Hell, i didnt realise it came with the files... What you call i Dumb$H17 right here ^^
And what is the limit for gold? since its over 500, what is yours set to? or do you have any clue?
Printable View
Hell, i didnt realise it came with the files... What you call i Dumb$H17 right here ^^
And what is the limit for gold? since its over 500, what is yours set to? or do you have any clue?
Open your client and server with Hex Workshop and look for the maximum value of gold, after finding they substitute for some of these values,
remember macadamia all at once because it will give more than 17 substitutions in the server and about 8 on the client:
"80D1F008" = 150kk
"00C2EB0B" = 200kk
"80B2E60E" = 250kk
"0065CD1D" = 500kk
But I just know these codes, since the files of Lolico the limit of gold is greater than 500kk and I'm not sure what is the limit, so I can not even find the code in hex, I'm asking if anyone can help me with this, thanks already
Server offsets are probably reasonably constant... in the client, you really do need to know the limit to know what to search for... unless there are similar code fragments nearby that can tell you.
"0008AF2F" - "800kk"Quote:
Originally Posted by pllci
Does this server have +19 +20 by any chance
This is a chinese PT server,this server has been made some errors by its author deliberately。so, if you want to use it, you must fix it firstly..
-----
After much searching, I found the value in hex the client and server.exe, look for C2EB0B0F the client and the server 00943577
Substituting all the values:D
Edit> remember to match the values in all the offsets to make sure
Great work Bruno, and thanks for the complements pllci.
SkullKid Here <3
@OFF
pllci, you are gay! >=D
not as much as you,bitch;D
I get conn. failed. What do i need to do?
you need to change the ports of the game and server
search for that hex value in game.exe,C07540A000C48B0084C074375768 finding that will have value soon after the port that the game uses, change it to 19 27 in hex.
Then look for the hex value in the server.exe,83C40C85C0740850685CA48400FFD7B8 finding that will have value soon after the port that the server uses, change it for the same game of 19 27 will connect normally done,sorry for my bad english again
Thanks pllci, your English is better than most!
I have fixed the server.exe,including the port number 10009 and the map.you can find the additional map code in address 8c9f000.
for example.
08C9F000 68 1010C808 push 08C81010 ; ASCII "uffice"
08C9F005 68 0010C808 push 08C81000 ; ASCII "ruum\uffice.ase"
08C9F00A B9 C8177800 mov ecx, 007817C8
08C9F00F E8 7C0179F7 call 0042F190
08C9F014 68 400D0300 push 30D40
08C9F019 68 C0F2FCFF push FFFCF2C0
08C9F01E B9 C8177800 mov ecx, 007817C8
08C9F023 C705 8C187800 0>mov dword ptr [78188C], 800
08C9F02D C705 90187800 0>mov dword ptr [781890], 0
08C9F037 C705 94187800 0>mov dword ptr [781894], 0
08C9F041 C705 98187800 0>mov dword ptr [781898], 0
08C9F04B C705 9C187800 0>mov dword ptr [78189C], 4
08C9F055 C705 28267800 0>mov dword ptr [782628], 1
08C9F05F E8 AC0179F7 call 0042F210
08C9F064 68 1710C808 push 08C81017 ; ASCII "rPT-fo3"
08C9F069 68 1F10C808 push 08C8101F ; ASCII "RenaissancePT\MysteryForests\rPT-fo3.ASE"
08C9F06E B9 70267800 mov ecx, 00782670
08C9F073 E8 180179F7 call 0042F190
08C9F078 53 push ebx
08C9F079 BF 01000000 mov edi, 1
08C9F07E BD 02000000 mov ebp, 2
08C9F083 BE 03000000 mov esi, 3
08C9F088 68 88395E00 push 005E3988 ; ASCII "forest\3ani-01.ASE"
08C9F08D B9 70267800 mov ecx, 00782670
08C9F092 C705 34277800 0>mov dword ptr [782734], 200
08C9F09C 892D 38277800 mov dword ptr [782738], ebp
08C9F0A2 8935 3C277800 mov dword ptr [78273C], esi
08C9F0A8 893D 40277800 mov dword ptr [782740], edi
08C9F0AE C705 44277800 0>mov dword ptr [782744], 4
08C9F0B8 893D D0347800 mov dword ptr [7834D0], edi
08C9F0BE E8 6D0179F7 call 0042F230
08C9F0C3 68 12E5FFFF push -1AEE
08C9F0C8 68 2821FFFF push FFFF2128
08C9F0CD E8 3E0179F7 call 0042F210
08C9F0D2 68 43E7FFFF push -18BD
08C9F0D7 68 2A3AFFFF push FFFF3A2A
08C9F0DC E8 AF0779F7 call 0042F890
08C9F0E1 68 5FDBFFFF push -24A1
08C9F0E6 68 B825FFFF push FFFF25B8
08C9F0EB E8 A00779F7 call 0042F890
08C9F0F0 6A 20 push 20
08C9F0F2 6A 40 push 40
08C9F0F4 68 0B010000 push 10B
08C9F0F9 68 80D5FFFF push -2A80
08C9F0FE 68 766DFFFF push FFFF6D76
08C9F103 E8 280279F7 call 0042F330
08C9F108 68 FE010000 push 1FE
08C9F10D 68 AC650000 push 65AC
08C9F112 68 48D10100 push 1D148
08C9F117 68 30867900 push 00798630
08C9F11C E8 CF0279F7 call 0042F3F0
08C9F121 53 push ebx
08C9F122 68 E2D6FFFF push -291E
08C9F127 68 F742FFFF push FFFF42F7
08C9F12C 68 18357800 push 00783518
08C9F131 E8 7A1279F7 call 004303B0
08C9F136 6A 08 push 8
08C9F138 6A 64 push 64
08C9F13A 68 DCD7FFFF push -2824
08C9F13F 68 E2000000 push 0E2
08C9F144 68 BE28FFFF push FFFF28BE
08C9F149 B9 70267800 mov ecx, 00782670
08C9F14E E8 CD0879F7 call 0042FA20
08C9F153 68 C088C808 push 08C888C0 ; ASCII "rPT-fo2"
08C9F158 68 C888C808 push 08C888C8 ; ASCII "RenaissancePT\MysteryForests\rPT-fo2.ASE"
08C9F15D B9 18357800 mov ecx, 00783518
08C9F162 E8 290079F7 call 0042F190
08C9F167 53 push ebx
08C9F168 68 54385E00 push 005E3854 ; ASCII "forest\2ani-04.ASE"
08C9F16D B9 18357800 mov ecx, 00783518
08C9F172 57 push edi
08C9F173 6A 04 push 4
08C9F175 57 push edi
08C9F176 56 push esi
08C9F177 55 push ebp
08C9F178 68 00020000 push 200
08C9F17D 51 push ecx
08C9F17E E8 BE66ECFF call 08B65841
08C9F183 E8 A80079F7 call 0042F230
08C9F188 68 C9C7FFFF push -3837
08C9F18D 68 7349FFFF push FFFF4973
08C9F192 E8 790079F7 call 0042F210
08C9F197 68 0BD7FFFF push -28F5
08C9F19C 68 CC49FFFF push FFFF49CC
08C9F1A1 E8 EA0679F7 call 0042F890
08C9F1A6 68 7ED4FFFF push -2B82
08C9F1AB 68 B55EFFFF push FFFF5EB5
08C9F1B0 E8 DB0679F7 call 0042F890
08C9F1B5 53 push ebx
08C9F1B6 68 D5DAFFFF push -252B
08C9F1BB 68 7362FFFF push FFFF6273
08C9F1C0 68 C0437800 push 007843C0
08C9F1C5 E8 E61179F7 call 004303B0
08C9F1CA 6A 0D push 0D
08C9F1CC 68 A0000000 push 0A0
08C9F1D1 68 25C7FFFF push -38DB
08C9F1D6 68 AB000000 push 0AB
08C9F1DB 68 0655FFFF push FFFF5506
08C9F1E0 B9 18357800 mov ecx, 00783518
08C9F1E5 E8 060279F7 call 0042F3F0
08C9F1EA 6A 20 push 20
08C9F1EC 6A 40 push 40
08C9F1EE 68 FB000000 push 0FB
08C9F1F3 68 B4DAFFFF push -254C
08C9F1F8 68 DCFEFFFF push -124
08C9F1FD E8 2E0179F7 call 0042F330
08C9F202 68 D6000000 push 0D6
08C9F207 68 B4DAFFFF push -254C
08C9F20C 68 DCFEFFFF push -124
08C9F211 51 push ecx
08C9F212 E8 090879F7 call 0042FA20
08C9F217 8B0D BC367800 mov ecx, dword ptr [7836BC]
08C9F21D 69C9 01250000 imul ecx, ecx, 2501
08C9F223 68 F488C808 push 08C888F4 ; ASCII "rPT-fo1"
08C9F228 89A9 9C377800 mov dword ptr [ecx+78379C], ebp
08C9F22E 68 FC88C808 push 08C888FC ; ASCII "RenaissancePT\MysteryForests\rPT-fo1.ASE"
08C9F233 B9 C0437800 mov ecx, 007843C0
08C9F238 E8 53FF78F7 call 0042F190
08C9F23D 68 F0D4FFFF push -2B10
08C9F242 68 6C76FFFF push FFFF766C
08C9F247 B9 C0437800 mov ecx, 007843C0
08C9F24C 57 push edi
08C9F24D 6A 04 push 4
08C9F24F 57 push edi
08C9F250 56 push esi
08C9F251 55 push ebp
08C9F252 68 00020000 push 200
08C9F257 51 push ecx
08C9F258 E8 E465ECFF call 08B65841
08C9F25D E8 AEFF78F7 call 0042F210
08C9F262 68 FED5FFFF push -2A02
08C9F267 68 056DFFFF push FFFF6D05
08C9F26C E8 1F0679F7 call 0042F890
08C9F271 68 F2CAFFFF push -350E
08C9F276 68 9968FFFF push FFFF6899
08C9F27B E8 100679F7 call 0042F890
08C9F280 6A 20 push 20
08C9F282 6A 40 push 40
08C9F284 68 07020000 push 207
08C9F289 68 F6E6FFFF push -190A
08C9F28E 68 9F76FFFF push FFFF769F
08C9F293 E8 980079F7 call 0042F330
08C9F298 68 DF020000 push 2DF
08C9F29D 68 E6BFFFFF push FFFFBFE6
08C9F2A2 68 CD340000 push 34CD
08C9F2A7 68 70517600 push 00765170
08C9F2AC E8 3F0179F7 call 0042F3F0
08C9F2B1 53 push ebx
08C9F2B2 68 4DE5FFFF push -1AB3
08C9F2B7 68 A076FFFF push FFFF76A0
08C9F2BC 68 D0167600 push 007616D0
08C9F2C1 E8 EA1079F7 call 004303B0
08C9F2C6 53 push ebx
08C9F2C7 68 84C5FFFF push -3A7C
08C9F2CC 68 EB6CFFFF push FFFF6CEB
08C9F2D1 68 68527800 push 00785268
08C9F2D6 B9 C0437800 mov ecx, 007843C0
08C9F2DB E8 D01079F7 call 004303B0
08C9F2E0 68 2889C808 push 08C88928 ; ASCII "rPT-Town1"
08C9F2E5 68 3489C808 push 08C88934 ; ASCII "RenaissancePT\MysteryForests\rPT-Town1.ASE"
08C9F2EA B9 68527800 mov ecx, 00785268
08C9F2EF E8 9CFE78F7 call 0042F190
08C9F2F4 53 push ebx
08C9F2F5 68 FC375E00 push 005E37FC ; ASCII "ricarten\v-ani01.ASE"
08C9F2FA B9 68527800 mov ecx, 00785268
08C9F2FF 57 push edi
08C9F300 55 push ebp
08C9F301 57 push edi
08C9F302 56 push esi
08C9F303 55 push ebp
08C9F304 68 00010000 push 100
08C9F309 51 push ecx
08C9F30A E8 3265ECFF call 08B65841
08C9F30F E8 1CFF78F7 call 0042F230
08C9F314 68 0BB9FFFF push FFFFB90B
08C9F319 68 2C68FFFF push FFFF682C
08C9F31E E8 EDFE78F7 call 0042F210
08C9F323 68 D2BCFFFF push FFFFBCD2
08C9F328 68 A36CFFFF push FFFF6CA3
08C9F32D E8 5E0579F7 call 0042F890
08C9F332 68 99BBFFFF push FFFFBB99
08C9F337 68 C262FFFF push FFFF62C2
08C9F33C E8 4F0579F7 call 0042F890
08C9F341 6A 20 push 20
08C9F343 6A 40 push 40
08C9F345 68 38010000 push 138
08C9F34A 68 72BBFFFF push FFFFBB72
08C9F34F 68 20080000 push 820
08C9F354 E8 D7FF78F7 call 0042F330
08C9F359 68 FE000000 push 0FE
08C9F35E 68 E1BBFFFF push FFFFBBE1
08C9F363 68 650B0000 push 0B65
08C9F368 51 push ecx
08C9F369 E8 820079F7 call 0042F3F0
08C9F36E 8B15 CC537800 mov edx, dword ptr [7853CC]
08C9F374 6A 1B push 1B
08C9F376 6A 50 push 50
08C9F378 68 55BAFFFF push FFFFBA55
08C9F37D 8D1480 lea edx, dword ptr [eax+eax*4]
08C9F380 68 AA000000 push 0AA
08C9F385 C1E2 05 shl edx, 5
08C9F388 68 12FCFFFF push -3EE
08C9F38D 89AA 6C547800 mov dword ptr [edx+78546C], ebp
08C9F393 E8 880679F7 call 0042FA20
08C9F398 6A 1B push 1B
08C9F39A 6A 50 push 50
08C9F39C 68 8CBFFFFF push FFFFBF8C
08C9F3A1 68 710B0000 push 0B71
08C9F3A6 68 480A0000 push 0A48
08C9F3AB E8 700679F7 call 0042FA20
08C9F3B0 B9 10617800 mov ecx, 00786110
08C9F3B5 68 2083C808 push 08C88320 ; ASCII "Panzer"
08C9F3BA 68 2783C808 push 08C88327 ; ASCII "Panzer-City\Panzer.ase"
08C9F3BF E8 CCFD78F7 call 0042F190
08C9F3C4 68 DE260100 push 126DE
08C9F3C9 68 A50B0000 push 0BA5
08C9F3CE B9 10617800 mov ecx, 00786110
08C9F3D3 56 push esi
08C9F3D4 6A 06 push 6
08C9F3D6 6A 11 push 11
08C9F3D8 6A 13 push 13
08C9F3DA 6A 12 push 12
08C9F3DC 68 00010000 push 100
08C9F3E1 51 push ecx
08C9F3E2 E8 5A64ECFF call 08B65841
08C9F3E7 E8 24FE78F7 call 0042F210
08C9F3EC 68 93210100 push 12193
08C9F3F1 68 EF080000 push 8EF
08C9F3F6 E8 950479F7 call 0042F890
08C9F3FB 68 EC260100 push 126EC
08C9F400 68 DB0D0000 push 0DDB
08C9F405 E8 860479F7 call 0042F890
08C9F40A 6A 20 push 20
08C9F40C 6A 40 push 40
08C9F40E 68 E9020000 push 2E9
08C9F413 68 B3310100 push 131B3
08C9F418 68 C5080000 push 8C5
08C9F41D E8 0EFF78F7 call 0042F330
08C9F422 68 F2020000 push 2F2
08C9F427 68 D9300100 push 130D9
08C9F42C 68 CC080000 push 8CC
08C9F431 68 10617800 push 00786110
08C9F436 E8 B5FF78F7 call 0042F3F0
08C9F43B E8 3364ECFF call 08B65873
08C9F440 - E9 143D79F7 jmp 00433159
---------- Post added at 02:39 AM ---------- Previous post was at 02:32 AM ----------
The smd of the map has been encrypted by UPT,there is some decyption code in server and game.
For exmaple,
08B65873 C70424 59314300 mov dword ptr [esp], 00433159
08B6587A 8B15 6C198007 mov edx, dword ptr [780196C]
08B65880 69D2 E0000000 imul edx, edx, 0E0
08B65886 381D 24898400 cmp byte ptr [848924], bl
08B6588C C3 ret
08B6588D 8F80 D0000000 pop dword ptr [eax+D0]
08B65893 8F80 600E0000 pop dword ptr [eax+E60]
08B65899 8F80 D4000000 pop dword ptr [eax+D4]
08B6589F 33C0 xor eax, eax
08B658A1 51 push ecx
08B658A2 33C9 xor ecx, ecx
08B658A4 59 pop ecx
08B658A5 68 6658B608 push 08B65866
08B658AA C3 ret
08B658AB A1 70A26100 mov eax, dword ptr [61A270]
08B658B0 50 push eax
08B658B1 8D4C24 24 lea ecx, dword ptr [esp+24]
08B658B5 51 push ecx
08B658B6 FF15 48F25D00 call dword ptr [<&KERNEL32.lstrcmpA>] ; kernel32.lstrcmpA
08B658BC C705 2411C808 0>mov dword ptr [8C81124], 0
08B658C6 85C0 test eax, eax
08B658C8 74 23 je short 08B658ED
08B658CA 68 FA10C808 push 08C810FA ; ASCII "Sandurr Stage Data 0.25"
08B658CF 8D4C24 24 lea ecx, dword ptr [esp+24]
08B658D3 51 push ecx
08B658D4 FF15 48F25D00 call dword ptr [<&KERNEL32.lstrcmpA>] ; kernel32.lstrcmpA
08B658DA 85C0 test eax, eax
08B658DC 74 05 je short 08B658E3
08B658DE - E9 AB4A90F7 jmp 0046A38E
08B658E3 C705 2411C808 0>mov dword ptr [8C81124], 1
08B658ED - E9 AA4A90F7 jmp 0046A39C
08B658F2 A1 2411C808 mov eax, dword ptr [8C81124]
08B658F7 85C0 test eax, eax
08B658F9 75 0B jnz short 08B65906
08B658FB 8B4424 40 mov eax, dword ptr [esp+40]
08B658FF 85C0 test eax, eax
08B65901 - E9 AD4A90F7 jmp 0046A3B3
08B65906 53 push ebx
08B65907 51 push ecx
08B65908 52 push edx
08B65909 56 push esi
08B6590A 57 push edi
08B6590B 8B1D 2811C808 mov ebx, dword ptr [8C81128] ; serverSP.08C81144
08B65911 8B0B mov ecx, dword ptr [ebx]
08B65913 33D2 xor edx, edx
08B65915 3E:314C94 40 xor dword ptr ds:[esp+edx*4+40], ecx
08B6591A 42 inc edx
08B6591B 83FA 03 cmp edx, 3
08B6591E ^ 7C F5 jl short 08B65915
08B65920 33D2 xor edx, edx
08B65922 33C9 xor ecx, ecx
08B65924 8B1D 2C11C808 mov ebx, dword ptr [8C8112C] ; serverSP.08C81148
08B6592A 8B0B mov ecx, dword ptr [ebx]
08B6592C 8B7C24 24 mov edi, dword ptr [esp+24]
08B65930 33C0 xor eax, eax
08B65932 33DB xor ebx, ebx
08B65934 8AC2 mov al, dl
08B65936 C0E0 04 shl al, 4
08B65939 8ADA mov bl, dl
08B6593B 32D9 xor bl, cl
08B6593D 32D8 xor bl, al
08B6593F 2ADA sub bl, dl
08B65941 301C32 xor byte ptr [edx+esi], bl
08B65944 300C32 xor byte ptr [edx+esi], cl
08B65947 42 inc edx
08B65948 3BD7 cmp edx, edi
08B6594A ^ 7C E8 jl short 08B65934
08B6594C 5F pop edi
08B6594D 5E pop esi
08B6594E 8915 4011C808 mov dword ptr [8C81140], edx
08B65954 5A pop edx
08B65955 59 pop ecx
08B65956 5B pop ebx
08B65957 8B4424 40 mov eax, dword ptr [esp+40]
08B6595B 85C0 test eax, eax
08B6595D - E9 514A90F7 jmp 0046A3B3
08B65962 8BE8 mov ebp, eax
08B65964 A1 2411C808 mov eax, dword ptr [8C81124]
08B65969 85C0 test eax, eax
08B6596B 75 08 jnz short 08B65975
08B6596D 8B46 08 mov eax, dword ptr [esi+8]
08B65970 - E9 096490F7 jmp 0046BD7E
08B65975 8B4424 1C mov eax, dword ptr [esp+1C]
08B65979 53 push ebx
08B6597A 51 push ecx
08B6597B 52 push edx
08B6597C 56 push esi
08B6597D 57 push edi
08B6597E 8BF8 mov edi, eax
08B65980 8B1D 4011C808 mov ebx, dword ptr [8C81140]
08B65986 03FB add edi, ebx
08B65988 8BCB mov ecx, ebx
08B6598A 8B1D 2C11C808 mov ebx, dword ptr [8C8112C] ; serverSP.08C81148
08B65990 8BD1 mov edx, ecx
08B65992 8B0B mov ecx, dword ptr [ebx]
08B65994 33C0 xor eax, eax
08B65996 33DB xor ebx, ebx
08B65998 8AC2 mov al, dl
08B6599A C0E0 04 shl al, 4
08B6599D 8ADA mov bl, dl
08B6599F 32D9 xor bl, cl
08B659A1 32D8 xor bl, al
08B659A3 2ADA sub bl, dl
08B659A5 309C32 8CFFFBFF xor byte ptr [edx+esi+FFFBFF8C], bl
08B659AC 308C32 8CFFFBFF xor byte ptr [edx+esi+FFFBFF8C], cl
08B659B3 42 inc edx
08B659B4 3BD7 cmp edx, edi
08B659B6 ^ 7C E0 jl short 08B65998
08B659B8 5F pop edi
08B659B9 5E pop esi
08B659BA 5A pop edx
08B659BB 59 pop ecx
08B659BC 5B pop ebx
08B659BD 8B46 08 mov eax, dword ptr [esi+8]
08B659C0 - E9 B96390F7 jmp 0046BD7E
08B659C5 A1 2411C808 mov eax, dword ptr [8C81124]
08B659CA 85C0 test eax, eax
08B659CC 75 55 jnz short 08B65A23
08B659CE 8B86 38000400 mov eax, dword ptr [esi+40038]
08B659D4 - E9 654A90F7 jmp 0046A43E
08B659D9 53 push ebx
08B659DA 51 push ecx
08B659DB 52 push edx
08B659DC 56 push esi
08B659DD 57 push edi
08B659DE 8B1D 3811C808 mov ebx, dword ptr [8C81138] ; serverSP.08C81154
08B659E4 8B0B mov ecx, dword ptr [ebx]
08B659E6 8B7C24 28 mov edi, dword ptr [esp+28]
08B659EA 33C0 xor eax, eax
08B659EC 33DB xor ebx, ebx
08B659EE 33D2 xor edx, edx
08B659F0 8AC2 mov al, dl
08B659F2 C0E0 04 shl al, 4
08B659F5 8ADA mov bl, dl
08B659F7 32D9 xor bl, cl
08B659F9 32D8 xor bl, al
08B659FB 2ADA sub bl, dl
08B659FD 301C32 xor byte ptr [edx+esi], bl
08B65A00 300C32 xor byte ptr [edx+esi], cl
08B65A03 42 inc edx
08B65A04 3BD7 cmp edx, edi
08B65A06 ^ 7C E8 jl short 08B659F0
08B65A08 5F pop edi
08B65A09 5E pop esi
08B65A0A 5A pop edx
08B65A0B 59 pop ecx
08B65A0C 5B pop ebx
08B65A0D 5E pop esi
08B65A0E C705 2411C808 0>mov dword ptr [8C81124], 0
08B65A18 8B86 38000400 mov eax, dword ptr [esi+40038]
08B65A1E - E9 1B4A90F7 jmp 0046A43E
08B65A23 56 push esi
08B65A24 8BB6 18000400 mov esi, dword ptr [esi+40018]
08B65A2A ^ EB AD jmp short 08B659D9
08B65A2C 90 nop
08B65A2D 90 nop
---------- Post added at 02:53 AM ---------- Previous post was at 02:39 AM ----------
ur..sorry for my poor english, i don't know how to express some details in english,but i ensure that i can help you efficiently in chinese.Indeed,adding new map is not so much difficult.If you have some problems,contact me..i will try my best to settle it..
---------- Post added at 03:20 AM ---------- Previous post was at 02:53 AM ----------
ur...at once i accomplished all the work ,the most important thing is to fix the GM mode in game.exe.Now,server.exe and game.exe all work well.my email is ou-xi-qian@163.com ,contact me and i will post it to you..
---------- Post added at 03:21 AM ---------- Previous post was at 03:20 AM ----------
ur...at once i accomplished all the work ,the most important thing is to fix the GM mode in game.exe.Now,server.exe and game.exe all work well.my email is ou-xi-qian@163.com ,contact me and i will post it to you..the map and level goes well too..
If you get these fixed, GM mode and all, can you upload the client/server.exe for us. Thanks!