[Question] check out storage keeper items by packets

[nonosocr1986]

hey there everyone =] , i'm trying to check out all my items @ storage keeper by packets , the header is "0x32" (p.server) , but it takes "m" paremeter , any ideas how to use that ?

thanks in advance =]

[bloodx]

itemiid,amount ?

[nonosocr1986]

Originally Posted by bloodx

itemiid,amount ?

tnx for reply =] , lets assume i got like 500 meduim meds and 500 small meds in my keeper and i wanna check out both meds (500 small + 500 meduim) , tnx again ^^

[bloodx]

i'm not sure :P never used or just sniff the real send function and look what is in the packet

[nonosocr1986]

Originally Posted by bloodx

i'm not sure :P never used or just sniff the real send function and look what is in the packet

i think that's what i'm going to do xD , cuz i tried

SendKoemV2(0x32,"dd",itemid,amount);

with no luck :\ , but tnx anyway ^^

[pleaX]

shouldn't be the first packet the size or amount of total items?

[nonosocr1986]

Originally Posted by pleaX

shouldn't be the first packet the size or amount of total items?

are you saying it should be something like:

SendKoemV2(0x32,"ddd",totalitems,itemid,amount);

?

[pleaX]

yea, I think it's something like this.
Every "m" type packet has it's size as first parameter...
Better check the Roam source to be sure.

[bloodx]

uhm @srv it just reads db

00453FC3  PUSH EAX                                                     ; /Arg5
00453FC4  LEA ECX,DWORD PTR SS:[EBP-DC]                                ; |
00453FCA  PUSH ECX                                                     ; |Arg4
00453FCB  PUSH OFFSET GameServ.??_C@_02BIKLEMDE@db?$AA@                ; |Arg3 = 004B449C ASCII "db"
00453FD0  MOV EDX,DWORD PTR SS:[EBP+10]                                ; |
00453FD3  PUSH EDX                                                     ; |Arg2
00453FD4  MOV EAX,DWORD PTR SS:[EBP+C]                                 ; |
00453FD7  PUSH EAX                                                     ; |Arg1
00453FD8  CALL GameServ.ScanPacket                                     ; \ScanPacket

[nonosocr1986]

Originally Posted by bloodx

uhm @srv it just reads db

00453FC3  PUSH EAX                                                     ; /Arg5
00453FC4  LEA ECX,DWORD PTR SS:[EBP-DC]                                ; |
00453FCA  PUSH ECX                                                     ; |Arg4
00453FCB  PUSH OFFSET GameServ.??_C@_02BIKLEMDE@db?$AA@                ; |Arg3 = 004B449C ASCII "db"
00453FD0  MOV EDX,DWORD PTR SS:[EBP+10]                                ; |
00453FD3  PUSH EDX                                                     ; |Arg2
00453FD4  MOV EAX,DWORD PTR SS:[EBP+C]                                 ; |
00453FD7  PUSH EAX                                                     ; |Arg1
00453FD8  CALL GameServ.ScanPacket                                     ; \ScanPacket

then it has to be ID,Amount for sure , hmm i wonder why it's not working :\

[bloodx]

well did u make npc talk at first ? I think u need but not sure

[nonosocr1986]

Originally Posted by bloodx

well did u make npc talk at first ? I think u need but not sure

i've tried that also with no luck :\ , anyone can sniff real send function and check what is the correct packet being sent ?, would appreciate that ^^

EDIT: i've tried RPE to capture the correct packet , but i think it's encrypted , i just got a bunch of hex lines , i tried resending those hex values via RPE it worked , but i wanna decrypt that to be able to send that via my dll , hmm...

[meak1]

Arg1:0x2F is the header Arg2: "db" Arg3: Dword Item id i guess Arg4: 0x0D byte, idk for what, i guess slot or smth

[mohm195]

It's "dd" ItemIndex & ItemAmount, you have to be near NPC.

[nonosocr1986]

Originally Posted by meak1

Arg1:0x2F is the header Arg2: "db" Arg3: Dword Item id i guess Arg4: 0x0D byte, idk for what, i guess slot or smth

that's very helpful ty =] , i'm trying to use olly to capture send packets too but i'm having troubles where to breakpoint :\

P.S i'm trying it in a p.server