How to search offsets on GameServer?

[KarLi]

Well hello to everyone ,
because i am too new on coding

and i want for example to search an offset on GameServer
i right click search> then binary or text or constant
but i can't find anything , so i am sure that i am doing something wrong.


for ex:

#define GS_SOUL_RATE (0x004F80CC+3)
#define GS_SOUL_LUCK_RATE (0x004F81AB+3)
#define GS_LIFE_RATE (0x004F893A+3)

how do i search those offsets on GameServer?



thanks for ur time :)
KarLi.

[MentaL]

[duracel]

Well you can try a easiest way by comparing. For example if i have offsets of something from gs .18 and want to find it in .90, i go to the offset from gs .18 and then i Right CLick->Search for-> All referenced text strings. In the new window that pops up it shows where offsets its located, between what strings and then i go to those string in gs.90 and try to find the function of the offset is located because the functions are kinda the same.

[KarLi]

Thanks for ur reply duracel,

well what i am trying to find is the offsets of Jewels Drop Rates to change the drop rate on GS 1.00.08 which i haven't succesed yet.


i can't find the values /offsets or the hex code of it, the GS is from czf Season I 1.00.08 and they dont have a file to change the jewel drop rate so i am trying to help a guy with coding it.
im really new to it i've already read few guides but i am not getting it.


is there any other way finding this offsets?


Thanks for ur time.

KarLi*

[duracel]

Well..i don't think that there is any drop rate for jewels..better try and make a dll with a drop system(wich can be found in a lot of sources and need to find just a few offsets so you can hook it properly). Now im going to sleep, later in the day i will try make a dll source with drop system for that gs if you can't make it till then.

[KarLi]

Well duracel thanks for helping me , i dnt think i can make .dll .
i really appreciate ur help if u do this but if there is a guide that would be more helpful for me to learn making it and also hooking it.


going to sleep aswell.

have nice night and thanks for trying help.


KarLi

[noobies]

Well duracel thanks for helping me , i dnt think i can make .dll .
i really appreciate ur help if u do this but if there is a guide that would be more helpful for me to learn making it and also hooking it.


going to sleep aswell.

have nice night and thanks for trying help.


KarLi

Thx KarLi for your effort <3

[duracel]

I looked into this and its not a good idea to make a dll because it has the original dll added that contains objectstructures in it and may come in conflict with the drop dll wich may cause some bugs.

[KarLi]

Thanks for the reply duracel,
should i edit the drop rates on .dll with Ollydbg ?


Thanks for ur time.

[duracel]

You can't because there is nothing coded on the dll about they're rates.I'll search for some info about the struct of this gs and try to make dll for that server.

[KarLi]

Really appreciate it duracel :).

going to sleep now thank u very much for ur Time.



KarLi*

[duracel]

Dll and hook method

If it has another dll hooked change the last jmp offset from dll1.
From jmp entrypoint to jmp of1 of Custom.dll



of1:Push Custom.dll ASCII Offset
of2:Call dword ptr ds:[LoadLibraryAOffset]
of3:Push Initx ASCII Offset
of4:Push Eax
of5:call dword ptr ds:[GetProcAddressOffset]
of6:Call Eax
of7:JMP EntryPoint

If you can't hook it post me the gs.

Ps: What the hell is with rz cause i keep on getting Time Out every 2 min >.<

[KarLi]

Thanks duracel , i'm going to try too hook it with this guide

http://forum.ragezone.com/f196/hooking-dll-gameserver-172902/

ps: ragezone has some problem with servers i guess so this problem happens to everyone .

will be fixed soon i guess ! :)


edit:

what is

ADD BYTE PTR DS:[EAX],AL

cus i can't find a enough empty place on Gameserver
i can find like 5-6 lines NOP but no more i think

:|


here is GS
GameServer.rar


ps: how did u made that custom.dll ? u made it or found it cus [ i think its too much to code i just opened with ollydbg too much codes]
:o


EDIT: i found 7 slots free and trying to make it
the what i dont understand its when i paste [Call Eax] its removing the next code under and when i put fill with NOP's it does too :S what should i do?


litle difficult cus i dont understand good :P

karli

[duracel]

I made it, i will post you're gs with hooked in a few minutes.

Updated post with gs.

[KarLi]

Thanks duracel , i will test it now asap gotta setup server again . 5-10 mins ill answer ya..


ps: i wanted to hook it my self somehow i mean i wanted to learn :D


Karli*

[duracel]

I understand, thats why i wrote you those steps there to hook it by you're self. To be honest, i didn't understand a thing from that guide xD and you didn't had to look for nop places. You had to look for db 00 places wich were under the 1st dll that was hooked there.

[KarLi]

Damn , i can't manage to connect on the server of czf cus there is problem connecting no box appears on client.
anyways ill wait my friend 1 hour max and he will that on his server cus he needs that.


duracel i didnt understand alot from that guide aswell but i tried something

well where are the db00 places? i can't get it :).


KarLi*

[duracel]

Here they are:

ImageShack Album - 2 images

[KarLi]

thanks duracel,

can u send me a link if possible of ur OllyDBG cus mine is maybe new or old i dont know so if u send me urs i will understand better the screenshot.
and plus question how u found the free space?

karli*

[duracel]

Its ollydbg 1.10. I just changed the colors from it ^^.

http://www.ollydbg.de/odbg110.zip

[KarLi]

thanks my last ollydbg had error with audio.dll now no errors at start..

hmm
how did u found the db 00
cus i cant find them only if i scroll down all the time
I Find all the time now NOP NOP

PS:
is that what i did on gs some good ? or totally fail?

http://lulzimg.com/i20/1870f2.jpg

is that the empty spots
http://lulzimg.com/i20/5d0751.jpg?
KarLI*

[duracel]

Watch this:
YouTube - MU Online - How to hook a DLL in your Main.exe

[KarLi]

I Still cant find the db 00
i did what he did but i can't find them ...

i searched db 00 - nothing
i searched that what u edited
http://lulzimg.com/i20/116aaa.jpg

still nothing
i dont get it , how do u search for them?

[duracel]

What i noticed...you are running the gs in ollydbg. You don't have to run it! You just have to load it, thats all. If you want i can show you on team viewer.

[KarLi]

well i noticed that the DB 00 are not there and instead of them they are

ADD BYTE PTR DS: [EAX]  something

http://lulzimg.com/i20/636368.jpg

i dont know how to load the gameserver i mean i didnt understand what u mean by that .

I've sended u by PM my TV Id and Pw


Thanks for all ur helping mate.



KarLi

[Kyhoh]

Just select those lines, right click > binary > Fill with NOPS.