[Piercing Blow] BattleServer (State 3) с чего начать?

[PROGRAMMATOR]

Footer consists of 9 bytes with following structure:

// Footer (For 0x41 and 0x43 only)
// 01 00 00 00 // UniqueRoomId 
// 02 00 00 00 // RoomSeed
// 00 // DedicationSlotId

// Footer
// 01 00 00 00 // UniqueRoomId
// 00 // DedicationSlotId
// 02 00 00 00 // RoomSeed

UniqueRoomId is a mask which consists of ServerId, ChannelId, RoomId ...
You can do like this:

UniqueRoomId = (serverId & 0x00000000ff) << 20 | (channelId & 0x00000000ff) << 12 | roomId & 0x0000000fff;
 
Code: C#

// And use:

var roomId = UniqueRoomId & 0x0000000fff;
 
Code: C#

[bola]

Sharing some knowledge
all sub-heads that i was able to find

0 - P2P_SUB_HEAD_USER
1 - P2P_SUB_HEAD_GRENADE
2 - P2P_SUB_HEAD_DROPEDWEAPON
3-6, 9-13 - P2P_SUB_HEAD_OBJECT
7 - P2P_SUB_HEAD_NPC
8 - P2P_SUB_HEAD_STAGEINFO_CHARA
14 - P2P_SUB_HEAD_STAGEINFO_MISSION
15 - P2P_SUB_HEAD_AI
16 - P2P_SUB_HEAD_DOMISKILLOBJECT
17 - P2P_SUB_HEAD_DOMIEVENT
18 - P2P_SUB_HEAD_SENTRYGUN

[PROGRAMMATOR]

bola, all you need is to collect all events flags.

Добавил в первый пост видео о том, как найти флаги событий Udp пакетов.

[TheBestGuy]

Please help me with the structure of the "Chara_DeathDataForClient".

[bola]

for writedata packet there no trick to get event flag ?

[bola]

Programmator if have someway to identify opcode 3 event type please share, because have to many event types to just guess what kind of packet is

[PROGRAMMATOR]

If I understood you correct.

if (events.HasFlag(Events.PosRotation)) // (events & flag) != 0
{
	var posX = reader.ReadUInt16();
	var posY = reader.ReadUInt16();
	var posZ = reader.ReadUInt16();
 
	var camX = reader.ReadUInt16();
	var camY = reader.ReadUInt16();
	var area = reader.ReadUInt16();
}
Code: C#

[bola]

Сообщение от PROGRAMMATOR

If I understood you correct.

if (events.HasFlag(Events.PosRotation)) // (events & flag) != 0
{
	var posX = reader.ReadUInt16();
	var posY = reader.ReadUInt16();
	var posZ = reader.ReadUInt16();
 
	var camX = reader.ReadUInt16();
	var camY = reader.ReadUInt16();
	var area = reader.ReadUInt16();
}
Code: C#

i mean about, EventType: 7, EventType: 12, EventType: 14
they are from opcode 3, but don't have a name, how can i know what kind of function is the flag, by the way is send from client so, writedata in IDA, i don't find any flag with same trick

not sure that i'm doing this correct

[PROGRAMMATOR]

Events consists of masks. Events are masks.
Using my video at first get all the flags.

E.G:

[Flags]
enum Events
{
	ActionState = 0x01,
	Animation 	= 0x02,
	PosRotate 	= 0x04,
	UseObject 	= 0x08,
	// ...
}
 
Events.ActionState | Events.Animation | Events.PosRotate; // 7
Events.PosRotate | Events.UseObject; // 12
Events.Animation | Events.PosRotate | Events.UseObject; // 14
Code: C#

[bola]

i've been working on UDP 3 sniffer and UDP 3 server
i have some flags identified already, and length of each figured, but now i have a issue with this mask that is remain value from a shoot in a window.
what is the meaning of it, name or translation, and also he has a parent value i guess, i was checking at IDA Pro, but there no call for those ifs condition.

2097152 flag
1048576 flag