Hello all,
I'm working on my login sequence using BNLS. I've got this far but I dont get to the 0x0A enter chat. Have included a log below - would appreciate any tips. Thanks:
1 Hide Hide 9 Send
0000 09 00 0E 65 74 65 72 6E 00 ...etern.
2 Hide Hide 7 Recv
0000 07 00 0E E7 07 60 3F .....`?
3 Hide Hide 7 Send
0000 07 00 0F C8 AC 35 96 .....5.
4 Hide Hide 7 Recv
0000 07 00 0F 01 00 00 00 .......
5 Hide Hide 7 Send
0000 07 00 10 01 00 00 00 .......
6 Hide Hide 11 Recv
0000 0B 00 10 01 00 00 00 CF 00 00 00 ...........
7 Hide Hide 59 Send
0000 01 FF 50 3A 00 00 00 00 00 36 38 58 49 52 41 54 ..P:.....68XIRAT
0010 53 CF 00 00 00 00 00 00 00 00 00 00 00 80 04 00 S...............
0020 00 33 10 00 00 33 10 00 00 55 53 41 00 55 6E 69 .3...3...USA.Uni
0030 74 65 64 20 53 74 61 74 65 73 00 ted States.
8 Hide Hide 8 Recv
0000 FF 25 08 00 A5 E6 A5 AA .%......
9 Hide Hide 8 Send
0000 FF 25 08 00 A5 E6 A5 AA .%......
10 Hide Hide 62 Recv
0000 FF 50 3E 00 00 00 00 00 B6 EA 2A 84 77 6B 09 00 .P>.......*.wk..
0010 00 AC D0 D2 72 FC C6 01 6C 6F 63 6B 64 6F 77 6E ....r...lockdown
0020 2D 49 58 38 36 2D 31 30 2E 6D 70 71 00 CE B0 AD -IX86-10.mpq....
0030 76 5A C5 21 6D 51 6A 5C 7F 89 62 12 8F 00 vZ.!mQj\..b...
11 Hide Hide 61 Send
0000 3D 00 1A 01 00 00 00 00 00 00 00 00 00 00 00 00 =...............
0010 AC D0 D2 72 FC C6 01 6C 6F 63 6B 64 6F 77 6E 2D ...r...lockdown-
0020 49 58 38 36 2D 31 30 2E 6D 70 71 00 CE B0 AD 76 IX86-10.mpq....v
0030 5A C5 21 6D 51 6A 5C 7F 89 62 12 8F 00 Z.!mQj\..b...
12 Hide Hide 40 Recv
0000 28 00 1A 01 00 00 00 01 00 0E 01 B2 E9 97 C7 31 (..............1
0010 A2 CF 7E C1 49 C1 B6 D7 62 40 83 F5 6C BD B9 00 [email protected]...
0020 00 00 00 00 CF 00 00 00 ........
13 Hide Hide 21 Send
0000 15 00 01 B6 EA 2A 84 34 39 35 32 38 31 33 30 37 .....*.CDKEYEDITED
0010 32 31 38 35 00 2185.
14 Hide Hide 47 Recv
0000 2F 00 01 01 00 00 00 0E D5 11 A1 0D 00 00 00 01 /...............
0010 00 00 00 5E BD 60 00 00 00 00 00 02 6A 06 33 64 ...^.`......j.3d
0020 C4 35 C9 7E B6 37 CF 47 73 ED 6A 75 AF 5E 41 .5.~.7.Gs.ju.^A
15 Hide Hide 84 Send
0000 FF 51 54 00 0E D5 11 A1 B2 E9 97 C7 B2 E9 97 C7 .QT.............
0010 01 00 00 00 00 00 00 00 0D 00 00 00 01 00 00 00 ................
0020 5E BD 60 00 00 00 00 00 02 6A 06 33 64 C4 35 C9 ^.`......j.3d.5.
0030 7E B6 37 CF 47 73 ED 6A 75 AF 5E 41 31 A2 CF 7E ~.7.Gs.ju.^A1..~
0040 C1 49 C1 B6 D7 62 40 83 F5 6C BD B9 00 44 50 43 [email protected]
0050 68 61 74 00 hat.
16 Hide Hide 9 Recv
0000 FF 51 09 00 00 00 00 00 00 .Q.......
17 Hide Hide 12 Send
0000 FF 14 08 00 62 6E 65 74 FF 2D 04 00 ....bnet.-..
18 Hide Hide 17 Send
0000 11 00 0B 06 00 00 00 00 00 00 00 31 71 32 77 33 ...........PASS
0010 65 e
19 Hide Hide 22 Recv
0000 FF 4C 16 00 49 58 38 36 4D 69 6E 64 53 69 67 68 .L..IX86MindSigh
0010 74 2E 6D 70 71 00 t.mpq.
20 Hide Hide 22 Recv
0000 FF 2D 16 00 00 08 16 BF E9 50 C3 01 69 63 6F 6E .-.......P..icon
0010 73 2E 62 6E 69 00 s.bni.
21 Hide Hide 23 Recv
0000 17 00 0B AE 15 F5 50 A1 A8 51 38 4D 14 82 48 8E ......P..Q8M..H.
0010 D8 AC E1 F2 C4 1F 9F .......
22 Hide Hide 39 Send
0000 27 00 0B 1C 00 00 00 01 00 00 00 0E D5 11 A1 B6 '...............
0010 EA 2A 84 AE 15 F5 50 A1 A8 51 38 4D 14 82 48 8E .*....P..Q8M..H.
0020 D8 AC E1 F2 C4 1F 9F .......
Awww poo, was hoping to get a laugh out of you not editing out the cdkey... darn.
Quote from: Sorc.Polgara on March 23, 2007, 05:21 AM
Awww poo, was hoping to get a laugh out of you not editing out the cdkey... darn.
:P
Quote from: Sorc.Polgara on March 23, 2007, 05:21 AM
Awww poo, was hoping to get a laugh out of you not editing out the cdkey... darn.
he didn't edit it out.
EDIT: damn, it's muted.
Your thing is a bit confusing because I can't tell what's being sent to which server.
As far as I can tell, though, you haven't sent 0x0C:
http://www.aznsoulja.com/bnetdocs/content6cf4.html?Section=m&Code=34
The client also sends 0x0B, but that's optional.
Quote from: l2k-Shadow on March 23, 2007, 09:01 AM
Quote from: Sorc.Polgara on March 23, 2007, 05:21 AM
Awww poo, was hoping to get a laugh out of you not editing out the cdkey... darn.
he didn't edit it out.
EDIT: damn, it's muted.
...and I say again; :P
Eternal what exactly are you having problems with? They all seem fine
I thought they were correct - the issue here is that the sequence stops before I get to the enter chat. Something is clearly wrong somewhere, but as of yet I haven't worked out why.
Looks like you are not getting a response for your second 0x0B packet, why don't you just do this?:
Quote from: BnetDocs
Message ID: 0x0B
Message Name: BNLS_HASHDATA
Direction: Client -> Server (Sent)
Format:
Help
Hint: Field names highlighted in blue will display a definition if you hover over the text.
(DWORD) Size of Data
(DWORD) Flags
(VOID) Data to be hashed.
Optional:
(DWORD) Client Key (Double Hash only)
(DWORD) Server Key (Double Hash only)
(DWORD) Cookie (Cookie Hash only)
Remarks: This message will calculate the hash of the given data.
The hashing algorithm used is the Battle.net standard hashing algorithm also known as "Broken SHA-1"
The flags may be zero, or any bitwise combination of the defined flags.
Currently, the following flags are defined:
0x01: Flags Unused
This flag has no effect.
0x02: Double Hash
If this flag is present, the server will calculate a double hash.
First it will calculate the hash of the data. Then it will prepend the client key and the server key to the resulting hash, and calculate the hash of the result. If this flag is present, the client key and server key DWORDs must be specified in the request after the data.
This may be used to calculate password hashes for the "Old Logon System".
0x04: Cookie Hash
If this flag is present, a cookie DWORD is specified in the request.
This is an application-defined value that is echoed back to the client in the response.
Try sending a double hash request instead of your 2 packets, see if that helps.
Thanks - I do think that's where the problem lies. I'll look at it again.