I was test on windows XP and on AiON NA 4.0.0.9 Fyyre's NoIP 2.5+ it's works fine with localhost and LAN
Printable View
I was test on windows XP and on AiON NA 4.0.0.9 Fyyre's NoIP 2.5+ it's works fine with localhost and LAN
Work on WAN?Quote:
Originally Posted by TieLay
Sreenshots?
no, WAN not tested, only LAN
Well, I never had to use a dll to connect in 32 and 64 bits on my local network. (aka my pc or another one on my local)
I guess the privates ranges are allowed by default.
Edit:
I have been tracing dlls calls and network traffic and if you use any of the dll you will see there is three bytes sent 3 times in a row which are always:Quote:
Originally Posted by OldTimeDev
Sent 3 times when you are connecting to loginserver (2106) just before it's opening a connection on it and sent 3 times again, same data just before you open the connection to a gameserver (7777).Code:21 41 00 !A.
Also, your weird ip range is coming from awesomium.dll which is crypting html requests and sending it to those 74.125.255.x ip range.
I discovered that Awesomium is used to host web UI interfaces in games. There was a discussion about it over on the DDO forums, which led to a big rant over at Awesomium: why is awesomium fucking up my ddo client? - Awesomium AnswersQuote:
Originally Posted by pwet99
What tool are you using to trace dll calls?
ospy - Advanced reverse-engineering tool for spying on Windows software - Google Project Hosting
Also useful if you want to follow an address in IDA.
That's a very interesting tool. I'm getting some weird behaviour though.
If I launch the client using the "Create Process" option under Capture, I get an error as soon as I login saying it can't connect to the authorization server. Interestingly though, there is a connection attempt to 70.4.0.2 at port 2106. There is also a getaddrinfo call in d3d8thk.dll using 127.0.0.1 (I am using the localhost version of that).
If I run the client using the regular aion_start_local.bat file and then attach to the process it all runs fine and I can login.
Have you managed to get it to capture using Create Process, or only by attaching to it?
Nope I only used the attach option.
using hamachi program that you can connect between 2 cities LAN / WAN ? :)
I did think of it but didn't make any test since I don't like hamachi and it would only be a temporary solution anyway. I heard on some forums that it's not working though, can't confirm.
packetsamurai because when I use the server to function as an off hamachi interface
Use at least
therefore puzzled that it is most likely you will be able to work temporary private server
if it is not enclosed in an apartment with 2 PC
One player but City and more
Stuff I've found for the unpacked versions of d3d8thk.dll:
The byte at offset 0x00003C3E indicates the length of the main difference string. It's either 0x0D (13) or 0x0E (14) and any of the ones that have a length of 13 have a 0 as their 14th byte.
Here are all of the difference strings for each of the dlls:
I noticed that the first 4 bits of each of the entries is always 0,1,3 or 4.Code:Aion Sea, IP(103.246.18.234), d3d8thk(02 09 4E 4C 05 0A 0B 33 1B 4C 0C 0B 0A 00)
Conquest Aion, IP(176.31.235.31), d3d8thk(0F 39 3F 07 4C 10 3F 0E 0A 0D 4C 0D 08 05)
Eternal Aion, IP(88.190.212.4), d3d8thk(01 0A 4C 0B 02 17 09 07 1B 33 4C 04 08 00)
Evolution Fr, IP(5.135.141.17), d3d8thk(4F 4C 33 3F 0B 02 09 0A 08 0D 33 4C 15 09)
Gamez Aion, IP(69.167.179.118), d3d8thk(05 3F 33 0B 10 3F 07 0D 0C 4C 39 0D 33 00)
Just Aion, IP(188.138.11.122), d3d8thk(0A 4C 00 1B 09 0A 3F 07 0D 0C 4C 0C 0B 0A)
Unforgotten, IP(178.254.20.148), d3d8thk(08 14 4F 4F 4A 4E 4C 4F 38 02 1B 4C 3A 0B)
I also noticed that the length I was talking about in my previous post was 13 or 14, depends of the dll.Quote:
Originally Posted by pwet99
I have just aion dll
I opened HexEditor
but none of these or similar lines
as you find him? and which can be found by editing it?.
Search for the text "string" three times on any 120k dll and that's just one line below.