| There's hundreds/thousands of generated one way decryption schemas for fields. However, it's not impossible to generate the decryption in another language with some effort. Example: A packet could be decrypted like this (the actual decryption takes more steps than this) field1 = LOOKUPTABLE(XOR(ADD_CONST(...
field2 = ADD_CONST(XOR(LOOKUPTABLE(...
field3 = ADD_CONST(XOR(SUB_CONST(LOOKUPTABLE(...
... We observe that each each operation is composed of ADD_CONST, XOR, SUB_CONST, LOOKUPTABLE and the lookup tables in the client which is ~256 bytes long. We could extract these operations and generate a really long script in python. Why didn't I approach it this way? 1) It's really fragile. League is an actively updated game and the decryption mechanism may change in the future. If the decryption adds another operation like MUL_CONST or DIV_CONST, I would need to account for that on my end. This is unlike the reverse engineering efforts for dead games/servers where the packets do not change. 2) I don't need to know how the decryption mechanism works. Building a game server would require decryption of packet necessary. I only need to observe game state. As for understanding how it works, I have not put enough time/effort to give an answer. :) |
Wouldn’t this render all previous replay files unusable? Is that likely to happen?