Sniffer For Alt+B Dialog At L2Redemption

[Mires]

Hello everyone im looking for a sniffer that will save a path to alt+b dialog, cuz loader.exe can't do it. I hope you can help me ;)

[Szakalaka]

Whats hard? As far as i know client sends RequestBypassToServer with like "bbs_home" parameter, is that what u are askin for?

[Mires]

Ye thats true u can enter to main can switch to services also can pick GK but then the problem begins. The path are changed and u have to guess the parameters or get a sniffer for it. Cu u got small chances to guess all of them.The fact it that just town zones were changed but its enough to stop most of the scripts.

[Szakalaka]

Just put a breakpoint on RequestBypassToServer, select the sub window (gk, bbs shop) and check the string when BP hits

 

 

I had a little while so i did it for u on tales server. As u see packet has 2 params c = packet id = 23 and S = pointer to the selected window's name

 

alt+b

0018AB08   7CB40000
0018AB0C   20510804  ASCII "cS"
0018AB10   00000023
0018AB14   0018ADB0  UNICODE "_bbshome"

services

0018BD38   7CB40000
0018BD3C   20510804  ASCII "cS"
0018BD40   00000023
0018BD44   0018BFE0  UNICODE "_bbsgetfav"

GM Shop

0018D018   7CB40000
0018D01C   20510804  ASCII "cS"
0018D020   00000023
0018D024   0018D2C0  UNICODE "01"

Weapons s grade

0018D018   7CB40000
0018D01C   20510804  ASCII "cS"
0018D020   00000023
0018D024   0018D2C0  UNICODE "05"
 

Edited June 3, 2015 by Szakalaka

[Mires]

Well as i see i can understand just unicodes u get out of it the rest of it is for me a black magic. If you could explain me how can i get those unicodes, or check by yourself if it works on l2redemption cuz on tales works sniffer.

[Szakalaka]

It comes from analysis under debugger and knowledge of the game client. Btw, what for do you need the bbs names? :)

Edited June 3, 2015 by Szakalaka

[Mires]

Engine.BypassToServer ('_bbshome');

Engine.BypassToServer ('_bbsgetfav');

Engine.BypassToServer('10');

Engine.BypassToServer('113');

Engine.BypassToServer('17');

and it was doing >Home of Alt+b>Services>GK>Dion Area>Beehive in this case

at redemption its 

Engine.BypassToServer ('_bbshome');

Engine.BypassToServer ('_bbsgetfav');

Engine.BypassToServer('_bbsgatekeeper');

and the rest of path idk but kinda need it. This 3 options are opening Gk just now need to select Giran Zone>Giran harbor for example or any other locations.It will look smiliar to all towns i guess

Edited June 3, 2015 by Mires

[Szakalaka]

Seems like you are using some premade program. You will not find the names without digging in game

[Mires]

Yep i was using a program called loader.exe he is sniffing at any other servers w/o any problems. But here i guess its caused by smartguard that doens't let the loader to work properly.

[AlmostGood]

loader was injecting dlg.dll which was doing exactly what szaka suggested, hook requestBypassToServer,

u can also have whole html response from UGameEngine::OnShowboardPacket, gl xD

[Mires]

Well I'm pretty sure u guys got a lot more knowledge about this than me cuz my knowledge is pretty close to 0. But my point is, if you could try to explain me step by step how can I get this requests. I'd like to have it to remake my scripts that were made for tales server. They cannot work properly w/o new paths . 

[adr.bot]

[Bydle]

Well thats what antibots are for - to stop people who are using premade scripts. You either have luck and find the strings by trial and error, or u need to somehow sniff the data before being encrypted