First we need the Packet Structur (since I am not at home someone need to figure out till I am at home) :]
So now the Intressting Part.. Encrypt the Packets:
We sniff some Packets at the Login Server , we type Informations like.
Code:
ID: SYNTEX
PW: SYNTEX
XX 53 59 4e 54 45 58 53 59 4e 54 45 58
S Y N T E X/ S Y N T E X
XX = Packet Header
Now we hope Metin crypt every letter , and it has no XOR. :)
Now we looked if Metin crypt every letter and looked if Metin has a XOR key or something like this that makes it harder to crack.
after that we have cracked the cryption:
CRYPT TABLE
Now we make the crypttable.
Since we know Metin does Crypt every letter we can use the ID: abcdefghijklm pw: opqrstuvwxyz .. and now we use the decompressed (unpacked) metin2.bin. Now we look what we sniffed with ID: abcdefghijklm pw: opqrstuvwxyz
Example (can be complety different):
Code:
ASCII: abcdefghijklm
HEX: 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d
ASCII: opqrstuvwxyz
HEX: 6f 70 71 72 73 74 75 76 77 78 79 7a
now we search for the Hex codes we got from the packet in our decompressed metin2.bin ... so if everything work we get the table out of the metin2.bin with do nothing :)
So how to get the full Crypt-Table from the Metin2.bin.
So we starting a disambler (I suggest using IDA) .. let it disamble metin2.bin ..
when everythings is loaded scroll in the hex window .. to the offset where you found the abcde.. (crypted) click ... go to disambler window ..
there is a area .. from START to END of the full CRYPT-Table ;)
So we copy this Area .. into our hexeditor and save it as CRYPT.dat/ini (or how you want)
We know each letter is crypted with a other key!
so 256 letters .. our file is .. 200*256 bytes big
to load it I make an other tutorial im to tired xd
decrypt is also an other part!!!!