[Question] check out storage keeper items by packets

03/27/2013 12:53 nonosocr1986#1
hey there everyone =] , i'm trying to check out all my items @ storage keeper by packets , the header is "0x32" (p.server) , but it takes "m" paremeter , any ideas how to use that ?

thanks in advance =]
03/27/2013 13:14 bloodx#2
itemiid,amount ?
03/27/2013 13:24 nonosocr1986#3
Quote:
Originally Posted by bloodx View Post
itemiid,amount ?
tnx for reply =] , lets assume i got like 500 meduim meds and 500 small meds in my keeper and i wanna check out both meds (500 small + 500 meduim) , tnx again ^^
03/27/2013 13:52 bloodx#4
i'm not sure :P never used :D or just sniff the real send function and look what is in the packet
03/27/2013 14:02 nonosocr1986#5
Quote:
Originally Posted by bloodx View Post
i'm not sure :P never used :D or just sniff the real send function and look what is in the packet
i think that's what i'm going to do xD , cuz i tried

SendKoemV2(0x32,"dd",itemid,amount);

with no luck :\ , but tnx anyway ^^
03/27/2013 14:23 pleaX#6
shouldn't be the first packet the size or amount of total items?
03/27/2013 14:30 nonosocr1986#7
Quote:
Originally Posted by pleaX View Post
shouldn't be the first packet the size or amount of total items?
are you saying it should be something like:

SendKoemV2(0x32,"ddd",totalitems,itemid,amount);

?
03/27/2013 15:47 pleaX#8
yea, I think it's something like this.
Every "m" type packet has it's size as first parameter...
Better check the Roam source to be sure.
03/27/2013 16:53 bloodx#9
uhm @srv it just reads db
Code:
00453FC3  PUSH EAX                                                     ; /Arg5
00453FC4  LEA ECX,DWORD PTR SS:[EBP-DC]                                ; |
00453FCA  PUSH ECX                                                     ; |Arg4
00453FCB  PUSH OFFSET GameServ.??_C@_02BIKLEMDE@db?$AA@                ; |Arg3 = 004B449C ASCII "db"
00453FD0  MOV EDX,DWORD PTR SS:[EBP+10]                                ; |
00453FD3  PUSH EDX                                                     ; |Arg2
00453FD4  MOV EAX,DWORD PTR SS:[EBP+C]                                 ; |
00453FD7  PUSH EAX                                                     ; |Arg1
00453FD8  CALL GameServ.ScanPacket                                     ; \ScanPacket
03/27/2013 19:03 nonosocr1986#10
Quote:
Originally Posted by bloodx View Post
uhm @srv it just reads db
Code:
00453FC3  PUSH EAX                                                     ; /Arg5
00453FC4  LEA ECX,DWORD PTR SS:[EBP-DC]                                ; |
00453FCA  PUSH ECX                                                     ; |Arg4
00453FCB  PUSH OFFSET GameServ.??_C@_02BIKLEMDE@db?$AA@                ; |Arg3 = 004B449C ASCII "db"
00453FD0  MOV EDX,DWORD PTR SS:[EBP+10]                                ; |
00453FD3  PUSH EDX                                                     ; |Arg2
00453FD4  MOV EAX,DWORD PTR SS:[EBP+C]                                 ; |
00453FD7  PUSH EAX                                                     ; |Arg1
00453FD8  CALL GameServ.ScanPacket                                     ; \ScanPacket
then it has to be ID,Amount for sure , hmm i wonder why it's not working :\
03/27/2013 20:40 bloodx#11
well did u make npc talk at first ? I think u need but not sure
03/28/2013 12:23 nonosocr1986#12
Quote:
Originally Posted by bloodx View Post
well did u make npc talk at first ? I think u need but not sure
i've tried that also with no luck :\ , anyone can sniff real send function and check what is the correct packet being sent ?, would appreciate that ^^

EDIT: i've tried RPE to capture the correct packet , but i think it's encrypted , i just got a bunch of hex lines , i tried resending those hex values via RPE it worked , but i wanna decrypt that to be able to send that via my dll , hmm...
03/28/2013 15:34 meak1#13
Arg1:0x2F is the header Arg2: "db" Arg3: Dword Item id i guess Arg4: 0x0D byte, idk for what, i guess slot or smth
03/28/2013 16:17 mohm195#14
It's "dd" ItemIndex & ItemAmount, you have to be near NPC.
03/29/2013 13:37 nonosocr1986#15
Quote:
Originally Posted by meak1 View Post
Arg1:0x2F is the header Arg2: "db" Arg3: Dword Item id i guess Arg4: 0x0D byte, idk for what, i guess slot or smth
that's very helpful ty =] , i'm trying to use olly to capture send packets too but i'm having troubles where to breakpoint :\

P.S i'm trying it in a p.server