I need help making a code to check hashes but I don't understand y we can't just send the data without having hashes. If anyone can tell me how to check for hashes and y we can't just send data i'd like it.

The reason for the hash is to prove that you are really using the game client.

but y can't u just send them fake info?

One must calculate the checksum based on a string provided by battle.net; the value is dynamic and therefore cannot be spoofed.

They didn't want to make it easy to write a bot :P

[quote author=Camel link=board=17;threadid=1977;start=0#msg15414 date=1058732441]
One must calculate the checksum based on a string provided by battle.net; the value is dynamic and therefore cannot be spoofed.
[/quote]

Don't forget the mpq version, thats plays a role too.

Camel apparently thinks they're both sent in the same string ;)

Woe is VB users. :-\

I was referring to the equation. The first 3 values in the string are seeds, and so is the mpq version.

less seed, more random initalizations of the variables. basicly the equations, initalized with the values sent, are done for each dword in the collective set of hash files, the resulting "proof" is having a value that matches the value that was calculated serverside for the same files/equation set.

You could make it check the file sizes.

and what if someone created files with the exact same size?

[quote author=Noodlez link=board=17;threadid=1977;start=0#msg15882 date=1059031931]
and what if someone created files with the exact same size?
[/quote]

The checksum would still be wrong.