Printable View
Well, honestly you have an additional problem .. to load cargo main.exe ami me look perfectly in ollydbg 2.00 a main.exe of FeN$x
IMG: http://img854.imageshack.us/f/ollydbgmain1a.jpg/
ps: chris05... you know how it is done to find the offsets of the sky for the source code of 3d vcorp cam + sky? Could you please .. teach the rest?
ps 2: because I want to create a 3D camera with extended viewing range + sky, for this main.exe
Thx but no noob xD :lol:Quote:
Originally Posted by mauka
Ill go play some soccer, get some beers and when i am back ill end this shit once and for all :w00t:
I leave the offsets to extend the burden of this main.exe bmd models if anyone needs them or simply can not find them because they do not open the main in Ollydbg :)
//Fix Items Limit (Only weapons and without his textures) 1.08C+
Shields = 006274E3
Spears = 0062748D
Maces2 = 00627437
Maces = 006273E1
Axes = 006273A4
Swords = 006272D1
Staffs = 00627552
Staffs2 = 006275DA
Bows = 00627617
CrossBows = 00627654
Wings = 00628CB9 //Max Support (without Crash) is: 35 (in hex) = 53 (in dec).
Glow Calls and Proc for this main:
Glow Calls:
Call 1 = 533C2B
Call 2 = 61A8C2
Offset = 490
mauro07,
I dont use the vcorp source. But If you have this source an know for what version the main are the offsets, I can teach you....
Post the offsets and what version are them and I try to teach you....
(Please, sorry my bad English...)
but if you do not know how to find these values to the sky ... then please tell me who is helping to ENCTeam zemmatana .. with clients who have 3d + sky camera, because I thought it was you.
As I said,rebuild IAT lack something ^^Quote:
Originally Posted by chris05
FeN$x u only fix Call Dword ptr [xxxxx] ...
so lack Mov x,Dword ptr [xxxxx]...
Because ur tool only fix Call,check it again ;)
Anyway I said I late because I only unpacked 1.08B+,if anyone interesting ;)
http://www.megaupload.com/?d=DAO2EJ8H
Yes i am fixing that, it will be done by night, caused i need to play soccer now :lol:Quote:
Originally Posted by tomatoes
mauro07,
I know to find the offsets... All my clients have 3D, Sky and another customs...
When[INDG]FeN$x share a new main unpack, I will find the offsets and I will post them here...
(I helped EncGames... Not now...)
that is the main porq 1.08b + download it opens it and does not openQuote:
Originally Posted by tomatoes
Ok windows 7 guys test:
MEGAUPLOAD - The leading online storage and file delivery service
If crash please send error log of ollydbg or OS one.
dont work... wel it's stays on processes but that's all.
Win7 x64
Problem signature
Problem Event Name: APPCRASH
Application Name: main.exe
Application Version: 1.8.29.0
Application Timestamp: 4d774d51
Fault Module Name: StackHash_0142
Fault Module Version: 0.0.0.0
Fault Module Timestamp: 00000000
Exception Code: c0000005
Exception Offset: 7c93aa79
Additional Information 1: 0142
Additional Information 2: 0142c4993547de6e9ccac94f5467e256
Additional Information 3: bc9f
Additional Information 4: bc9f828a5d61bae1bd000017e4f4208f
does not start the main , use Windows XP Service Pack 3 + Client 1.08A + Parchs 1.08C
the main starts and closes after any solution?
help please
Thx re checkingQuote:
Originally Posted by Dredyk
Oh lol i forget to remove some gameguard routine xD
---------- Post added at 04:14 AM ---------- Previous post was at 04:03 AM ----------
Ok here it guys:
MEGAUPLOAD - The leading online storage and file delivery service
Works for me on XP, try windows 7 :lol:
-.- not work as I told you download the client from korea (late as 8 hours) to avoid problems and as I have them not start the main .
I worked as furnishes the client to another can use it thanks anyway
Try the latest main i upload, if you say you dont work then post error log from ollydbg or OS one. If not dont bother in ask for help.Quote:
Originally Posted by mx_pro
hm,please Crack it(Mu.exe,GG,...)I dont do that ^^ only unpacked;)Quote:
Originally Posted by beto4
did not work :)
Same OS win7 x64 sp1
dude ur getting old :D
Problem Event Name: APPCRASH
Application Name: main.exe
Application Version: 1.8.29.0
Application Timestamp: 4d774d51
Fault Module Name: StackHash_0142
Fault Module Version: 0.0.0.0
Fault Module Timestamp: 00000000
Exception Code: c0000005
Exception Offset: 7c93aa79
Additional Information 1: 0142
Additional Information 2: 0142c4993547de6e9ccac94f5467e256
Additional Information 3: bc9f
Additional Information 4: bc9f828a5d61bae1bd000017e4f4208f
Extra information about the problem
Bucket ID: 2355815361
Client 1.08A+Parchs No Sound+7z
Multiupload.com - upload your files to multiple file hosting sites!
Ok thx, when i get some time ill check it. Caused i dont work at MU, have other projects to do.Quote:
Originally Posted by Dredyk
FeN$x: the main.exe not work in windows 7 Ultimate (32 bits) look my errors AppCrash information...
1st Report Error:
Quote:
Firma con problemas:
Nombre del evento de problema: APPCRASH
Nombre de la aplicación: main.exe
Versión de la aplicación: 1.8.29.0
Marca de tiempo de la aplicación: 4d774d51
Nombre del módulo con errores: StackHash_0cc3
Versión del módulo con errores: 0.0.0.0
Marca de tiempo del módulo con errores: 00000000
Código de excepción: c0000005
Desplazamiento de excepción: 7c80a174
Versión del sistema operativo: 6.1.7600.2.0.0.256.1
Id. de configuración regional: 11274
Información adicional 1: 0cc3
Información adicional 2: 0cc3fb6c351418b1aad976ac656928db
Información adicional 3: 2e67
Información adicional 4: 2e67367ea812e73e38e95621705a769c
2nd Report Error:
Quote:
Firma con problemas:
Nombre del evento de problema: APPCRASH
Nombre de la aplicación: main.exe
Versión de la aplicación: 1.8.29.0
Marca de tiempo de la aplicación: 4d774d51
Nombre del módulo con errores: StackHash_0142
Versión del módulo con errores: 0.0.0.0
Marca de tiempo del módulo con errores: 00000000
Código de excepción: c0000005
Desplazamiento de excepción: 7c93aa79
Versión del sistema operativo: 6.1.7600.2.0.0.256.1
Id. de configuración regional: 11274
Información adicional 1: 0142
Información adicional 2: 0142c4993547de6e9ccac94f5467e256
Información adicional 3: bc9f
Información adicional 4: bc9f828a5d61bae1bd000017e4f4208f
Yes i know the problem i lack some MOV REG32/MEMORY[IAT] to patch. Example:Quote:
Originally Posted by mauro07
Code:00561A53 8B3D 48519200 MOV EDI,DWORD PTR DS:[925148] ; kernel32.GetTickCount
But i dont have much time today, ill take a look at night.
PS: If some one want to patch them are not much, its just that my tool did not patch them all, ill check later why. But there are like only 10 of those memory relocations left, can be easily patched by hand.
FeN$x,
With new main unpacked, appears the same message, but the offset is another. Now is
"Access violation when executing (7C80A174"
mauro07,
I dont have the vcorp´s source... I use other source... Then, I cant share now the offsets...
You need post the offsets and the version the vcorp´s source and then I will search for you...
Please look this source code (posted by MuLegend):
chris05: Why can not you share just the offsets? I mean ... are they not the same values that are in red in this source? :?:Quote:
#include "Stdafx.h"
#include "Sky.h"
#include <cstdlib>
#include <iostream>
#include <windows.h>
struct FRGB
{
float r, g, b;
};
AUX_RGBImageRec* blankimage;
AUX_RGBImageRec* images[32][6];
unsigned int textures[32][6];
int skycolordirection;
int DisplayInitialized, MiniMapInitialized;
FRGB skycolor;
typedef int(*TSkyHook)();
TSkyHook SkyHook = (TSkyHook) 0x000000;
typedef int(*TBlend) (int);
TBlend Blend = (TBlend) 0x000000;
int *MainState = (int*)0x000000;
int *Map = (int*)0x005E9409; // From Minimap research by HueyGTO
typedef int(*TUnBlend) ();
TUnBlend UnBlend = (TUnBlend) 0x000000;
int ShowMiniMap = GetPrivateProfileIntA("VCORP_MAIN", "MiniMap", 0, ".\\MuLegend\\MuLegend.ini");
int Use3Dcamera = GetPrivateProfileIntA("VCORP_MAIN", "Camera3D", 0, ".\\MuLegend\\MuLegend.ini");
int Sky = GetPrivateProfileIntA("VCORP_MAIN", "Sky", 0, ".\\MuLegend\\MuLegend.ini");
int SkyDayNight = GetPrivateProfileIntA("VCORP_MAIN", "Ambiente", 0, ".\\MuLegend\\MuLegend.ini");
int ShowWelcome = GetPrivateProfileIntA("VCORP_MAIN", "Benvenuto", 0, ".\\MuLegend\\MuLegend.ini");
bool FileExists(char * name)
{
if(CreateFile(name,0,0,0,OPEN_EXISTING,0,0) == INVALID_HANDLE_VALUE)
return false;
return true;
}
void GetCamCoords(double* x_cam, double* y_cam, double* z_cam)
{
double m[16];
glGetDoublev(GL_MODELVIEW_MATRIX, m);
*x_cam = -m[12] * m[0] - m[13] * m[1] - m[14] * m[2];
*y_cam = -m[12] * m[4] - m[13] * m[5] - m[14] * m[6];
*z_cam = -m[12] * m[8] - m[13] * m[9] - m[14] * m[10];
}
void ChangeSky()
{
SYSTEMTIME sm;
GetLocalTime(&sm);
int hourstate = sm.wHour % 2;
float minutestate = (float)sm.wMinute / 60.0f;
if(hourstate == 0)
{
skycolor.r = minutestate;
skycolor.g = minutestate;
skycolor.b = minutestate;
}
else
{
skycolor.r = 1.0f - minutestate;
skycolor.g = 1.0f - minutestate;
skycolor.b = 1.0f - minutestate;
}
}
VOID CALLBACK SkyTimerProc(HWND hwnd,UINT uMsg,UINT_PTR idEvent,DWORD dwTime)
{
ChangeSky();
}
void InitDisplay()
{
//SetTimer(FindWindow("MU",NULL),3,60000,(TIMERPROC)CheckIP);
if(Sky)
{
char texturepath[256];
sprintf(texturepath,"%s",".\\Data\\Interface\\Null.bmp");
if(!FileExists(texturepath))
{
MessageBox(0,"Cannot find blank texture","Error",0);
ExitProcess(0);
}
blankimage = auxDIBImageLoad(texturepath);
try
{
for(int i=0 ; i<30; i++)
{
for(int j=0; j<6; j++)
{
images[i][j] = blankimage;
}
sprintf(texturepath,".\\Data\\Interface\\World%d\\Back.bmp",i+1);
if(FileExists(texturepath))
images[i][0] = auxDIBImageLoad(texturepath);
sprintf(texturepath,".\\Data\\Interface\\World%d\\Bottom.bmp",i+1);
if(FileExists(texturepath))
images[i][1] = auxDIBImageLoad(texturepath);
sprintf(texturepath,".\\Data\\Interface\\World%d\\Front.bmp",i+1);
if(FileExists(texturepath))
images[i][2] = auxDIBImageLoad(texturepath);
sprintf(texturepath,".\\Data\\Interface\\World%d\\Left.bmp",i+1);
if(FileExists(texturepath))
images[i][3] = auxDIBImageLoad(texturepath);
sprintf(texturepath,".\\Data\\Interface\\World%d\\Right.bmp",i+1);
if(FileExists(texturepath))
images[i][4] = auxDIBImageLoad(texturepath);
sprintf(texturepath,".\\Data\\Interface\\World%d\\Top.bmp",i+1);
if(FileExists(texturepath))
images[i][5] = auxDIBImageLoad(texturepath);
}
}
catch(...){}
for(int i=0 ; i<30; i++)
{
for(int j=0; j<6; j++)
{
glGenTextures(1, &textures[i][j]);
glBindTexture(GL_TEXTURE_2D, textures[i][j]);
glPixelStorei(GL_UNPACK_ALIGNMENT, 1);
glTexImage2D(GL_TEXTURE_2D, 0, 3, images[i][j]->sizeX, images[i][j]->sizeY, 0, GL_RGB, GL_UNSIGNED_BYTE, images[i][j]->data);
glTexParameteri(GL_TEXTURE_2D, GL_TEXTURE_MIN_FILTER, GL_NEAREST);
glTexParameteri(GL_TEXTURE_2D, GL_TEXTURE_MAG_FILTER, GL_NEAREST);
}
}
skycolor.r = 1.0f;
skycolor.g = 1.0f;
skycolor.b = 1.0f;
if(SkyDayNight)
{
skycolordirection = 1;
SetTimer(FindWindow("MU",NULL),2,5000,(TIMERPROC)SkyTimerProc);
ChangeSky();
}
}
DisplayInitialized = 1;
}
bool CanDrawSky()
{
char texturepath[256];
sprintf(texturepath,".\\Data\\Interface\\World%d\\Top.bmp",*Map+1);
if(FileExists(texturepath))
return true;
return false;
}
void Display()
{
SkyHook();
*MainState = 5;
if(*MainState == 5/* && !unhautorized*/)
{
if(!DisplayInitialized)
InitDisplay();
if(Sky && CanDrawSky())
{
double x_cam, y_cam, z_cam;
GetCamCoords(&x_cam,&y_cam,&z_cam);
Blend(1);
glColor3d(skycolor.r,skycolor.g,skycolor.b);
glBindTexture(GL_TEXTURE_2D, textures[*Map][5]);
glBegin(GL_QUADS);
//TOP
glTexCoord2f(1.0f, 0.0f); glVertex3d(x_cam-3000, y_cam+3000, 1500);
glTexCoord2f(0.0f, 0.0f); glVertex3d(x_cam+3000, y_cam+3000, 1500);
glTexCoord2f(0.0f, 1.0f); glVertex3d(x_cam+3000, y_cam-3000, 1500);
glTexCoord2f(1.0f, 1.0f); glVertex3d(x_cam-3000, y_cam-3000, 1500);
glEnd();
glBindTexture(GL_TEXTURE_2D, textures[*Map][1]);
glBegin(GL_QUADS);
//BOTTOM
glTexCoord2f(1.0f, 1.0f); glVertex3d(x_cam-3000, y_cam+3000, 0);
glTexCoord2f(0.0f, 1.0f); glVertex3d(x_cam+3000, y_cam+3000, 0);
glTexCoord2f(0.0f, 0.0f); glVertex3d(x_cam+3000, y_cam-3000, 0);
glTexCoord2f(1.0f, 0.0f); glVertex3d(x_cam-3000, y_cam-3000, 0);
glEnd();
glBindTexture(GL_TEXTURE_2D, textures[*Map][2]);
glBegin(GL_QUADS);
//FRONT
glTexCoord2f(1.0f, 1.0f); glVertex3d(x_cam-3000, y_cam+3000, 1500);
glTexCoord2f(0.0f, 1.0f); glVertex3d(x_cam+3000, y_cam+3000, 1500);
glTexCoord2f(0.0f, 0.0f); glVertex3d(x_cam+3000, y_cam+3000, 0);
glTexCoord2f(1.0f, 0.0f); glVertex3d(x_cam-3000, y_cam+3000, 0);
glEnd();
glBindTexture(GL_TEXTURE_2D, textures[*Map][0]);
glBegin(GL_QUADS);
//BACK
glTexCoord2f(0.0f, 1.0f); glVertex3d(x_cam-3000, y_cam-3000, 1500);
glTexCoord2f(1.0f, 1.0f); glVertex3d(x_cam+3000, y_cam-3000, 1500);
glTexCoord2f(1.0f, 0.0f); glVertex3d(x_cam+3000, y_cam-3000, 0);
glTexCoord2f(0.0f, 0.0f); glVertex3d(x_cam-3000, y_cam-3000, 0);
glEnd();
glBindTexture(GL_TEXTURE_2D, textures[*Map][3]);
glBegin(GL_QUADS);
//LEFT
glTexCoord2f(1.0f, 1.0f); glVertex3d(x_cam-3000, y_cam-3000, 1500);
glTexCoord2f(0.0f, 1.0f); glVertex3d(x_cam-3000, y_cam+3000, 1500);
glTexCoord2f(0.0f, 0.0f); glVertex3d(x_cam-3000, y_cam+3000, 0);
glTexCoord2f(1.0f, 0.0f); glVertex3d(x_cam-3000, y_cam-3000, 0);
glEnd();
glBindTexture(GL_TEXTURE_2D, textures[*Map][4]);
glBegin(GL_QUADS);
//RIGHT
glTexCoord2f(0.0f, 1.0f); glVertex3d(x_cam+3000, y_cam-3000, 1500);
glTexCoord2f(1.0f, 1.0f); glVertex3d(x_cam+3000, y_cam+3000, 1500);
glTexCoord2f(1.0f, 0.0f); glVertex3d(x_cam+3000, y_cam+3000, 0);
glTexCoord2f(0.0f, 0.0f); glVertex3d(x_cam+3000, y_cam-3000, 0);
glEnd();
UnBlend();
}
}
}
void HookOffset(DWORD my, DWORD tohook, BYTE type)
{
*(BYTE*)tohook = type;
*(DWORD*)(tohook+1) = my;
}
void HookSky()
{
HookOffset((DWORD)&Display,0x5F1439,0xE8);
}
/* FINE SKY */
SkyHook = 0x???????
Blend = 0x???????
MainState = 0x???????
UnBlend = 0x???????
in main.exe with ollydbg
As these values look like Hexadecimal search as strings ... as looking for? Float ...
mauro07,
For Sky, I use these offsets (the offsets are the main 1.07P+)
MainState - 915D44
Hook_Dysplay - 4A8F9E
MainSetBlend - 626570
MainSetUBlend - 6264F1