger2001 · 01/21/2017, 10:59

I found out today how to double the accountstash to 32 slots, when you take everything out, it's gone again.
Just push an item from the stash to position 17, via packet, to expand

Sh@dowX · 01/25/2017, 23:28

Quote:

Originally Posted by Kruger2001

I found out today how to double the accountstash to 32 slots, when you take everything out, it's gone again.
Just push an item from the stash to position 17, via packet, to expand

This I'd love to learn how to do. My stash shows 32 but i'm only able to use 16 slots.

Kruger2001 · 01/26/2017, 09:59

Quote:

Originally Posted by Sh@dowX

This I'd love to learn how to do. My stash shows 32 but i'm only able to use 16 slots.

Yes, I also noticed, I have a stack shared and one on each slot, thats worked for all 32 slots and so I thought it worked with everyone.

jasty · 01/26/2017, 19:31

To put in more than 16 items put something stackable in your stash, split the stack into another slot of the stash by holding down alt key and dragging. Then swap something into your inventory into the newly occupied spot. I found this packet when they merged the servers.

aplavin · 02/25/2017, 18:03

Is it possible to start a catshop with packets (ingame)? I tried sending packet 0x54 (which opens the catshop creation window, as expected) and then 0x4c (copied exactly from a packet sniffer). It works only if I opened the catshop manually before, but not when I remove all items manually and send the same packets.
So, what else is needed for opening a catshop?

ppjdee · 06/26/2017, 19:48

wow, this thread has been going on for a while now lol

tonyphillips1 · 03/26/2019, 04:32

Quote:

Originally Posted by burple6

Here is the autoit code for hunting and gathering resources, as well as the interaction function in AutoIt form. Please note that the code is referencing variables and functions defined in Prophet Bot Recoded, but should be easily changed to suit your environment.

Spoiler

Global $aMATERIALS[1][6]

Func InteractWith($objectId, $interactionType)
ADDHISTORY("Interacting with " & $objectId)
Local $ACTIONSTRUCT = memread($CHAR_DATA_BASE + 0xFF4)
Local $ACTIONLIST = memread($ACTIONSTRUCT + 0x30)
Local $WALKTOACTION = memread($ACTIONLIST + 0x8)

; Action finished = 0
MemWrite($WALKTOACTION + 0x8, $PROCESS_INFORMATION, 0)
; Action start = 1
MemWrite($WALKTOACTION + 0x14, $PROCESS_INFORMATION, 1)
; Action Not Start = 0
MemWrite($WALKTOACTION + 0x24, $PROCESS_INFORMATION, 0)
; objectId
MemWrite($WALKTOACTION + 0x20, $PROCESS_INFORMATION, $objectId)
; interactionType 0 = regAtk, 1 = pick item, 2 = talk to NPC,3 = useSkill, 4 = gatherResources
MemWrite($WALKTOACTION + 0x38, $PROCESS_INFORMATION, $interactionType)
; Set error = 0
MemWrite($WALKTOACTION + 0x34, $PROCESS_INFORMATION, 0)
; Set skill pointer
MemWrite($WALKTOACTION + 0x50, $PROCESS_INFORMATION, 0)
; Set new actionType
MemWrite($ACTIONSTRUCT + 0xC, $PROCESS_INFORMATION, $WALKTOACTION)
; Set next action position to 1
MemWrite($ACTIONSTRUCT + 0x18, $PROCESS_INFORMATION, 1)
; Set new actionType
MemWrite($ACTIONSTRUCT + 0x14, $PROCESS_INFORMATION, $WALKTOACTION)
Do
Sleep(500)
Until $ACTIVE = 0
EndFunc

Func FindHerbs()
; Bug: Does not forget the locations of herbs
Local $i = 0
Local $hBase = 0x00A5B90C
Local $pointer,$counter
$pointer = memread(memread(memread(memread(memread($hBase) + 0x1C) + 0x8) + 0x28) + 0x18)
Global $aMATERIALS[1][6]

ADDHISTORY("Looking for resources " & $pointer)
for $i=0 to 768
Local $item_base = memread(memread($pointer + $i*4) + 0x4)

Local $ITEM_NAME = memread(memread($item_base + 0x164), 'wchar[30]') ;Item-Name
If (_ArraySearch($HERBS,$ITEM_NAME) <> -1 OR _ArraySearch($RESOURCES,$ITEM_NAME) <> -1) Then
Local $ITEM_SN = memread($item_base + 0x110) ;Item-SN
;$array[$counter][0] = memread($item_base + 0x110) ;Item-SN;
Local $ITEM_ID = memread($item_base + 0x10C) ;Item-ID

Local $ITEM_X = (memread($item_base + 0x3C, 'float')+4000)/10 ;Item x-position
Local $ITEM_Y = (memread($item_base + 0x44, 'float')+5500)/10 ;Item y-position
Local $ITEM_Z = memread($item_base + 0x40, 'float')/10 ;Item z-position
Local $ITEM_DISTANCE = Round(10*Sqrt(($HOME_X-$ITEM_X)^2+($HOME_Y-$ITEM_Y)^2+($HOME_Z-$ITEM_Z)^2),1)
;Local $ITEM_DISTANCE = ($DELTA_X + $DELTA_Y + $DELTA_Z)/3
If $ITEM_NAME <> "" Then
Redim $aMATERIALS[$counter+1][6]
$aMATERIALS[$counter][0] = $ITEM_DISTANCE
$aMATERIALS[$counter][1] = $ITEM_NAME
$aMATERIALS[$counter][2] = $ITEM_X
$aMATERIALS[$counter][3] = $ITEM_Y
$aMATERIALS[$counter][4] = $ITEM_Z
$aMATERIALS[$counter][5] = $ITEM_ID
$counter += 1
EndIf
;Else
;MsgBox(0,"RESERROR","Sorry, " & $ITEM_NAME & " is not a resource.")
Endif
Next

; Sort by distance
_ArraySort($aMATERIALS,0,0)
;_ArrayDisplay($aMATERIALS)
If $aMATERIALS[0][1] <> "" Then
ADDHISTORY("Closest gatherable is " & $aMATERIALS[0][1] & ', ' & $aMATERIALS[0][0] & ' away')
Endif
EndFunc

Func GatherHerbs()
FindHerbs()
For $x = 0 to Ubound($aMATERIALS) -1
If $aMATERIALS[$x][1] <> "" Then
;For $x = 0 to 0
If $aMATERIALS[$x][0] < 85 Then
ADDHISTORY("Moving to item " & $aMATERIALS[$x][1] & " distance " & $aMATERIALS[$x][0])
MoveToXYZ($aMATERIALS[$x][2]*10-4000,$aMATERIALS[$x][3]*10-5500,$aMATERIALS[$x][4]*10)
Do
Sleep(500)
Until $ACTIVE = 0
Sleep(1000)
;; Gather the resource
InteractWith($aMATERIALS[$x][5],4)
ADDHISTORY("Now at item " & $aMATERIALS[$x][1])
Do
Sleep(500)
Until $ACTIVE = 0
;FindHerbs()
;Sleep( 10000 )
_ArraySort($aMATERIALS,0,0)
EndIf
ADDHISTORY("Done Gathering.")
Endif
Next
EndFunc

Func ShowResources()
_ArrayDisplay($aMATERIALS)
EndFunc

can you put these offset from the prophet in this code?

Spoiler