latelylk / on-wiz Goto Github PK

From the guys working to understand and reverse engineer the communication protocol, thank you for finding the encryption and disclosing it. I thought my work to make a better HUD for beastmoon was dead. Seriously, kudos.

However, can you go more in detail about this bitshift encryption? Are we talking circular shift, per byte, etc... Right now, my contacts think it's a crypto++ aes-gcm with a key sent in a new control packet.

• Dump the arguments and commit them to the repo

• Clean up args file

Hello, I'm currently doing some reverse engineering towards understanding the game's login functionality. The structure of a login DML message is defined as MSG_USER_AUTHEN_V3 in the LoginMessages.xml file of the patch client. User data get transmitted in the REC1 field.

I initially thought some static analysis could do the trick as I'm not an expert for crypto analysis, but it turns out that this is a tougher challenge than expected because of heavy LTO optimizations hitting in. From what it seems, the REC1 algorithm involves both, an encryption and a hashing mechanism, performed on a combination of session id, username and password.

I'd be happy to learn more about it if someone has details to share. I'm also available on Discord as MattK#0817 for a more direct chat, just shoot me a friend request.