Introduction

Welcome to the Conquer Online server development and client modifications wiki. This wiki is hosted publicly using Git, published using mdBook, and maintained by the open source community. Pages on this wiki cover topics such as server-client message types, cryptography, client file formats, constants, system overviews, and more.

To participate in this collaborative effort to document Conquer Online development, the following rules must be followed:

• Articles must be written from a neutral point of view.
• Authors must respect each other, and not engage in personal attacks.
• Authors must not publish pirated programs.

Please read up on the code of conduct found in the root of the repository.

Verification

Statuses are used to indicate how reliable a page is / what the source of information is. Specifically, if information has been gathered from a community source, such as a private server project, then the status should be unverified until the server is run and the behavior can be at least observed.

• 🚩 Incomplete: The source is unknown and the information is incomplete.
• ❓ Unverified: The source is unknown or cannot be verified.
• ☑️ Assumed (Observed): Assumed by observing the behavior in the client.
• ☑️ Assumed (Soul): Assumed by reading the leaked client source code from TQ.
• ✅ Verified (Client): Confirmed by reverse engineering the client binary.
• ✅ Verified (Server): Confirmed by reverse engineering the leaked server binaries.

Sections

This wiki is broken up into multiple sections:

• Algorithms: Calculations made for attacks, rates, skill distances, and more.
• Constants: Hard-coded constants found in and across messages and the client.
• Files: File formats and definitions for various content types.
• Network: Message structures and client-server networking.
• Renderers: System descriptions for rendering content in the client.
• Security: Cryptography and security around networking and content.
• Strings: Details on strings and restrictions on inputs.

Algorithms

This section documents algorithms and calculations for attacks, movement, and more.

Conquer Online's client and server both utilize Microsoft's rand function for random number generation. This can be seen when generating a seed for RC5 in later patches of the client. Algorithms documented by this section that reference rand are assumed to use the Microsoft C implementation.

Subsections

• Calculations: Algorithms used in calculating distance, damage, etc.
• Rates: Descriptions of random rates for various systems.

Calculations

Attributes

Damage

Direction

Enlightenment

Item Durability

Role View

Rates

Item Composition

Item Sockets

Constants

Action

Actions are emotes a role can perform. Not all roles can perform all types of actions. For monsters and players, this is determined by the 3dmotion.ini file. For NPCs, this is determined by npc.ini, which links with 3dmotion.ini for ACTION_STANDBY, ACTION_REST1, and ACTION_SAYHELLO.

Table of Contents

• Patch 4267

Patch 4267

☑️ Assumed (Observed) - Soul

enum ActionType {

    ACTION_DANCE1 = 1;
    ACTION_DANCE2 = 2;
    ACTION_DANCE3 = 3;
    ACTION_DANCE4 = 4;
    ACTION_DANCE5 = 5;
    ACTION_DANCE6 = 6;
    ACTION_DANCE7 = 7;
    ACTION_DANCE8 = 8;
    ACTION_STANDBY = 100;
    ACTION_REST1 = 101;
    ACTION_REST2 = 102;
    ACTION_REST3 = 103;
    ACTION_STANDBY_I = 105;
    ACTION_WALKL = 110;
    ACTION_WALKR = 111;
    ACTION_WALKL_I = 115;
    ACTION_WALKR_I = 116;
    ACTION_RUNL = 120;
    ACTION_RUNR = 121;
    ACTION_TRANSFORM = 122;
    ACTION_RUNL_I = 125;
    ACTION_RUNR_I = 126;
    ACTION_JUMP = 130;
    ACTION_JUMP_BACK = 131;
    ACTION_JUMP_RUN = 132;
    ACTION_JUMP_ATK = 140;
    ACTION_JUMP_ATKEND = 141;
    ACTION_LAUGH = 140;
    ACTION_GUFFAW = 151;
    ACTION_FURY = 160;
    ACTION_SAD = 150;
    ACTION_SALUTE = 160;
    ACTION_GENUFLECT = 170;
    ACTION_EXCITEMENT = 180;
    ACTION_SAYHELLO = 190;
    ACTION_FAINT = 190;
    ACTION_LIE = 200;
    ACTION_KNEEL = 220;
    ACTION_COOL = 230;
    ACTION_COOLPOSE = 231;
    ACTION_SWIM = 240;
    ACTION_SITDOWN = 250;
    ACTION_SITDOWN_STATIC = 251;
    ACTION_ZAZEN = 260;
    ACTION_ZAZENCOOL = 261;
    ACTION_PICKUP = 262;
    ACTION_ALERT_I = 305;
    ACTION_DODGE0 = 311;
    ACTION_BRUISE0 = 321;
    ACTION_BRUISE1 = 321;
    ACTION_POPOFF = 321;
    ACTION_DIE0 = 330;
    ACTION_BODY0 = 331;
    ACTION_DIE1 = 332;
    ACTION_BODY1 = 333;
    ACTION_DIE2 = 334;
    ACTION_BODY2 = 335;
    ACTION_DIE3 = 336;
    ACTION_BODY3 = 337;
    ACTION_ALERT = 340;
    ACTION_DIEFLY = 340;
    ACTION_DIEFLYEND = 341;
    ACTION_WALKBACK = 342;
    ACTION_ATTACK0 = 350;
    ACTION_ATTACK1 = 351;
    ACTION_ATTACK2 = 352;
    ACTION_MINE = 360;
    ACTION_INTONE = 390;
    ACTION_INTONE_DURATION = 391;
    ACTION_INTONE_LAUNCH = 392;
    ACTION_RELIVE = 400;
    ACTION_PUNCTURE = 451;
    ACTION_AIRSTRIKE = 452;
    ACTION_TORNADO = 453;
    ACTION_BODYSHIELD = 460;
    ACTION_GODBELIEVE = 465;
    ACTION_BUMP = 470;
    ACTION_FLY_STANDBY = 501;
    ACTION_FLY_ALERT = 502;
    ACTION_FLY_MOVE = 510;
    ACTION_FLY_ATTACK = 520;
    ACTION_FLY_DOWN = 530;
    ACTION_FLY_UP = 540;
    ACTION_FLY_DIE = 550;
    ACTION_FLY_WOUND = 560;
    ACTION_JUMPBACK_SHOOT = 610;
    ACTION_FAST_SHOOT = 620;
    ACTION_CHARGEUP_BEGIN = 630;
    ACTION_CHARGEUP_END = 631;
    ACTION_TM_FAST_SHOOT = 800;
    ACTION_TM_DISPERSION_SHOOT = 801;
}

Gem

Hairstyles

Hero Look

Hero Profession

Look Face

The look face of a player or monster is the mesh calculation for the 3D role. While the monster look face is rather simple (just the monster type), the look face of a player is more complicated and follows this equation:

Look = Body + (Avatar x 10000) + (Transformation x 10000000)

PK Mode

Role Type

Roles in Conquer Online are entities such as NPCs, Monsters, and Heroes (the players). Depending on the role, the game client interprets left click actions differently. The server may use these constants to determine how MsgInteract is processed, or how an NPC is spawned using MsgNpcInfo.

Table of Contents

• Patch 4267

Patch 4267

☑️ Assumed (Soul)

enum RoleType {

    ROLE_NPC_NONE = 0;
    ROLE_SHOPKEEPER_NPC = 1;
    ROLE_TASK_NPC = 2;
    ROLE_STORAGE_NPC = 3;
    ROLE_TRUNK_NPC = 4;
    ROLE_FACE_NPC = 5;
    ROLE_FORGE_NPC = 6;
    ROLE_EMBED_NPC = 7;
    ROLE_STATUARY_NPC = 9;
    ROLE_SYNFLAG_NPC = 10;

    ROLE_PLAYER = 11,
    ROLE_HERO = 12,
    ROLE_MONSTER = 13,

    ROLE_BOOTH_NPC = 14,
    SYN_TRANSPORT_NPC = 15,
    ROLE_BOOTH_FLAG_NPC = 16,
    ROLE_MOUSE_NPC = 17,
    ROLE_MAGICITEM = 18,
    ROLE_DICE_NPC = 19,
    ROLE_WEAPONGOAL_NPC = 21,
    ROLE_MAGICGOAL_NPC = 22,
    ROLE_BOWGOAL_NPC = 23,
    ROLE_TARGET_NPC = 24,
    ROLE_FURNITURE_NPC = 25,
    ROLE_CITY_GATE_NPC = 26,
    ROLE_NEIGHBOR_DOOR = 27,
    ROLE_CALL_PET = 28,
    TRAINPLACE_NPC = 29,
    AUCTION_NPC = 30,
    ROLE_STONE_MINE = 31,
    ROLE_PKGAME_NPC = 32,
    ROLE_3DFURNITURE_NPC = 101,
    ROLE_CITY_WALL_NPC = 102,
    ROLE_CITY_MOAT_NPC = 103,
}

Files

This section documents file formats and provides definitions for various content types.

Files in the Conquer Online game client follow some consistency in format, but are largely different between files. Some files are encrypted by various ciphers, and some files are packed in compressed archives.

Subsections

• Compression: File types meant for compressing content into a single file.
• Content: File types specific to content needed for the client renderers.
• Formats: Formats for how to read various file types.

Compression

Content

3DMotion.ini

Cn_Res.ini

fuse.ini

GameMap.dat

ItemType.dat

Magic Type

MapMagicItem.ini

This file is loaded on client role data initialization, and utilized by MsgMapItem to show magical effects on the map floor. These effects play as "moments" that the client iterates through: starting with "start" and ending with "end". If any of the moment TMEs are "0" in the file, then that moment will be skipped.

The "look" described in MsgMapItem is the type key in the INI file.

Table of Contents

• Patch 4267

Patch 4267

☑️ Assumed (Soul)

Below is an example entry using the definition above:

[Type10]
Start=rain01.TME
Last=windblade7-1.TME
End=line05.TME

Monster Type

Npc.ini

Res.dat

StatusEffect.ini

This file is used to map effects to player statuses for MsgUserInfo. The index mapping can be found on that page, but the file structure for mapping those effects can be found below. Though labeled as an INI file, it doesn't follow the syntax. Each entry is space delimitated and line separated.

Table of Contents

• Patch 4267

Patch 4267

✅ Verified (Client)

WeaponSkillLevelExp.ini

This file maps weapon skill levels to experience required to obtain the level. Similarly to WeaponSkillName.ini, this file is not an INI file. It's a CSV file where each new line in the list is a weapon skill level, and each entry has comma delimited fields.

Table of Contents

• Patch 4267

Patch 4267

✅ Verified (Client)

WeaponSkillName.ini

This file maps weapon skill types to their names. Though labeled as an INI file, it's actually a CSV file where each new line in the list is a weapon skill entry, and each entry has comma delimited fields.

Table of Contents

• Patch 4267

Patch 4267

✅ Verified (Client)

Formats

DMAP

TME

Network

This section documents network procedures and message types for client-server communication.

Conquer Online uses TCP/IPv4 for network communication between the game servers and client. Messages are received as a stream, and ordering must be preserved for the correct processing of requests. Message encryption relies on the previous message, either as a counter or using cipher feedback; therefore, if the messages are encrypted and decrypted out of order, the client and server will desynchronize.

Protocol

Conquer Online uses Little-endian for the byte ordering of words and multi-byte sequences.

Games developed by TQ Digital Entertainment employ a custom binary protocol in this endianness, and contain a message header and sometimes a message footer. Messages are written to the binary protocol using custom encoding rules that change between versions of the client. These changes are documented in the Messages section.

Subsections

• Messages: Definitions for how the client and server communicate.

Identifiers

Unique identifiers in Conquer Online are 32-bit unsigned integers split into incremental ranges. Due to the small size of identifiers, some must be recycled and reused, such as monster identifiers. The easiest method of recycling these identifiers is to create reservations per spawn area.

⚠️ WARNING

Incremental IDs, such as account IDs and item IDs, can be too predictable and lead to exposing account information of your PM / first created accounts on the server, or items in the database. Consider using a linear-feedback shift register for a pseudo-random identifier that is deterministic for counting, but obfuscated for general security use.

Table of Contents

• Account Server
• Game Server

Account Server

Account IDs can be any number in the range of a 32-bit unsigned integer.

Game Server

The game server has the following ranges statically defined.

Some identifiers, such as items, are incremental across a 32-bit unsigned integer range.

Messages

This subsection organizes messages by the name found in the assembly of the macOS game client. See the table before for a mapping from message type to message definition.

Message Header

The table below defines TQ's message header. The header is written to all messages first and contains the size of the message (aka. the message length minus the size of the footer) and the message type (a constant identifier for handling the message on the client and server).

Message Footer

The message footer in Conquer Online was added in patch 5018. The footer contains an 8-byte string identifying the sender of the message. If the client sent the message, the footer would be "TQClient"; else, it would be "TQServer".

Message Types

The table below is an abstract and directory of message types used in various patches of Conquer Online.

Msg2ndPsw

MsgAccount

This client message is sent to the account server to request authentication. There have been multiple message types over the years for handling authentication requests from the client. MsgAccount is the first, but was later replaced by MsgAccountSRP6 and MsgAccountSRP6Ex in versions 5532+.

In this message, the player's password is encrypted using RC5.

⚠️ WARNING

The password in this message is encrypted using a static key in earlier versions of the client. Although later versions start to use a generated key, that key is exchanged using MsgEncryptCode and does not protect against proxies employing a man-in-the-middle attack. This was patched in version 5532 with the use of SRP6, which also added additional complexity for clientless bot creation.

Table of Contents

• Patch 4267
• Patch 5165

Patch 4267

Message Definition

☑️ Assumed (Observed) - CoFuture + Soul

Patch 5165

Message Definition

✅ Verified (Client)

MsgAccountKalydo

MsgAccountSoftKb

MsgAccountSRP6

MsgAccountSRP6Ex

MsgAchievement

MsgAction

This message is received by the game server or game client as a general action request. The server responds to MsgAction with either a specific action message (such as a spawn that was missing or with item details) or with the MsgAction message itself (such as for the login messages). The client may or may not respond with the MsgAction in response to a server MsgAction message.

MsgAction is used for a variety of actions, such as configuring the client during login, changing maps, requesting inventory and friends lists, setting the hero's location on login, jumping, and more.

Table of Contents

• Patch 4267
• Patch 5017

Patch 4267

Message Definition

☑️ Assumed (Soul)

Action Type

☑️ Assumed (Soul)

🔶 Response data

Patch 5017

Message Definition

☑️ Assumed (Observed) - Redux

Action Type

☑️ Assumed (Observed) - COPSv6

🔶 Response data

MsgAllot

This message is sent by the client to allot attribute points.

⚠️ WARNING

Although the client checks the number of attribute points that can be allotted, a modified client can easily spoof this message with values beyond what is available. Ensure that your game server checks the number of attribute points that can be allotted before saving.

Table of Contents

• Patch 4267

Patch 4267

Message Definition

☑️ Assumed (Soul)

MsgAnnounceInfo

MsgAnnounceList

MsgArenicScore

MsgArenicWitness

MsgAuction

MsgAuctionItem

MsgAuctionQuery

MsgAura

MsgAuraGroup

MsgBattleEffectiveness

Undocumented

MsgCampFight

MsgCampFightInfo

MsgChangeName

MsgCheatingProgram

MsgCompleteRank

MsgConfirmKeyLogin

MsgConfirmKeyLoginMobile

MsgConnect

This client message is first sent to the account server after receiving MsgConnectEx, and then sent to the game server after the client disconnects from the account server and connects to the game server specified in MsgConnectEx. The game server is expected to respond to this connection attempt with MsgTalk (see this message type for details on that interaction).

The account ID in the account server MsgConnect message is copied from MsgConnectEx, and the account ID and data fields in the game server MsgConnect message are also copied from MsgConnectEx.

⚠️ WARNING

A serious exploit is possible using this message on some servers. If a deterministic key is used, such as the account ID, an encrypted account ID, or incrementor, then it may be possible for any bad actor to log into any character in the game (bypassing the account server).

The following are some example fixes employed in various server projects for replacing the two 32-bit fields:

• Short-lived access token sent from the account server to the game server over RPC, paired with the connector's IP address and account ID.
• Short-lived connection request record stored in a shared database containing the connector's IP address and account ID.

Table of Contents

• Patch 4267
• Patch 4343
• Patch 5065

Patch 4267

Account Server Message Definition

☑️ Assumed (Observed) - Comet

Game Server Message Definition

☑️ Assumed (Observed) - Comet

Patch 4343

Account Server Message Definition

☑️ Assumed (Observed) - Comet

Game Server Message Definition

☑️ Assumed (Observed) - Comet

Patch 5065

Account Server Message Definition

☑️ Assumed (Observed) - Comet

Game Server Message Definition

☑️ Assumed (Observed) - Comet

MsgConnectEx

This account server message is sent to the client to provide connection details for the selected game server. If authentication failed on the account server, then this message will contain a rejection code and message. In older versions of the client, the rejection message is in Chinese but not actually used by the client besides for validation. It was later removed.

The client also validates the IP address and will reject localhost (127.x.x.x). The game server IP address can be a local (10.x.x.x or 192.x.x.x) or public IP address.

Table of Contents

• Patch 4267
• Patch 5017
• Patch 5517

Patch 4267

Accept Message Definition

☑️ Assumed (Observed) - Comet

Reject Message Definition

☑️ Assumed (Observed) - Comet

Rejection Type

☑️ Assumed (Observed) - Comet

Patch 5017

Accept Message Definition

☑️ Assumed (Observed) - Comet

Reject Message Definition

☑️ Assumed (Observed) - Comet

Rejection Type

☑️ Assumed (Observed) - Comet

Patch 5517

Accept Message Definition

❓ Unverified

Reject Message Definition

❓ Unverified

Rejection Type

✅ Verified (Client)

The following mapping is copied from Cn_Res.ini.

000=Changing Map
001=Invalid Account ID or Password
006=Point Card Expired
007=Monthly Card Expired
010=Server maintenance. Please try again later!
011=Please try again later.
012=This account has been banned.
013=Net cafe mode. Invalid Account ID or Password.
014=Net cafe mode. No more accounts can be logged, at this time.
020=Server is busy.
021=Server is busy. Please try again, later.
022=Your account has been locked. Please contact GM for more help.
024=This account has been banned.
025=This account has been banned.
026=This account has been banned.
027=This account has been banned.
028=This account has been banned.
030=This account has not been activated.
031=Failed to activate the account.
040=Invalid Input
041=Invalid Info
042=Timed Out
043=Please recheck the serial number or retrieve a new one.
044=Invalid Sub-password
045=Please input Sub-password.
046=Unbound
050=Non-cooperator Account
051=Sorry, but you have used up your login attempts. Please wait 30 minutes and try again.
052=Failed to login
053=The same server
054=Database Error
055=Failed to connect to the database.
056=Failed to connect
057=Invalid Account ID
058=Validation timed out.
059=Servers are not configured correctly.
060=Passpod Server Disconnected
061=Failed to process Passpod return
062=Passpod Password Expired
063=Passpod Verification Failed
064=Passpod Certification Expired
065=Passpod Certification Disabled
066=Failed to find the user.
067=Passpod Server Error
068=Passpod has not been input.
070=Server Locked
071=Login has been restricted. Please check the login limit, and try again.
072=Account Locked by Phone
073=Authentication Protocol is invalid or expired.
501=The account has not been bound to any phone
502=The key is wrong. Please rebind it.
504=The sub-key is wrong.
506=Please input the sub-key.
507=Failed to call.
508=Failed to login QQ account
999=Database Error

MsgConnectFaceBook

MsgConnectLegalitySpec

MsgConnectWithBgp

MsgContribute

MsgCrossFlagWar

MsgCrossFlagWarAltar

MsgCrossFlagWarFlag

MsgCrossFlagWarMerit

MsgCrossFlagWarRank

MsgCrossSwitch

MsgData

This message is sent by the game server to update the client interface with a series of integer values. The main usage of this message is to sync the client with the date and time of the server, and was introduced with the watercolor client. In later versions of the client, it was used again for displaying mount vigor.

Table of Contents

• Patch 5031
• Patch 5165

Patch 5031

Message Definition

☑️ Assumed (Observed) - Chimera

Data Type

☑️ Assumed (Observed) - Chimera

Patch 5165

Message Definition

☑️ Assumed (Observed) - Chimera

Data Type

☑️ Assumed (Observed) - Chimera

MsgDataArray

MsgDeadMark

MsgDetainItemInfo

This message is sent to the client to show an item in the detained items window. Along with a summary of the item's details (similar to MsgItemInfo), it also contains the cost of reclaiming the item, days remaining until the hunter is rewarded, and the name and identifier of the original owner and hunter.

Table of Contents

• Patch 5103

Patch 5103

Message Definition

❓ Unverified

MsgDice

MsgDisconnect

MsgDominateTeamName

MsgDominateTeamPopPkName

MsgDutyMinContri

MsgElitePKArenic

MsgElitePKGameRankInfo

MsgElitePKScore

MsgEncryptCode

This message is sent from the account server to the client when it first connects to initialize the RC5 cipher used for encrypting the player's password. The client then responds to this message with MsgAccount. In later versions of the client, this message is sent but never utilized. This is to keep the account server compatible with older versions of the client / different games.

Table of Contents

• Patch 5187

Patch 5187

Message Definition

✅ Verified (Client)

MsgEnemyList

Undocumented

MsgEquipLock

MsgFacebookAccount

MsgFactionChiefBase

MsgFactionMatch

MsgFactionMatchWitness

MsgFactionRankInfo

MsgFamily

MsgFamilyOccupy

MsgFlower

MsgFlushExp

This game server message is sent to the client to update the interface with new weapon skill, magic, XP skill, or other types of experience.

Table of Contents

• Patch 4267

Patch 4267

Message Definition

☑️ Assumed (Soul)

Action Type

☑️ Assumed (Soul)

MsgFMMatch

MsgFMRoundRobin

MsgFriend

This message is sent by clients to manage friend requests and their friend and enemy lists. It's also sent by the game server to populate those lists on sign-on, update online statuses, after accepting a friend request, and after a player kill.

The level parameter that once appeared at offset 10 was removed during the alpha for Conquer Online in favor of the MsgFriendInfo message.

Table of Contents

• Patch 4267
• Patch 5017
• Patch 5615

Patch 4267

Message Definition

☑️ Assumed (Observed) - Soul + CoFuture

Action Type

☑️ Assumed (Soul)

enum FriendActionTypes {

    FRIEND_APPLY = 10;
    FRIEND_ACCEPT = 11;
    FRIEND_ONLINE = 12;
    FRIEND_OFFLINE = 13;
    FRIEND_BREAK = 14;
    FRIEND_GETINFO = 15;

    ENEMY_ONLINE = 16;
    ENEMY_OFFLINE = 17;
    ENEMY_DELETE = 18;
    ENEMY_ADD = 19;
}

Patch 5017

Message Definition

❓ Unverified

Action Type

☑️ Assumed (Soul)

enum FriendActionTypes {

    FRIEND_APPLY = 10;
    FRIEND_ACCEPT = 11;
    FRIEND_ONLINE = 12;
    FRIEND_OFFLINE = 13;
    FRIEND_BREAK = 14;
    FRIEND_GETINFO = 15;

    ENEMY_ONLINE = 16;
    ENEMY_OFFLINE = 17;
    ENEMY_DELETE = 18;
    ENEMY_ADD = 19;
}

Patch 5615

Message Definition

❓ Unverified

Action Type

☑️ Assumed (Soul)

enum FriendActionTypes {

    FRIEND_APPLY = 10;
    FRIEND_ACCEPT = 11;
    FRIEND_ONLINE = 12;
    FRIEND_OFFLINE = 13;
    FRIEND_BREAK = 14;
    FRIEND_GETINFO = 15;

    ENEMY_ONLINE = 16;
    ENEMY_OFFLINE = 17;
    ENEMY_DELETE = 18;
    ENEMY_ADD = 19;
}

MsgFriendInfo

MsgFuse

This message is sent by the client to request fusing materials to an item. Though the system isn't officially used by non-Chinese Conquer Online or translated in the interface, it is implemented in the client and can be utilized by private servers. Fuse rates come from fuse.ini, and successfully fused items result in a +1 stone (according to unverified sources).

Some private servers have repurposed this interface to quickly attempt a socket on an included item using meteor scrolls and other loose meteors.

Table of Contents

• Patch 4267

Patch 4267

Message Definition

❓ Unverified

MsgGameServerShutDown

MsgGemEmbed

This message is sent by the client to request embedding or removing a gem in an item.

⚠️ WARNING

Ensure that the identifier of the gem is a valid gem. It's possible that a modified game client can send a message containing a gem ID that's the same as the item identifier. In that case, a poorly validated server could add a gem based on the item type (could be deterministic).

Table of Contents

• Patch 4267

Patch 4267

Message Definition

☑️ Assumed (Soul)

Action Type

☑️ Assumed (Soul)

enum GemEmbedActionType {

    GEM_EMBED_ACTION_EMBED = 0;
    GEM_EMBED_ACTION_REMOVE = 1;
}

MsgGLChampionList

MsgGLHeroDetail

MsgGLInteractive

MsgGLLastSeasonTopScore

MsgGLRankingList

MsgGodExp

Undocumented

MsgGuide

MsgGuideInfo

MsgHangUp

MsgInstance

MsgInteract

This message is used to request an interaction with another player or broadcast an interaction to surrounding players. Some example interactions include physical and magical attacks, proposing, and killing a player.

Magic attacks in Conquer Online are obfuscated using bit rotations and XORs. See the example below from Soul.

#define ENCODE_MAGICATTACK(idUser, usType, idTarget, usPosX, usPosY)                           \
{                                                                                              \
    usType = (::ExchangeShortBits((usType - 0x14BE), 3) ^ (idUser) ^ 0x915D);                  \
    idTarget = ::ExchangeLongBits(((idTarget - 0x8B90B51A) ^ (idUser) ^ 0x5F2D2463), 32 - 13); \
    usPosX = (::ExchangeShortBits((usPosX - 0xDD12), 1) ^ (idUser) ^ 0x2ED6);                  \
    usPosY = (::ExchangeShortBits((usPosY - 0x76DE), 5) ^ (idUser) ^ 0xB99B);                  \
}

#define DECODE_MAGICATTACK(idUser, usType, idTarget, usPosX, usPosY)                          \
{                                                                                             \
    usType = 0xFFFF & (::ExchangeShortBits(((usType) ^ (idUser) ^ 0x915D), 16 - 3) + 0x14BE); \
    idTarget = (::ExchangeLongBits((idTarget), 13) ^ (idUser) ^ 0x5F2D2463) + 0x8B90B51A;     \
    usPosX = 0xFFFF & (::ExchangeShortBits(((usPosX) ^ (idUser) ^ 0x2ED6), 16 - 1) + 0xDD12); \
    usPosY = 0xFFFF & (::ExchangeShortBits(((usPosY) ^ (idUser) ^ 0xB99B), 16 - 5) + 0x76DE); \
}

inline unsigned int ExchangeShortBits(unsigned long nData, int nBits)
{
    MYASSERT(nBits >= 0 && nBits < 16);
    nData &= 0xFFFF;
    return ((nData >> nBits) | (nData << (16 - nBits))) & 0xFFFF;
}

inline unsigned int ExchangeLongBits(unsigned long nData, int nBits)
{
    MYASSERT(nBits >= 0 && nBits < 32);
    return (nData >> nBits) | (nData << (32 - nBits));
}

Similar to other messages, MsgInteract also contains types that overlap with other types in other messages. For example, aborting magic was handled in MsgInteract, but is instead duplicated and utilized in MsgAction.

Table of Contents

• Patch 4267
• Patch 5017

Patch 4267

Message Definition

☑️ Assumed (Observed) - CoFuture + Soul

Interaction Type

☑️ Assumed (Observed) - CoFuture + Soul

🔶 Response data

Patch 5017

Message Definition

☑️ Assumed (Observed) - COPSv6

Interaction Type

☑️ Assumed (Observed) - COPSv6

🔶 Response data

MsgInviteTrans

MsgItem

This message is received by the game server as a client request to use or act on an item. Item actions can be buying, selling, equipping, repairing, dropping, upgrading, and more. A miscellaneous function of this message is as a ping response. The client sends this message once every 10 seconds to show the latency to the server in the client.

The message can also be sent to the client for specific actions such as force unequipping, force dropping, updating the durability of an item, or updating the amount of an item.

⚠️ WARNING

Ensure that the item type for item improvements matches the consumption item type when improving items. If composing two items together, ensure that the fuel item is also different than the improved item. In all cases, location should also be validated (you cannot upgrade an item from any distance or from any map, same with vending items at player booths). If showing an item, generate a new sharing identifier rather than exposing the item's unique identifier.

Requests

Requests can be of multiple sizes, not necessarily always containing an amount or additional fields past the system time. When processing these request messages, this should be taken into account so not to use fields that have been unspecified.

Responses

Most item actions are initiated by the player. Each request expects a response of either MsgItem (this message) with a filled data field, or a MsgItemInfo of the resulting item (like from a shop purchase).

Table of Contents

• Patch 4267
• Patch 5017
• Patch 5517

Patch 4267

Message Definition

☑️ Assumed (Observed) - CoFuture + Soul

Item Action

☑️ Assumed (Observed) - CoFuture + Soul

🔶 Response data

Patch 5017

Message Definition

☑️ Assumed (Observed) - ApexConquer

Item Action

☑️ Assumed (Observed) - ApexConquer

🔶 Response data

Patch 5517

Message Definition

☑️ Assumed (Observed) - ApexConquer

Item Action

☑️ Assumed (Observed) - ConquerServerV3

🔶 Response data

MsgItemInfo

This message is sent to the game client from the game server to initialize an item, which can appear in the player's inventory, as equipment, or in another position within the client's UI. Some exceptions to this include detained items (MsgDetainItemInfo) and shop / present items (MsgItemInfoEx).

In later versions of the client (around patch 5200), MsgPlayerAttribInfo was added to update the role view separately from equipment being placed in a player's equipment slot. The purpose of splitting off attributes from items was to enable temporary boons and weaknesses.

Table of Contents

• Patch 4267
• Patch 4330
• Patch 5017
• Patch 5095

Patch 4267

Message Definition

☑️ Assumed (Soul)

Action Type

☑️ Assumed (Soul)

enum ItemInfoActionType {

    ITEMINFO_NONE = 0;
    ITEMINFO_ADDITEM = 1;
    ITEMINFO_TRADE = 2;
    ITEMINFO_UPDATE = 3;
    ITEMINFO_OTHERPLAYER_EQUIPMENT = 4;
    ITEMINFO_AUCTION = 5;
}

Item Status

☑️ Assumed (Soul)

enum ItemStatus {

    ITEM_STATUS_NONE = 0;
    ITEM_STATUS_UNIDENTIFIED = 0x01;
    ITEM_STATUS_CANNOT_REPAIR = 0x02;
    ITEM_STATUS_FIXED_DURABILITY = 0x04;
    ITEM_STATUS_MAGIC_ADD = 0x08;
}

Item Position

☑️ Assumed (Soul)

enum ItemPosition {

    ITEMPOSITION_INVENTORY = 0;
    ITEMPOSITION_HELMET = 1;
    ITEMPOSITION_NECKLACE = 2;
    ITEMPOSITION_ARMOR = 3;
    ITEMPOSITION_WEAPON_RIGHT = 4;
    ITEMPOSITION_WEAPON_LEFT = 5;
    ITEMPOSITION_RING = 6;
    ITEMPOSITION_TREASURE = 7;
    ITEMPOSITION_BOOTS = 8;

    ITEMPOSITION_STORAGE = 201;
    ITEMPOSITION_TRUNK = 202;
    ITEMPOSITION_TREASURE_BAG = 203;
    ITEMPOSITION_AUCTION_STORAGE = 207;

    ITEMPOSITION_GROUND = 254;
    ITEMPOSITION_NONE = 255;
}

Patch 4330

Message Definition

☑️ Assumed (Observed) - COPSv6 Enhanced

Action Type

☑️ Assumed (Soul)

enum ItemInfoActionType {

    ITEMINFO_NONE = 0;
    ITEMINFO_ADDITEM = 1;
    ITEMINFO_TRADE = 2;
    ITEMINFO_UPDATE = 3;
    ITEMINFO_OTHERPLAYER_EQUIPMENT = 4;
    ITEMINFO_AUCTION = 5;
}

Item Status

☑️ Assumed (Soul)

enum ItemStatus {

    ITEM_STATUS_NONE = 0;
    ITEM_STATUS_UNIDENTIFIED = 0x01;
    ITEM_STATUS_CANNOT_REPAIR = 0x02;
    ITEM_STATUS_FIXED_DURABILITY = 0x04;
    ITEM_STATUS_MAGIC_ADD = 0x08;
}

Item Position

☑️ Assumed (Soul)

enum ItemPosition {

    ITEMPOSITION_INVENTORY = 0;
    ITEMPOSITION_HELMET = 1;
    ITEMPOSITION_NECKLACE = 2;
    ITEMPOSITION_ARMOR = 3;
    ITEMPOSITION_WEAPON_RIGHT = 4;
    ITEMPOSITION_WEAPON_LEFT = 5;
    ITEMPOSITION_RING = 6;
    ITEMPOSITION_TREASURE = 7;
    ITEMPOSITION_BOOTS = 8;

    ITEMPOSITION_STORAGE = 201;
    ITEMPOSITION_TRUNK = 202;
    ITEMPOSITION_TREASURE_BAG = 203;
    ITEMPOSITION_AUCTION_STORAGE = 207;

    ITEMPOSITION_GROUND = 254;
    ITEMPOSITION_NONE = 255;
}

Patch 5017

Message Definition

❓ Unverified

Action Type

☑️ Assumed (Soul)

enum ItemInfoActionType {

    ITEMINFO_NONE = 0;
    ITEMINFO_ADDITEM = 1;
    ITEMINFO_TRADE = 2;
    ITEMINFO_UPDATE = 3;
    ITEMINFO_OTHERPLAYER_EQUIPMENT = 4;
    ITEMINFO_AUCTION = 5;
}

Item Status

☑️ Assumed (Soul)

enum ItemStatus {

    ITEM_STATUS_NONE = 0;
    ITEM_STATUS_UNIDENTIFIED = 0x01;
    ITEM_STATUS_CANNOT_REPAIR = 0x02;
    ITEM_STATUS_FIXED_DURABILITY = 0x04;
    ITEM_STATUS_MAGIC_ADD = 0x08;
}

Item Position

☑️ Assumed (Soul)

enum ItemPosition {

    ITEMPOSITION_INVENTORY = 0;
    ITEMPOSITION_HELMET = 1;
    ITEMPOSITION_NECKLACE = 2;
    ITEMPOSITION_ARMOR = 3;
    ITEMPOSITION_WEAPON_RIGHT = 4;
    ITEMPOSITION_WEAPON_LEFT = 5;
    ITEMPOSITION_RING = 6;
    ITEMPOSITION_TREASURE = 7;
    ITEMPOSITION_BOOTS = 8;

    ITEMPOSITION_STORAGE = 201;
    ITEMPOSITION_TRUNK = 202;
    ITEMPOSITION_TREASURE_BAG = 203;
    ITEMPOSITION_AUCTION_STORAGE = 207;

    ITEMPOSITION_GROUND = 254;
    ITEMPOSITION_NONE = 255;
}

Patch 5095

Message Definition

❓ Unverified

Action Type

☑️ Assumed (Soul)

enum ItemInfoActionType {

    ITEMINFO_NONE = 0;
    ITEMINFO_ADDITEM = 1;
    ITEMINFO_TRADE = 2;
    ITEMINFO_UPDATE = 3;
    ITEMINFO_OTHERPLAYER_EQUIPMENT = 4;
    ITEMINFO_AUCTION = 5;
}

Item Status

☑️ Assumed (Soul)

enum ItemStatus {

    ITEM_STATUS_NONE = 0;
    ITEM_STATUS_UNIDENTIFIED = 0x01;
    ITEM_STATUS_CANNOT_REPAIR = 0x02;
    ITEM_STATUS_FIXED_DURABILITY = 0x04;
    ITEM_STATUS_MAGIC_ADD = 0x08;
}

Item Position

☑️ Assumed (Soul)

enum ItemPosition {

    ITEMPOSITION_INVENTORY = 0;
    ITEMPOSITION_HELMET = 1;
    ITEMPOSITION_NECKLACE = 2;
    ITEMPOSITION_ARMOR = 3;
    ITEMPOSITION_WEAPON_RIGHT = 4;
    ITEMPOSITION_WEAPON_LEFT = 5;
    ITEMPOSITION_RING = 6;
    ITEMPOSITION_TREASURE = 7;
    ITEMPOSITION_BOOTS = 8;

    ITEMPOSITION_STORAGE = 201;
    ITEMPOSITION_TRUNK = 202;
    ITEMPOSITION_TREASURE_BAG = 203;
    ITEMPOSITION_AUCTION_STORAGE = 207;

    ITEMPOSITION_GROUND = 254;
    ITEMPOSITION_NONE = 255;
}

Item Color

☑️ Assumed (Observed) - Chimera

enum ItemColor {
    
    ITEMCOLOR_NONE = 0;
    ITEMCOLOR_BLACK = 2;
    ITEMCOLOR_ORANGE = 3;
    ITEMCOLOR_TEAL = 4;
    ITEMCOLOR_RED = 5;
    ITEMCOLOR_BLUE = 6;
    ITEMCOLOR_YELLOW = 7;
    ITEMCOLOR_PURPLE = 8;
    ITEMCOLOR_WHITE = 9;
}

MsgItemInfoEx

This message is sent by the game server to the client to display an item with additional details for a game feature (like marketplace booths). For the most part, this message resembles MsgItemInfo with the addition of price, extended action type, and optional string (seems unused in Conquer Online).

Table of Contents

• Patch 4267

Patch 4267

Message Definition

☑️ Assumed (Soul)

Action Type

☑️ Assumed (Soul)

MsgItemStatus

MsgKickOut

MsgLeaveWord

MsgLoadMap

Undocumented

MsgLoginAccountEx

MsgLoginChallengeS

MsgLoginNotice

MsgLoginProofC

MsgLottery

MsgMagicCoat

MsgMagicEffect

This game server message is sent to the client to display a damaging magical effect from a target or cell coordinate on one or many targets. MagicType.dat contains all spell types that can be sent with this message.

In later versions of the client, the target coordinates are lightly encrypted. See MsgInteract for details.

Table of Contents

• Patch 4267

Patch 4267

Message Definition

☑️ Assumed (Observed) - CoFuture + Soul

Magic Effect Role Info

🚩 Incomplete

MsgMagicInfo

This game server message is sent to the client to describe spells the player has learned. MagicType.dat contains all spells accompanied with available levels and experience required for the next level, used to fill this message.

Table of Contents

• Patch 4267

Patch 4267

Message Definition

☑️ Assumed (Observed) - CoFuture + Soul

MsgMailContent

Undocumented

MsgMailList

Undocumented

MsgMailNotify

Undocumented

MsgMailOperation

Undocumented

MsgMapInfo

This small game server message is sent to instruct the client on which data map document to load from and what map type flags apply to it. This allows the game server to create unique duplicates of a map that reference one single data map.

Rather than referencing the file path to the DMap in the message, an identifier is used as a key for looking up the path in GameMap.dat.

Table of Contents

• Patch 4267

Patch 4267

Message Definition

✅ Verified (Client)

Map Type Flags

☑️ Assumed (Soul)

enum MapTypeFlags {
    MAPTYPE_NORMAL = 0x0000,
    MAPTYPE_PKFIELD = 0x0001,
    MAPTYPE_CHGMAP_DISABLE = 0x0002,
    MAPTYPE_RECORD_DISABLE = 0x0004,
    MAPTYPE_PK_DISABLE = 0x0008,
    MAPTYPE_BOOTH_ENABLE = 0x0010,
    MAPTYPE_TEAM_DISABLE = 0x0020,
    MAPTYPE_TELEPORT_DISABLE = 0x0040,
    MAPTYPE_SYN_MAP = 0x0080,
    MAPTYPE_PRISON_MAP = 0x0100,
    MAPTYPE_FLY_DISABLE = 0x00200,
    MAPTYPE_FAMILY = 0x00400,
    MAPTYPE_MINEFIELD = 0x0800,
    MAPTYPE_PKGAME = 0x1000,
}

MsgMapItem

This game server message is sent to the client to display an action with an item on the map floor. It also allows the server to set "traps", which act as magic effects on a map tile and are used for squama rewards.

Table of Contents

• Patch 4267
• Patch 5095

Patch 4267

Message Definition

☑️ Assumed (Observed) - CoFuture + Soul

Action Type

☑️ Assumed (Observed) - CoFuture + Soul

Patch 5095

Message Definition

☑️ Assumed (Observed) - Elite-CoEmu

Action Type

☑️ Assumed (Observed) - Elite-CoEmu

MsgMentorPlayer

MsgMessageBoard

Message boards are categorized into channels, referenced in MsgTalk as Text Attributes. The game server and client pass this message to organize text messages from MsgTalk into listable postings.

The NetStringPacker returned when listing posts (10 maximum) is flattened groupings of three strings each:

• Name: The name of the hero who authored the message.
• Message: Text shortened to 36 characters.
• Date: In the format yyyyMMddHHmmss.

Table of Contents

• Patch 5017

Patch 5017

Message Definition

☑️ Assumed (Observed) - Soul + COPSv6

Message Board Action

☑️ Assumed (Observed) - Soul + COPSv6

MsgMeteSpecial

MsgMonsterTransform

Undocumented

MsgName

This message allows the client to query for a string update, and allows the game server to trigger a string command on the client. In later versions of the client, the purpose of this message is mostly superseded by MsgAction, which adds an optional string parameter. Even in lower patches, a few types are unimplemented since they overlap with functionality in other messages, such as deleting the role.

Fireworks are an interesting type in this packet, as the way the client processes a fireworks request is to make the string an even number of letters, iterate through every two characters, and spawn a firework at a random coordinate near the center of the screen for those two characters.

Table of Contents

• Patch 4267
• Patch 5017

Patch 4267

Message Definition

☑️ Assumed (Observed) - CoFuture

Action Type

☑️ Assumed (Observed) - CoFuture + Soul

🔶 Response data

Patch 5017

Message Definition

☑️ Assumed (Observed) - CoFuture

Action Type

☑️ Assumed (Observed) - CoFuture + Soul

🔶 Response data

Whisper NetStringPacker Fields

MsgNationality

MsgNpc

MsgNpcInfo

This message is sent by the game server to the client to spawn an NPC into the world.

The lookface of an NPC is as calculated:

Lookface = Type * 10 + Direction

The type portion of the lookface can be found in npc.ini. This file is also what determines the name of the NPC.

Table of Contents

• Patch 4267

Patch 4267

Message Definition

☑️ Assumed (Observed) - CoFuture + Soul

NPC Sort Flags

☑️ Assumed (Observed) - CoFuture + Soul

MsgNpcInfoEx

This message is sent by the game server to the client to spawn an NPC with health, an extension of MsgNpcInfo. This is normally used for spawning terrain NPCs, such as the guild gate or pole during guild wars.

Table of Contents

• Patch 4267

Patch 4267

Message Definition

☑️ Assumed (Soul)

MsgNpcPath

Undocumented

MsgOperatingAct

MsgOperatingActInfo

MsgOwnKongfuBase

MsgOwnKongfuImproveFeedback

MsgOwnKongfuImproveSummaryInfo

MsgOwnKongfuPKSetting

MsgOwnKongRank

MsgPackage

This message is sent between the client and game server to handle item storage, such as warehouses, chests in houses, and sashes in later versions of Conquer Online.

Table of Contents

• Patch 4267
• Patch 5187

Patch 4267

Message Definition

☑️ Assumed (Observed) - CoFuture + Soul

The message definition below is used for basic requests on checking in and out items.

The message definition below is used for returning a list of items back to the player.