Library of IDB's for different versions with named addresses

[sunnyboy]

Just thought of it:
http://forum.ragezone.com/f690/maplestory-v118-idb-925400/

I only really put ones I make so I don't needa give credits to others for their work lol I'd rather do it myself

 

[Hilia]

I only really put ones I make so I don't needa give credits to others for their work lol I'd rather do it myself

Good to know.

 

[sunnyboy]

Good to know.

I'd have no trouble doing versions people ask, but if it's release elsewhere saves them time Plus it's fun in away to find the address's

 

[Hubba]

Thank you for the v0.8 IDB

 

[sunnyboy]

Thank you for the v0.8 IDB

You doing v8?

 

[Avia]

Hey. This question may be answered but how do you prepare a memory dump?? thanks

 

[sunnyboy]

Hey. This question may be answered but how do you prepare a memory dump?? thanks

Open the process with olly, pause it and dump

 

[Avia]

Open the process with olly, pause it and dump

what is olly? sorry for being like a noob.

 

[sunnyboy]

what is olly? sorry for being like a noob.

ollydbg; google it

 

[Avia]

ollydbg; google it

I found it but which button is to dump. #noob . But I will become better. I promise!

 

[icelemon1314]

u should use an undetected ollydbg,Up to now I have not found,if u find it,could u tell me?

 

[Avia]

u should use an undetected ollydbg,Up to now I have not found,if u find it,could u tell me?

Undetected? Anyway, Im still looking to find out how to dump and get idb's

 

[Hilia]

Undetected? Anyway, Im still looking to find out how to dump and get idb's

Get the phantom plugin somewhere at tuts4you, and it will be undetected. You should perhaps also get a dump plugin

 

[sunnyboy]

Run the client @ launch screen and freeze the procress with process hacker then attack it to Ollydbg and dump
Avia

 

[icelemon1314]

phantom plugin this is not support for win7 64bit,Is there a way to make it support?

 

[Hilia]

phantom plugin this is not support for win7 64bit,Is there a way to make it support?

The source of phantom should be provided with the download, so just compile it?

 

[sunnyboy]

@icelemon1314 When I heavy use olly, just for precautions I run it under WINXP in vmware workstation



EDIT: Someone wanted v117 well now it's available w/ the basic named needed to find packet structures and headers for it

 

[xStr0nGx]

@icelemon1314 When I heavy use olly, just for precautions I run it under WINXP in vmware workstation



EDIT: Someone wanted v117 well now it's available w/ the basic named needed to find packet structures and headers for it

Can u please make me a v148 idb with no names at all so I can practice on findin the main ones? :*:

 

[sunnyboy]

Can u please make me a v148 idb with no names at all so I can practice on findin the main ones? :*:

no

just unpack maplestory and load it in ida and let it analyze lol

 

[xStr0nGx]

no

just unpack maplestory and load it in ida and let it analyze lol

LF> tutorial on how to find the CWvsContext::OnPacket ~~