[PACKETBOT] Why it is still possible!

[Maurice]

Originally Posted by Golden|Power

Why you 3 don't make a packet bot together ? You are all smart for this Come on, make a team and help all the people who don't want to pay for sf anymore

-GP

We could.. but still it will bring nothing more then a new paid seafight bot..
Didn't do much yet, got other project's to.. but I'll start on the encrypt/decrypt func's.

EDIT:

Just started with the encrypt/decrypt function's & (Again) recoded IncomingBotResponse Class (Renamed: OutgoingBotReq.cs).

OutgoingBotReq.cs (The helper class)

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using MiscUtil.Conversion;
using MiscUtil.IO;
using System.IO;

namespace wBot___SeafightEdit.Utilities
{
    public class OutgoingBotReq
    {
        public byte[] arr;
        public EndianBinaryReader reader;
        public OutgoingBotReq(byte[] iArray)
        {
            try
            {
                var converter = new BigEndianBitConverter();
                var stream = new MemoryStream(iArray);
                reader = new EndianBinaryReader(converter, stream);
            }
            catch { }
        }
        public EndianBinaryReader getReader()
        {
            return reader;
        }

        public byte[] arr;
        public EndianBinaryWriter writer;
        public OutgoingBotReq(byte[] iArray)
        {
            try
            {
                var converter = new BigEndianBitConverter();
                var stream = new MemoryStream(iArray);
                writer = new EndianBinaryWriter(converter, stream);
            }
            catch { }
        }
        public EndianBinaryWriter getWriter()
        {
            return writer;
        }
    }
}

OutgoingBotRequest.cs (The main class)

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Net.Sockets;

namespace wBot___SeafightEdit.Utilities
{
    public class OutgoingBotRequest
    {
        public byte[] Arr;
        public Socket _SFSock;
        public OutgoingBotRequest(byte[] arr, Socket _iSFSock)
        {
            try
            {
                Arr = arr;
                _SFSock = _iSFSock;
            }
            catch { }
        }

        #region "SendRequest()"
        public bool SendRequest()
        {
            try
            {
                if (_SFSock == null)
                    return false;
                _SFSock.Send(Arr);
                return true;
            }
            catch
            {
                return false;
            }
        }
        #endregion

    }

    public class OutgoingRequest
    {
        public byte[] arr;
        public Socket _iSock;
        public int _version = 0;
        public int duration = 0;
        public OutgoingRequest()
        {
            try
            {

            }
            catch { }
        }
        public void decrypt_function(OutgoingBotReq param1)
        {
            this._version = param1.getReader().ReadInt16();
            this._version = 65535 & ((65535 & this._version) << 16 % 16 | (65535 & this._version) >> 16 - 16 % 16);
            this._version = this._version > 32767 ? this._version - 65536 : this._version;
            this.duration = param1.getReader().ReadInt16();
            this.duration = 65535 & ((65535 & this.duration) >> 15 % 16 | (65535 & this.duration) << 16 - 15 % 16);
            this.duration = this.duration > 32767 ? this.duration - 65536 : this.duration;
        }

        public void encrypt_function(OutgoingBotReq param1)
        {
            param1.getWriter().Write((short)-7998);
            param1.getWriter().Write((short)(65535 & ((65535 & 0) >> 16 % 16 | (65535 & 0) << 16 - 16 % 16)));
            param1.getWriter().Write((short)(65535 & ((65535 & this.duration) << 15 % 16 | (65535 & this.duration) >> 16 - 15 % 16)));
        }
    }
}

[general_lolichdissdich]

Also note that PBDO has overcome this changing packet id's problem too. For that you will need to dive deeper into Flash/AS3/Compilers and stuff. As this is no new information, here is a link to a tool that will help you with the packet ids:

On another note though: I would guess if packet bots would become a problem for seafight, I guess they would start doing stuff that they did with DO, which will add a lot more complexity.

HF & GL

[Maurice]

RABCDAsm is a known tool to get the AS3 bytecode.. but this isn't the solution!

There is an SWF Decompiler what uses RABCDAsm for bytecode and then recreate's the AS3 Syntax of the bytecode.. (FFDec)

Also got the packet sending working for a part.. Receiving isn't working properly..

[general_lolichdissdich]

Originally Posted by Willie Wortel

RABCDAsm is a known tool to get the AS3 bytecode.. but this isn't the solution!

You obviously didnt get it. look closer & try harder

[Maurice]

Originally Posted by general_lolichdissdich

You obviously didnt get it. look closer & try harder

Obviously you don't get it.. RABCDAsm isn't needed, as I said, ByteCode is to hard to handle by searching specific thing's..

And FFDec does use RABCDAsm to get the bytecode of the SWF then recreate's a AS3 Syntax of it.. Which allow's me/other's to search for specific thing's in the "Search all AS3".

Got back in the seafight scene's as I still have some feeling there might be some good coder's around... maybe to shy to try..

In the next few day's I'll get an look on the SWF's again, and sniff some new packet's in-case there might be any change lately..

Allready have some idea's how Seafight handles their stuff within JAVA (See: Reversed ByteArray & IDataInput/Output @ SWF)

Stay tuned (:

[alpkarizma]

can you make that like seabot

[mechanikzsz]

maybe this help you...

 Spoiler

[_Creator_]

Originally Posted by mechanikzsz

maybe this help you...

 Spoiler

I have no idea from where and how you got your hands on this, but it's worth pure gold.. so have my thanks.

Btw, got the logger to work - which makes things alot easier, since you know what's going on at any time, and therefore (more or less) know what's inside the packet.

[dani1414]

anything new ?

[_Creator_]

I'll just leave this here..

[trolleras9]

so what that means?

[jonmikeltxu]

Originally Posted by _Creator_

I'll just leave this here..

That mean that you have decrypted all packets?