Problem with Packets.

01/27/2015 21:04 rafaal#1
I want to make a L2Net script to sell in npc shop CryC 100k by 100k.
I took the packet of the sell and inject it, and nothing happends. I compare the packets of 4 sells of 100k cryC and it only change in 4 digits.

Before start capturing packet I had 14917842 crystal C and 2578293567 ADENA. When I sell 100k CryC and I earn 150kk ADENA.

Here are the packets of each buy and *** "crystalsCbefore - crystalsCafter // AdenaAfterSellCrystals"


37 38 EE 04 00 01 00 00 00 9A B9 36 40 B3 05 00 00 A0 86 01 00 00 00 00 00 *** 14917842 - 14817842 // 2728293567
37 5E EE 04 00 01 00 00 00 9A B9 36 40 B3 05 00 00 A0 86 01 00 00 00 00 00 *** 14817842 - 14717842 // 2878293567
37 31 EE 04 00 01 00 00 00 9A B9 36 40 B3 05 00 00 A0 86 01 00 00 00 00 00 *** 14717842 - 14617842 // 3028293567
37 A1 ED 04 00 01 00 00 00 9A B9 36 40 B3 05 00 00 A0 86 01 00 00 00 00 00 *** 14617842 - 14517842 // 3178293567

As u can see, the diference start in 3rd digit and end in the 6th one.

Why this change?? I don't know the structure of packets and I can't find the relation between item/adena and packets. Maybe u can help me to understand that.

38 EE
5E EE
31 EE
A1 ED

Thanks to all.

EDIT!!

I have more information, A0 86 01 is quantity of crystal (100k) and B3 05 is the item (cryC).

I have sold lot of 100k cryC to see the packets. All of them change this 4 digits but only once two consecutive packets were identical. It makes me crazy.

I have tried selling twice 100k of cry with the same quantity of cry C and Adena in the inventory, and the packets were different too.

I can't decrypt well the packet ...
01/28/2015 07:27 afk1min#2
Do you think this is a mother****ing game? Are you purposely trying to hide the protocol version?

The first dword after the opcode is the request (the SellList or BuySellList) ID. You must thus stay near the NPC and inject ReqBypassToServer with a bypass that opens a sell list, read this request ID and then instantly inject the ReqSellItem with that ID.
Yes, it is true that request IDs are being reused from time to time (even sequentially) and essentially have no real purpose, except for stopping people like you.
01/28/2015 20:43 rafaal#3
Thanks for the answer.

I don't know exactly how to read this request ID.

I have found a post talking about BUYING in NPC shop, and it talk about packet.read, packet.write and something hard for me... I am trying all, and trying to understand, but I need quite help.

Thanks!

PD: I don't post URL found, coz I don't wanna be punished for spam.
01/29/2015 20:58 rafaal#4
I know exactly where is the LISTID. It is in a packet sended by server called "ExBuySellPacket". But I dont know how to take the part of the packet I need and create new one like "37 XX XX XX XX 01 00 00 00 9A B9 36 40 B3 05 00 00 A0 86 01 00 00 00 00 00" with the XX took from the packet received from server.

I am working hard for it, but it's difficult to me.