• Unfortunately, we have experienced significant hard drive damage that requires urgent maintenance and rebuilding. The forum will be a state of read only until we install our new drives and rebuild all the configurations needed. Please follow our Facebook page for updates, we will be back up shortly! (The forum could go offline at any given time due to the nature of the failed drives whilst awaiting the upgrades.) When you see an Incapsula error, you know we are in the process of migration.

CM_CHARACTER_PASSKEY packet.

Joined
Feb 8, 2010
Messages
711
Reaction score
361
hello,

Anybody know "new" passkey encryption? It is not an UTF-16 LE string anymore, like it used to be.

Code:
2F8EE8C5     66:C785 02FCFFFF 9B01       MOV     WORD PTR SS:[EBP-3FE], 19B
2F8EE8CE     C685 04FCFFFF 6D            MOV     BYTE PTR SS:[EBP-3FC], 6D
2F8EE8D5     66:C785 05FCFFFF 64FE       MOV     WORD PTR SS:[EBP-3FB], 0FE64
2F8EE8DE     C685 07FCFFFF 03            MOV     BYTE PTR SS:[EBP-3F9], 3
2F8EE8E5     8885 08FCFFFF               MOV     BYTE PTR SS:[EBP-3F8], AL

This is the code in game.dll which constructs header of this packet (newest aion free-to-play 3.9).

Code:
9B 01 6D 64 FE 03 00 D6 BD 72 D2 EE 8A D3 F2 5F   ..md.....r....._
C4 A9 4E F4 BE DD 2F C0 FC 9C D2 C2 78 6A 40 21   ..N.../.....xj@!
11 07 C1 18 B5 2B 1D 02 44 34 63 D0 C5 D5 E6 08   .....+..D4c.....
54 6C D6 F7 C2 65 2D                              Tl...e-


The above represents a packet with a random passkey entered in client. It gets encrypted witha dynamic key, data changes each time you press send ingame, even in same session.

For the heck of me, I cannot find the function which encrypts the buffer containing player passphrase. Does anybody have the same problem, or am I alone on this?

Cheers
 
Legendary Battlemage
Joined
Aug 6, 2004
Messages
608
Reaction score
120
You are not alone on this, have been messing with this quite a bit myself
 
Back
Top