Hi pals, Came here today to share a AIKABR executable running stable with no xtrap functions, u can use it for any purposes, on the most times, it lets you 5~10 minutes online before dc you, can be use for packet analyzing and decryption, as game analyzing, cheat engine memory edition, and many other purposes, this is for studies purposes, if u wanna play it with hacks, must emulate xtrap packets....
Again, thanks to pdepker for the great help with this...
The link contain:
-AIKABR No Xtrap (19/09)
-rPE Packet Editor
-WPE Pro Packet analyzer
-Cheat Engine 6.1
All tools to start searching some funny things, if u wanna decrypt packets, u must analyze them and make your own algorithm or use Ollydbg to find the EDXs and other changers, below is some more about decryption,a very good article... ^^
by SaiMsPHP Code:
#ifndef _INFINITY_TALE_CRYPT_
#define _INFINITY_TALE_CRYPT_
#include <string.h>
int laEncrypt(char* data, int length)
{
int size = length;
data[4] ^= 0x76;
for(int i = 5; i < size; i++)
data[i] ^= data[i-1];
return 1;
}
int laDecrypt(char* data, int length)
{
int size = length;
char k = data[4];
char j = 0;
data[4] ^= 0x76;
for(int i = 5; i < size; i++)
{
j = data[i];
data[i] ^= k;
k = j;
}
return 1;
}
#endif
a) Let's take a look at a sample header and decrypt it.
char crypt[] = {0x0A, 0x00, 0x00, 0x00, 0x64, 0x00, 0x00, 0x00, 0x00, 0x01};
or simply
[ INT32 ][ CHAR8 ] [Char[]]
[ HEADER ][PACKET ID] [DATA]
0A 00 00 00 64 00 00 00 00 01 (HEX)
0x0A is the LENGTH of the packet and is not needed in the decryption process.
This is an INT, little-endian and uses the first 4 bytes to find how long the TOTAL length is.
0x0A = 10 in decimal, the length of this packet is indeed 10.
ENF NOTE: Packet headers are NOT encrypted.
1.b) Let's step through the encryption.
We skip to the packet id, and xor it with 0x76(magic #).PHP Code:
data[4] ^= 0x76;
This reveals the packet ID, so in this case:
64 XOR 0x76 = 12 You can use a sci calculator if you want, these are accurate results as I have checked them with Bravo's posts. (I assume he used traitor's sniffer or w.e, I'll be releasing my own soon with a GUI)
After the header, we have a for loop:
It starts at 5, as we are finished with the header and the packet id.PHP Code:
data[i] ^= data[i-1];
This is just some xor swap logic.
Grab the first byte,
PHP Code:
j = data[i];
xor it with k, which is packet id(init)
make new k value, the data we just producedPHP Code:
j = data[i] ^= k;
PHP Code:
k = j;
repeat for entire routine and we produce:
Quote:
12 64 00 00 00 01
tada.
Reverse for encrypt.
by SaiMs (other forum)
This simple example and code was made on C, more about C language at:
[Only registered and activated users can see links. Click Here To Register...]
About Cheat Engine, you can use Speedhack just for fun, or to make somegood things like grind plants and back to char selection after grind one or two, to dont get dc, so login again^^, or run faster, movement speed on AIKA haves server side, but u can try skip by pressing right mouse button and moving camera from a side to other :)
Cheat Engine can change memoryadresses of the client, memory values and everything too...
Read more here:
[Only registered and activated users can see links. Click Here To Register...]
On Olly debug, u can launch it attached to debugger just opening it and running by F9 key, and use Olly dbg functions ...
Finally, here is the link to all tools:
[Only registered and activated users can see links. Click Here To Register...]
for the client, just make a second installation of the game, update any file, and after, change the game original client, for the client on the file above, don't open the launcher execute directly the AIKABR.exe ...
Enjoy, before they patch it :), Xtrap staff always looking for things like this to patch ^^'
Thanks to pdepker for the help...
Maybe now u can take ThisIsSPARTAA down alone hahaha
Thanks if u like
LINK UPDATED, SORRY FOR THE PROBLEM...