Conquer Packets

Page 1 of 10

07/02/2005 21:28 sabbathin#1

07/02/2005 21:34 pappawolfie#2

excellent work you should put this in the thread for copac keep it all in 1 spot :)

07/02/2005 21:37 sabbathin#3

i was thinking on keeping this as a unique topic, so we can gather info about packets, perhaps we could use it in any other packet sender, but as i got em using COPAC, choko just lemme know if u want it to be on ur topic

07/02/2005 21:41 pappawolfie#4

maybe that is a good idea 1 thread for working packets 1 thread for the prog and updates/bugs (if any)/wishes for updates etc

07/02/2005 21:43 chocoman4k#5

Quote:

Originally posted by pappawolfie@Jul 2 2005, 21:41
maybe that is a good idea 1 thread for working packets 1 thread for the prog and updates/bugs (if any)/wishes for updates etc

I was going to say that, nice idea :)
Edit: I wonder if some mod could move all posts related to packets to this thread from the COPAC thread?

07/03/2005 00:22 Ultimation#6

This thread wil be like a library for working packets, please reframe from person notes here and only enter working packets and what they do :)

07/03/2005 09:46 sabbathin#7

ok i figured out how the jump packet works as an example
ill show some logs
this is from TC coords 675,412 to 675,413 several times, lets see how it works
1C 00 F2 03 11 92 89 00 96 25 12 00 A3 02 9C 01 ; .........%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 17 146 137
675,413
1C 00 F2 03 DF 48 8A 00 96 25 12 00 A3 02 9C 01 ; .....H...%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 223 72 138
675,413
1C 00 F2 03 99 2F 8B 00 96 25 12 00 A3 02 9C 01 ; ...../...%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 153 47 139
675,413
1C 00 F2 03 02 1D 8C 00 96 25 12 00 A3 02 9C 01 ; .........%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 2 29 140

675,413
1C 00 F2 03 B9 4E 8F 00 96 25 12 00 A3 02 9C 01 ; .....N...%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 185 78 143
675,413
1C 00 F2 03 37 5C 90 00 96 25 12 00 A3 02 9C 01 ; ....7\...%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 55 92 144
675,413
1C 00 F2 03 82 26 93 00 96 25 12 00 A3 02 9C 01 ; .....&...%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 130 38 147

those numbers at the end of every packet are the decimal vlaue of 5th, 6th and 7th bytes they work as a counter, actually 2 of em are random the one that cares is 7th byte as u can see it will increment everytime u jump into the same place again
ive been on the same spot 147 times by now, i wanna jump there again from 412 to 413 i go 412 and send the same packet just replacing 5th,6th and 7th bytes it would be like this:
1C 00 F2 03 b9 4e 94 00 96 25 12 00 A3 02 9C 01 ; .....&...%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............
the b9 4e 94 is 185 78 148 in decimal, being 7th byte the one wich is 148 other two are completely random so far.
b9 4f 94 would be for 149, and so on, hope this helps

404 to 413
1C 00 F2 03 FC 1A AF 00 96 25 12 00 A3 02 94 01 ; .........%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............
411 to 413
1C 00 F2 03 BA E3 B1 00 96 25 12 00 A3 02 9B 01 ; .........%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............
2 or more spaces
1= 156 = 9c
2= 155 = 9b
3= 154 = 9a
4= 153 = 99
5= 152 = 98
6= 151 = 97
7= 150 = 96
8= 149 = 95
9= 148 = 94
now the one changin besides 5th to 7th, is 15th
test:
411 to 413
1C 00 F2 03 ba e3 b2 00 96 25 12 00 A3 02 9B 01
00 00 00 00 A3 02 9D 01 8E 00 00 00

675,411 to 674,411
1C 00 F2 03 53 64 C1 00 96 25 12 00 A3 02 9B 01 ; ....Sd...%...... 83 100 193
00 00 00 00 A2 02 9B 01 8E 00 00 00 ; ............ 162 2 155 = A2 02 9B
675,411 to 674,411
1C 00 F2 03 A4 3A C3 00 96 25 12 00 A3 02 9B 01 ; .....:...%...... 164 58 195
00 00 00 00 A2 02 9B 01 8E 00 00 00 ; ............
-
1C 00 F2 03 44 83 C5 00 96 25 12 00 A3 02 9B 01 ; ....D....%...... x x 197
00 00 00 00 A2 02 9B 01 8E 00 00 00 ; ............
-
1C 00 F2 03 3d 8a c7 00 96 25 12 00 A3 02 9B 01 ; ....D....%...... x x 199
00 00 00 00 A2 02 9B 01 8E 00 00 00 ; ............

675,411 to 672,411
1C 00 F2 03 BF F6 C9 00 96 25 12 00 A3 02 9B 01 ; .........%......
00 00 00 00 A0 02 9B 01 8E 00 00 00 ; ............
now is the 21th byte changing like this
1 space = A2 = 162
2=A1=161
3=A0=160
.
.
.
9=9a= 158

07/03/2005 10:46 sabbathin#8

now im stucked with these kind of jumps cant figure out how they work

676,411 to 665,403
1C 00 F2 03 B1 D9 D4 00 96 25 12 00 A4 02 9B 01 ; .........%......
00 00 00 00 99 02 93 01 8E 00 00 00 ; ............ 99 02 93 = 153 2 147

676,411 to 663,390
1C 00 F2 03 47 29 D7 00 96 25 12 00 99 02 93 01 ; ....G)...%......
00 00 00 00 97 02 86 01 8E 00 00 00 ; ............ 97 02 86 = 151 2 134

676,411 to 696,406
1C 00 F2 03 BF C8 DB 00 96 25 12 00 A4 02 9B 01 ; .........%...... 164 2 155
00 00 00 00 AE 02 96 01 8E 00 00 00 ; ............ 174 2 150

a4= 164 = 1 de diferencia
99= 153= 13 de diferencia

07/03/2005 11:02 sabbathin#9

ok, i hope this helps, using chocoman4k COPAC (AWESOME DUDE), u'll need to reach invalide coordinates to know your new coordinates or d/c an conn again, use another client to see u moving, i couldnt test it on guild gate cause my char is a poor noob and it would get killed before it gets the door. Couldnt figure out jumping packet, something weird about wrong msg with first packer recv and second one says invalid jump but still no jumping

sit down
1C 00 F2 03 92 45 11 00 C6 57 12 00 4B 01 66 00 ; .....E...W..K.f.
00 00 00 00 FA 00 00 00 7E 00 00 00 ; ........~...
move one step south-west
0C 00 ED 03 C6 57 12 00 F6 01 00 00 ; .....W......
move north-west
0C 00 ED 03 C6 57 12 00 DC 01 00 00 ; .....W......
move north-east
0C 00 ED 03 C6 57 12 00 42 01 00 00 ; .....W..B...
move west
0C 00 ED 03 C6 57 12 00 DD 01 00 00 ; .....W......
move east
0C 00 ED 03 C6 57 12 00 D1 01 00 00 ; .....W......
move down
0C 00 ED 03 C6 57 12 00 27 01 00 00 ; .....W..'...
move up
0C 00 ED 03 C6 57 12 00 CB 01 00 00 ; .....W......
PK mode on
1C 00 F2 03 1D 9E 53 00 C6 57 12 00 00 00 00 00 ; ......S..W......
00 00 00 00 00 00 00 00 98 00 00 00 ; ............
Peace mode
1C 00 F2 03 14 6E 54 00 C6 57 12 00 00 00 00 00 ; .....nT..W......
00 00 00 00 01 00 00 00 98 00 00 00 ; ............
Team mode
1C 00 F2 03 C4 BC 54 00 C6 57 12 00 00 00 00 00 ; ......T..W......
00 00 00 00 02 00 00 00 98 00 00 00 ; ............
Capture Mode
1C 00 F2 03 18 85 55 00 C6 57 12 00 00 00 00 00 ; ......U..W......
00 00 00 00 03 00 00 00 98 00 00 00 ; ............
Taking Head Gear off
14 00 F1 03 16 EA A4 02 01 00 00 00 06 00 00 00 ; ................
A9 12 44 00 ; ..D.
Wearing Head Gear
14 00 F1 03 16 EA A4 02 01 00 00 00 04 00 00 00 ; ................
97 AB 44 00 ; ..D.
14 00 F1 03 (something maybe item) 02 01 00 00 00 04 00 00 00 ; .....`}.........
(something maybe lvl) 00 ; ....

Equiping left hand weapon ( im an archer)
14 00 F1 03 70 F5 A4 02 00 00 00 00 04 00 00 00 ; ....p...........
D9 A5 45 00 ; ..E.
Unequip l hand weap
14 00 F1 03 70 F5 A4 02 05 00 00 00 06 00 00 00 ; ....p...........
66 26 4A 00 ; f&J.
Equip r hand weap
14 00 F1 03 5D F6 A4 02 04 00 00 00 04 00 00 00 ; ....]...........
BC B9 4A 00 ; ..J.
Unequipl hand weap
14 00 F1 03 5D F6 A4 02 04 00 00 00 04 00 00 00 ; ....]...........
BC B9 4A 00 ; ..J.

-
useless i think but, restart sky animation
1C 00 F2 03 13 B7 70 00 C6 57 12 00 00 00 00 00 ; ......p..W......
00 00 00 00 00 00 00 00 89 00 00 00 ; ............
scatter u have to send one first then the other, if u send the same packet two times it wont work
1C 00 FE 03 47 2C 81 00 C6 57 12 00 6A 65 28 07 ; ....G,...W..je(.
16 EA 39 82 15 00 00 00 CB A7 24 70 ; ..9.......$p

1C 00 FE 03 E5 6E 7F 00 C6 57 12 00 6A 65 28 07 ; .....n..W..je(.
16 6A 39 B2 15 00 00 00 CB A7 24 D2 ; .j9.......$.
Market warehouse
10 00 EF 07 2C 00 00 00 00 00 00 00 00 00 00 00 ; ....,...........
-Both of this things may vary with coordinates
makes everybody dissapear(at least at market)
1C 00 F2 03 B3 FA A2 00 C6 57 12 00 EB 00 08 01 ; .........W......
00 00 00 00 F0 00 14 01 8E 00 00 00 ; ............
brings everybody back
1C 00 F2 03 F2 11 A3 00 C6 57 12 00 EF 00 16 01 ; .........W......
00 00 00 00 E9 00 09 01 8E 00 00 00 ; ............
-
Seem like u buy something but then its back to the store (may vary with ur location)
14 00 F1 03 E3 9A 01 00 E3 9A 01 00 15 00 00 00 ; ................
A8 4E B1 00 ; .N..
ok i figured out how the jump packet works as an example
ill show some logs
this is from TC coords 675,412 to 675,413 several times, lets see how it works
1C 00 F2 03 11 92 89 00 96 25 12 00 A3 02 9C 01 ; .........%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 17 146 137
675,413
1C 00 F2 03 DF 48 8A 00 96 25 12 00 A3 02 9C 01 ; .....H...%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 223 72 138
675,413
1C 00 F2 03 99 2F 8B 00 96 25 12 00 A3 02 9C 01 ; ...../...%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 153 47 139
675,413
1C 00 F2 03 02 1D 8C 00 96 25 12 00 A3 02 9C 01 ; .........%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 2 29 140

675,413
1C 00 F2 03 B9 4E 8F 00 96 25 12 00 A3 02 9C 01 ; .....N...%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 185 78 143
675,413
1C 00 F2 03 37 5C 90 00 96 25 12 00 A3 02 9C 01 ; ....7\...%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 55 92 144
675,413
1C 00 F2 03 82 26 93 00 96 25 12 00 A3 02 9C 01 ; .....&...%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............ 130 38 147

those numbers at the end of every packet are the decimal vlaue of 5th, 6th and 7th bytes they work as a counter, actually 2 of em are random the one that cares is 7th byte as u can see it will increment everytime u jump into the same place again
ive been on the same spot 147 times by now, i wanna jump there again from 412 to 413 i go 412 and send the same packet just replacing 5th,6th and 7th bytes it would be like this:
1C 00 F2 03 b9 4e 94 00 96 25 12 00 A3 02 9C 01 ; .....&...%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............
the b9 4e 94 is 185 78 148 in decimal, being 7th byte the one wich is 148 other two are completely random so far.
b9 4f 94 would be for 149, and so on, hope this helps

404 to 413
1C 00 F2 03 FC 1A AF 00 96 25 12 00 A3 02 94 01 ; .........%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............
411 to 413
1C 00 F2 03 BA E3 B1 00 96 25 12 00 A3 02 9B 01 ; .........%......
00 00 00 00 A3 02 9D 01 8E 00 00 00 ; ............
2 or more spaces
1= 156 = 9c
2= 155 = 9b
3= 154 = 9a
4= 153 = 99
5= 152 = 98
6= 151 = 97
7= 150 = 96
8= 149 = 95
9= 148 = 94
now the one changin besides 5th to 7th, is 15th
test:
411 to 413
1C 00 F2 03 ba e3 b2 00 96 25 12 00 A3 02 9B 01
00 00 00 00 A3 02 9D 01 8E 00 00 00

675,411 to 674,411
1C 00 F2 03 53 64 C1 00 96 25 12 00 A3 02 9B 01 ; ....Sd...%...... 83 100 193
00 00 00 00 A2 02 9B 01 8E 00 00 00 ; ............ 162 2 155 = A2 02 9B
675,411 to 674,411
1C 00 F2 03 A4 3A C3 00 96 25 12 00 A3 02 9B 01 ; .....:...%...... 164 58 195
00 00 00 00 A2 02 9B 01 8E 00 00 00 ; ............
-
1C 00 F2 03 44 83 C5 00 96 25 12 00 A3 02 9B 01 ; ....D....%...... x x 197
00 00 00 00 A2 02 9B 01 8E 00 00 00 ; ............
-
1C 00 F2 03 3d 8a c7 00 96 25 12 00 A3 02 9B 01 ; ....D....%...... x x 199
00 00 00 00 A2 02 9B 01 8E 00 00 00 ; ............

675,411 to 672,411
1C 00 F2 03 BF F6 C9 00 96 25 12 00 A3 02 9B 01 ; .........%......
00 00 00 00 A0 02 9B 01 8E 00 00 00 ; ............
now is the 21th byte changing like this
1 space = A2 = 162
2=A1=161
3=A0=160
.
.
.
9=9a= 158

edit: Sorry if this is to big and/or doesnt belong here

07/03/2005 11:37 chocoman4k#10

Lets find the position of the coordinates with the help of your your first jump packet:

676,411 to 665,403
1C 00 F2 03 B1 D9 D4 00 96 25 12 00 A4 02 9B 01 ; .........%......
00 00 00 00 99 02 93 01 8E 00 00 00 ; ............

676 = 2A4 in hex -> A4 02 low endian
411 = 19B in hex -> 9B 01 low endian

665 = 299 in hex -> 99 02 low endian
403 = 193 in hex -> 93 01 low endian

Looking at the packet it's clear where the from / to coordinates are :)

1C 00 F2 03 B1 D9 D4 00 96 25 12 00 <A4 02> <9B 01> ; x / y from
00 00 00 00 <99 02> <93 01> 8E 00 00 00 ; x / y to

You can even let the <> in while sending the packet, COPAC will ignore those characters.

07/03/2005 11:41 sabbathin#11

holly, never tried low endian XD, thanks :D now i can get the pieces of my head all together :P

07/03/2005 11:56 chocoman4k#12

That's a nice idea. Lets do it like that, allow every user to post max 1. post and keep updating it with his new discoveries so that it doesn't get flooded with posts. Here is an additon to sabbathin's sit packets:

sit down looking to south-west:
1C 00 F2 03 58 01 80 00 2C 94 12 00 <4E 02> <B9 00> ; coordinates
<00> 00 00 00 FA 00 00 00 7E 00 00 00 ; direction

sit down looking to west:
1C 00 F2 03 CE 6D 80 00 2C 94 12 00 <4E 02> <B9 00> ; coordinates
<01> 00 00 00 FA 00 00 00 7E 00 00 00 ; direction

sit down looking to nort-west:
1C 00 F2 03 CE 6D 80 00 2C 94 12 00 <4E 02> <B9 00> ; coordinates
<02> 00 00 00 FA 00 00 00 7E 00 00 00 ; direction

sit down looking to north:
1C 00 F2 03 FB E2 7A 00 2C 94 12 00 <4F 02> <B9 00> ; coordinates
<03> 00 00 00 FA 00 00 00 7E 00 00 00 ; direction

sit down looking to north-east:
1C 00 F2 03 80 BF 7B 00 2C 94 12 00 <4F 02> <B9 00> ; coordinates
<04> 00 00 00 FA 00 00 00 7E 00 00 00 ; direction

sit down looking to east:
1C 00 F2 03 39 27 7E 00 2C 94 12 00 <4F 02> <B9 00> ; coordinates
<05> 00 00 00 FA 00 00 00 7E 00 00 00 ; direction

sit down looking to south-east:
1C 00 F2 03 E0 C3 7C 00 2C 94 12 00 <4F 02> <B9 00> ; coordinates
<06> 00 00 00 FA 00 00 00 7E 00 00 00 ; direction

sit down looking to south:
1C 00 F2 03 6C 2C 7A 00 2C 94 12 00 <4F 02> <B9 00> ; coordinates
<07> 00 00 00 FA 00 00 00 7E 00 00 00 ; direction

The coordinates are being ignored by the server by the way.

ultimatehaker:
How about you post your dance / super effects packets? :P

07/03/2005 12:12 Peach#13

last line of char create packets for small girl taoist in co1:

00 00 00 00 D1 07 64 00 05 F0 50 00 ; ......d...P.

example:

3C 00 E9 03 72 65 64 65 76 69 6C 39 33 00 00 00 ; <...redevil93...
00 00 00 00 6D 69 6C 6B 79 00 00 00 00 00 00 00 ; ....milky.......
00 00 00 00 31 32 33 34 35 36 37 38 39 00 00 00 ; ....123456789...
00 00 00 00 D1 07 64 00 05 F0 50 00 ; ......d...P.

edit onli the last line

btw anyone know how to create other invalid chars so that the people dcs? i duno if this belong to this topic

y now when i send packets it shutdowns my conquer?

redevil93 is login name
milky is the name of char in game
123456789 is the password

07/03/2005 12:44 behelit#14

it ignores the user pass anyway
you can actually create characters on other peoples accounts but they wont see it until they delete theirs

D1 07 = small
64 00 = tao

small fem = D1 07
large fem = D2 07
small male = EB 03
large male = EC 03

trojan = 0A
warrior= 14
knight = 1E
archer = 28
tao = 64
woodsaint = 7D

the rest are in the profession.ini

you can start a new char with a firesaint (highest profession for that class) instead of a interntao but the only advantage so far is that you dont have to get promoted

07/03/2005 14:28 compwiz#15

I had a, what I thought was, a decent idea. The packets you get when a water tao casts its spells on you. My water tao has mostly fixed stuff so I'm guessing thats what the packets would have in them. And also... Maybe getting teh packet for an XP skill, superman anyone, then getting another class to send it... You know what I'm getting at right? Anyway, here are a few packets from my experiments. I think the reving to certain cities might be totally useless because I tried it more then once and got different packets.

Leveling(to lvl 6):
1C 00 F2 03 21 2A FC 02 7B 1C 12 00 B8 01 DD 01 ; ....!*..{.......
01 00 00 00 2F 1C 12 00 A2 00 00 00 ; ..../.......

Reving to TC:
1C 00 F2 03 C4 D2 EC 02 7B 1C 12 00 00 00 00 00 ; ........{.......
00 00 00 00 00 00 00 00 94 00 00 00 ; ............

1C 00 F2 03 41 D7 EC 02 7B 1C 12 00 00 00 00 00 ; ....A...{.......
00 00 00 00 00 00 00 00 AA 00 00 00 ; ............

Reving to Phoenix Castle:
20 00 F4 03 7B 1C 12 00 0F 19 33 03 A5 29 FE 67 ; ...{.....3..).g
6F 45 4D 72 3C 2B EC 02 57 0B A3 3F 12 AA 00 00 ; oEMr<+..W..?....

1C 00 F2 03 F0 05 21 03 7B 1C 12 00 00 00 00 00 ; ......!.{.......
00 00 00 00 00 00 00 00 94 00 00 00 ; ............

1C 00 F2 03 E6 0B 21 03 7B 1C 12 00 00 00 00 00 ; ......!.{.......
00 00 00 00 00 00 00 00 AA 00 00 00 ; ............

Reving to Ape City:
1C 00 F2 03 25 2E 1F 03 7B 1C 12 00 00 00 00 00 ; ....%...{.......
00 00 00 00 00 00 00 00 94 00 00 00 ; ............

1C 00 F2 03 D4 35 1F 03 7B 1C 12 00 00 00 00 00 ; .....5..{.......
00 00 00 00 00 00 00 00 AA 00 00 00 ; ............

Reving to Desert City:
1C 00 F2 03 67 0D 1A 03 7B 1C 12 00 00 00 00 00 ; ....g...{.......
00 00 00 00 00 00 00 00 94 00 00 00 ; ............

1C 00 F2 03 46 12 1A 03 7B 1C 12 00 00 00 00 00 ; ....F...{.......
00 00 00 00 00 00 00 00 AA 00 00 00 ; ............

14 00 F1 03 7B 1C 12 00 00 00 00 00 1B 00 00 00 ; ....{...........
52 13 1A 03 ; R...

Reving to Bird Island:
1C 00 F2 03 26 57 1C 03 7B 1C 12 00 00 00 00 00 ; ....&W..{.......
00 00 00 00 00 00 00 00 94 00 00 00 ; ............

1C 00 F2 03 4B 5B 1C 03 7B 1C 12 00 00 00 00 00 ; ....K[..{.......
00 00 00 00 00 00 00 00 AA 00 00 00 ; ............

14 00 F1 03 7B 1C 12 00 00 00 00 00 1B 00 00 00 ; ....{...........
54 61 1C 03 ; Ta..

Getting lvl 3 invisibility cast on you:
20 00 F4 03 7B 1C 12 00 96 53 EF 02 8A 2F D5 33 ; ...{....S.../.3
5C 31 18 71 49 03 FB 38 34 2D 8B 11 12 AA 00 00 ; \1.qI..84-......

Getting lvl 4(fixed) stigma cast on you:
20 00 F4 03 7B 1C 12 00 66 75 EC 02 66 5B EE 0D ; ...{...fu..f[..
5A 12 74 54 4B 70 23 35 72 7E 78 69 12 AA 00 00 ; Z.tTKp#5r~xi....

Getting lvl 4(fixed) Magic Shield cast on you:
20 00 F4 03 7B 1C 12 00 F2 CC 11 03 93 1C DF 21 ; ...{..........!
BF 78 0F 1F 72 5A 75 5D BA 19 CD 20 12 AA 00 00 ; .x..rZu]... ....

Getting lvl 4(fixed) Star Of Accuracy cast on you:
14 00 F1 03 7B 1C 12 00 00 00 00 00 1B 00 00 00 ; ....{...........
CC 83 04 03 ; ....

Getting reved:
20 00 F4 03 7B 1C 12 00 53 C6 19 03 DA 58 2D 6A ; ...{...S....X-j
24 08 D1 5D DA 44 F5 18 ED 5B 11 3D 12 AA 00 00 ; $..].D...[.=....

Page 1 of 10

Last »