NEW Packet Structures

[Dark Pallys]

the "Standing" correct me if im wrong but you get it by reading the map tile of where you are opening the corpse or container, and thats just the stack.. it doesnt really matter anymore i think.. in other versions, depending on what value you typed you could open containers that were hidden under other items without removing the items that are on top of it, but it seems to be fixed now..

now the "Backpacks" one is which Slot you wanna open your backpack/container..
they work as above..
starts from 0..
._______________________
|Backpack __________|-|□|X|
|--------|--------|--------|--------|
|--------|--------|--------|--------| <--------- 0
|ŻŻŻŻŻ|ŻŻŻŻŻ|ŻŻŻŻŻ|ŻŻŻŻŻ|
|_____|_____|_____|_____|
|Bag ______________|-|□|X|
|--------|--------|--------|--------|
|--------|--------|--------|--------| <--------- 1
|ŻŻŻŻŻ|ŻŻŻŻŻ|ŻŻŻŻŻ|ŻŻŻŻŻ|
|_____|_____|_____|_____|
|Dead Demon_______ |-|□|X|
|--------|--------|--------|--------|
|--------|--------|--------|--------| <--------- 2
|ŻŻŻŻŻ|ŻŻŻŻŻ|ŻŻŻŻŻ|ŻŻŻŻŻ|
|_____|_____|_____|_____|

[OsQu]

Seems like I have to explain that one. That was the first really hard packet I sniffed out and in that point I didn't understood the Tibia packets. The 'standing' is the wrong word. It should be StackPos or something like that. So that byte is the Corpse's position in the item stack in the tile. (See, I have corrected it in the comment!). The whole line is now fixed

[Bruno]

The Logout packet structure is not working, could anyone check it?

[Juapillo]

the logoutpacket is correct
about making examples... well, that's a good idea. anyways you could make some examples too

thanks for cooperating, feel free to edit and fix the post
~juapillo~

[Juapillo]

oh, also could some1 stick this post and unstick the old one?

[Grob]

If you would put the LongToByte ASM code in packet.dll and recompile it you could use the following function in C++ to call the LongToByte as well as the SendPacket function. Alternatively you can just include the LongToByte for C++ (which is easier) and remove everything else related to the packet.dll.

The code is just dusting on my computer, I'd rather just post it somewhere so it's on the web for someone to find if they would need it.

/****************************/
/* Created by Froboo, 2006. */
/****************************/

#include <windows.h> // Required for finding our tibiaclient (window handling)
#include <stdio.h>

// Declaring how the SENDPACKET and the LONGTOBYTE functions should be used
typedef int (WINAPI *SENDPACKET)(DWORD, char*, BOOL, BOOL);
typedef int (WINAPI *LONGTOBYTE)(long, int);

// Create an instance of the functions
SENDPACKET SendPacket = NULL;
LONGTOBYTE LongToByte = NULL;

// Creating an instance called hLib where we will store the info
// about packet.dll
HINSTANCE hLib;

void UseItemOnFloor( int itemID, int x, int y, int z )
{
	// Get the address of the function so the program will jump to the right
	// location when we make the call to it
	LongToByte = (LONGTOBYTE)GetProcAddress(hLib, "LongToByte");
	
	// The packet consists of 12 bytes where 5 is always the same
	char cPacket[12];
	cPacket[0] = 0x0A;
	cPacket[1] = 0x00;
	cPacket[2] = 0x82;
	
	cPacket[3] = LongToByte( x, 1 ); // retrieve the first byte of x (a 5 digit number equals only 2 bytes)
	cPacket[4] = LongToByte( x, 2 ); // retrieve the second byte of x
	
    cPacket[5] = LongToByte( y, 1 );
	cPacket[6] = LongToByte( y, 2 );
	
	cPacket[7] = z;
	
	cPacket[8] = LongToByte( itemID, 1 );
	cPacket[9] = LongToByte( itemID, 2 );
	
	cPacket[10] = 0x01;
	cPacket[11] = 0x03;

	DWORD PID;
	HWND hwnd = FindWindow( "tibiaclient", NULL ); // Fetch a handle to the tibia client
	GetWindowThreadProcessId( hwnd, &PID ); // Get the process id
	
	SendPacket = (SENDPACKET)GetProcAddress(hLib, "SendPacket");
	SendPacket( PID, cPacket, 1, 0 ); // Send the packet using packet.dll
}

int main()
{
    hLib = LoadLibrary("mod_packet.dll"); // Load mod_packet.dll into hLib
    
    // If I remember correctly these are the coordinates + the id of the first ladder in rookgaard rats
	UseItemOnFloor( 1948, 32097, 32205, 8 );
	
	FreeLibrary(hLib);
	
	return 0;
}

[OsQu]

oh, also could some1 stick this post and unstick the old one?

Done (Msg is too short blabla..)

[Grob]

Does anyone have the structure of the potion packet? I'm incapable of getting it my self right now.

And sorry if it's already been posted somewhere.

[Dark Pallys]

These are the hotkey packets.. they arent explained very well in the first post.. here is how i use it

HOTKEY PACKET - USE AT POS X,Y,Z

bPacket(0) = &H11
bPacket(1) = &H0
bPacket(2) = &H83
bPacket(3) = &HFF
bPacket(4) = &HFF
bPacket(5) = &H0
bPacket(6) = &H0
bPacket(7) = &H0
bPacket(8) = ITEMID
bPacket(9) = ITEMID
bPacket(10) = &H0
bPacket(11) = X
bPacket(12) = X
bPacket(13) = Y
bPacket(14) = Y
bPacket(15) = Z
IF TARGET = CREATURES/PLAYERS
bPacket(16) = &H63
BPacket(17) = &H0
bPacket(18) = &H1
ELSE
bPacket(16) = GroundID
bPacket(17) = GroundID
bPacket(18) = &H0


HOTKEY PACKET - USE AT CREATURE

bPacket(0) = &HD
bPacket(1) = &H0
bPacket(2) = &H84
bPacket(3) = &HFF
bPacket(4) = &HFF
bPacket(5) = &H0
bPacket(6) = &H0
bPacket(7) = &H0
bPacket(8) = Item ID
bPacket(9) = Item ID
bPacket(10) = ItemCount
bPacket(11) = CREATURE_ID
bPacket(12) = CREATURE_ID
bPacket(13) = CREATURE_ID
bPacket(14) = CREATURE_ID

[rtoip]

Log out for FASM assembler (Win32asm)
tested, it works
using: logout

macro logout {
        call logout_
}
macro SendP Packet {
        invoke SendPacket,[TibiaHandle],Packet,1,0
}


section '.data' data readable writeable
...
TibiaHandle     dd 0
logout_packet:
        db 1,0,14h


section '.code' code readable executable
...
proc logout_
        SendP logout_packet
        ret
endp


section '.idata' import data readable writeable

library packet,'PACKET.DLL'

import packet,\
       SendPacket,'SendPacket'