Help with login sequence

[Eternal]

Hello all,

I'm working on my login sequence using BNLS. I've got this far but I dont get to the 0x0A enter chat. Have included a log below - would appreciate any tips. Thanks:

Code Select Expand


1  Hide  Hide  9  Send 
0000  09 00 0E 65 74 65 72 6E 00                         ...etern.

2  Hide  Hide  7  Recv 
0000  07 00 0E E7 07 60 3F                               .....`?

3  Hide  Hide  7  Send 
0000  07 00 0F C8 AC 35 96                               .....5.

4  Hide  Hide  7  Recv 
0000  07 00 0F 01 00 00 00                               .......

5  Hide  Hide  7  Send 
0000  07 00 10 01 00 00 00                               .......

6  Hide  Hide  11  Recv 
0000  0B 00 10 01 00 00 00 CF 00 00 00                   ...........

7  Hide  Hide  59  Send 
0000  01 FF 50 3A 00 00 00 00 00 36 38 58 49 52 41 54    ..P:.....68XIRAT
0010  53 CF 00 00 00 00 00 00 00 00 00 00 00 80 04 00    S...............
0020  00 33 10 00 00 33 10 00 00 55 53 41 00 55 6E 69    .3...3...USA.Uni
0030  74 65 64 20 53 74 61 74 65 73 00                   ted States.

8  Hide  Hide  8  Recv 
0000  FF 25 08 00 A5 E6 A5 AA                            .%......

9  Hide  Hide  8  Send 
0000  FF 25 08 00 A5 E6 A5 AA                            .%......

10  Hide  Hide  62  Recv 
0000  FF 50 3E 00 00 00 00 00 B6 EA 2A 84 77 6B 09 00    .P>.......*.wk..
0010  00 AC D0 D2 72 FC C6 01 6C 6F 63 6B 64 6F 77 6E    ....r...lockdown
0020  2D 49 58 38 36 2D 31 30 2E 6D 70 71 00 CE B0 AD    -IX86-10.mpq....
0030  76 5A C5 21 6D 51 6A 5C 7F 89 62 12 8F 00          vZ.!mQj\..b...

11  Hide  Hide  61  Send 
0000  3D 00 1A 01 00 00 00 00 00 00 00 00 00 00 00 00    =...............
0010  AC D0 D2 72 FC C6 01 6C 6F 63 6B 64 6F 77 6E 2D    ...r...lockdown-
0020  49 58 38 36 2D 31 30 2E 6D 70 71 00 CE B0 AD 76    IX86-10.mpq....v
0030  5A C5 21 6D 51 6A 5C 7F 89 62 12 8F 00             Z.!mQj\..b...

12  Hide  Hide  40  Recv 
0000  28 00 1A 01 00 00 00 01 00 0E 01 B2 E9 97 C7 31    (..............1
0010  A2 CF 7E C1 49 C1 B6 D7 62 40 83 F5 6C BD B9 00    [email protected]...
0020  00 00 00 00 CF 00 00 00                            ........

13  Hide  Hide  21  Send 
0000  15 00 01 B6 EA 2A 84 34 39 35 32 38 31 33 30 37    .....*.CDKEYEDITED
0010  32 31 38 35 00                                     2185.

14  Hide  Hide  47  Recv 
0000  2F 00 01 01 00 00 00 0E D5 11 A1 0D 00 00 00 01    /...............
0010  00 00 00 5E BD 60 00 00 00 00 00 02 6A 06 33 64    ...^.`......j.3d
0020  C4 35 C9 7E B6 37 CF 47 73 ED 6A 75 AF 5E 41       .5.~.7.Gs.ju.^A

15  Hide  Hide  84  Send 
0000  FF 51 54 00 0E D5 11 A1 B2 E9 97 C7 B2 E9 97 C7    .QT.............
0010  01 00 00 00 00 00 00 00 0D 00 00 00 01 00 00 00    ................
0020  5E BD 60 00 00 00 00 00 02 6A 06 33 64 C4 35 C9    ^.`......j.3d.5.
0030  7E B6 37 CF 47 73 ED 6A 75 AF 5E 41 31 A2 CF 7E    ~.7.Gs.ju.^A1..~
0040  C1 49 C1 B6 D7 62 40 83 F5 6C BD B9 00 44 50 43    [email protected]
0050  68 61 74 00                                        hat.

16  Hide  Hide  9  Recv 
0000  FF 51 09 00 00 00 00 00 00                         .Q.......

17  Hide  Hide  12  Send 
0000  FF 14 08 00 62 6E 65 74 FF 2D 04 00                ....bnet.-..

18  Hide  Hide  17  Send 
0000  11 00 0B 06 00 00 00 00 00 00 00 31 71 32 77 33    ...........PASS
0010  65                                                 e

19  Hide  Hide  22  Recv 
0000  FF 4C 16 00 49 58 38 36 4D 69 6E 64 53 69 67 68    .L..IX86MindSigh
0010  74 2E 6D 70 71 00                                  t.mpq.

20  Hide  Hide  22  Recv 
0000  FF 2D 16 00 00 08 16 BF E9 50 C3 01 69 63 6F 6E    .-.......P..icon
0010  73 2E 62 6E 69 00                                  s.bni.

21  Hide  Hide  23  Recv 
0000  17 00 0B AE 15 F5 50 A1 A8 51 38 4D 14 82 48 8E    ......P..Q8M..H.
0010  D8 AC E1 F2 C4 1F 9F                               .......

22  Hide  Hide  39  Send 
0000  27 00 0B 1C 00 00 00 01 00 00 00 0E D5 11 A1 B6    '...............
0010  EA 2A 84 AE 15 F5 50 A1 A8 51 38 4D 14 82 48 8E    .*....P..Q8M..H.
0020  D8 AC E1 F2 C4 1F 9F                               .......



[Sorc.Polgara]

Awww poo, was hoping to get a laugh out of you not editing out the cdkey...  darn.

[Eternal]

Awww poo, was hoping to get a laugh out of you not editing out the cdkey...  darn.

[l2k-Shadow]

Awww poo, was hoping to get a laugh out of you not editing out the cdkey...  darn.

he didn't edit it out.
EDIT: damn, it's muted.

[raylu]

Your thing is a bit confusing because I can't tell what's being sent to which server.

As far as I can tell, though, you haven't sent 0x0C:
http://www.aznsoulja.com/bnetdocs/content6cf4.html?Section=m&Code=34

The client also sends 0x0B, but that's optional.

[Eternal]

Awww poo, was hoping to get a laugh out of you not editing out the cdkey...  darn.

he didn't edit it out.
EDIT: damn, it's muted.

...and I say again;

[brew]

Eternal what exactly are you having problems with? They all seem fine

[Eternal]

I thought they were correct - the issue here is that the sequence stops before I get to the enter chat. Something is clearly wrong somewhere, but as of yet I haven't worked out why.

[l2k-Shadow]

Looks like you are not getting a response for your second 0x0B packet, why don't you just do this?:

Message ID:     0x0B
Message Name:    BNLS_HASHDATA
Direction:    Client -> Server (Sent)
Format:
Help

Hint: Field names highlighted in blue will display a definition if you hover over the text.    

(DWORD)       Size of Data
(DWORD)       Flags
(VOID)       Data to be hashed.

Optional:
(DWORD)       Client Key (Double Hash only)
(DWORD)       Server Key (Double Hash only)
(DWORD)       Cookie (Cookie Hash only)

Remarks:    This message will calculate the hash of the given data.
The hashing algorithm used is the Battle.net standard hashing algorithm also known as "Broken SHA-1"

The flags may be zero, or any bitwise combination of the defined flags.
Currently, the following flags are defined:

0x01: Flags Unused
This flag has no effect.

0x02: Double Hash
If this flag is present, the server will calculate a double hash.
First it will calculate the hash of the data. Then it will prepend the client key and the server key to the resulting hash, and calculate the hash of the result. If this flag is present, the client key and server key DWORDs must be specified in the request after the data.
This may be used to calculate password hashes for the "Old Logon System".

0x04: Cookie Hash
If this flag is present, a cookie DWORD is specified in the request.
This is an application-defined value that is echoed back to the client in the response.

Try sending a double hash request instead of your 2 packets, see if that helps.

[Eternal]

Thanks - I do think that's where the problem lies. I'll look at it again.