[Theory] Clan + Quest on Same Server.

pspboy2008 · Aug 3, 2009

I'm not sure how Trinity does it, but i was searching around in MatchServer.exe with OllyDbg and i found this...

Code:

004193C4  |. 68 08425100    PUSH MatchSer.00514208                   ;  ASCII "normal"
004193C9  |. 52             PUSH EDX
004193CA  |. E8 11970A00    CALL MatchSer.004C2AE0
004193CF  |. 83C4 08        ADD ESP,8
004193D2  |. 85C0           TEST EAX,EAX
004193D4  |. 75 0B          JNZ SHORT MatchSer.004193E1
004193D6  |. 8986 CC010000  MOV DWORD PTR DS:[ESI+1CC],EAX
004193DC  |. E9 92000000    JMP MatchSer.00419473
004193E1  |> 8D8424 4801000>LEA EAX,DWORD PTR SS:[ESP+148]
004193E8  |. 68 F8415100    PUSH MatchSer.005141F8                   ;  ASCII "clan"
004193ED  |. 50             PUSH EAX
004193EE  |. E8 ED960A00    CALL MatchSer.004C2AE0
004193F3  |. 83C4 08        ADD ESP,8
004193F6  |. 85C0           TEST EAX,EAX
004193F8  |. 75 0C          JNZ SHORT MatchSer.00419406
004193FA  |. C786 CC010000 >MOV DWORD PTR DS:[ESI+1CC],1
00419404  |. EB 6D          JMP SHORT MatchSer.00419473
00419406  |> 8D8C24 4801000>LEA ECX,DWORD PTR SS:[ESP+148]
0041940D  |. 68 F0415100    PUSH MatchSer.005141F0                   ;  ASCII "ladder"
00419412  |. 51             PUSH ECX
00419413  |. E8 C8960A00    CALL MatchSer.004C2AE0
00419418  |. 83C4 08        ADD ESP,8
0041941B  |. 85C0           TEST EAX,EAX
0041941D  |. 75 0C          JNZ SHORT MatchSer.0041942B
0041941F  |. C786 CC010000 >MOV DWORD PTR DS:[ESI+1CC],2
00419429  |. EB 48          JMP SHORT MatchSer.00419473
0041942B  |> 8D9424 4801000>LEA EDX,DWORD PTR SS:[ESP+148]
00419432  |. 68 E8415100    PUSH MatchSer.005141E8                   ;  ASCII "event"
00419437  |. 52             PUSH EDX
00419438  |. E8 A3960A00    CALL MatchSer.004C2AE0
0041943D  |. 83C4 08        ADD ESP,8
00419440  |. 85C0           TEST EAX,EAX
00419442  |. 75 0C          JNZ SHORT MatchSer.00419450
00419444  |. C786 CC010000 >MOV DWORD PTR DS:[ESI+1CC],3
0041944E  |. EB 23          JMP SHORT MatchSer.00419473
00419450  |> 8D8424 4801000>LEA EAX,DWORD PTR SS:[ESP+148]
00419457  |. 68 E0415100    PUSH MatchSer.005141E0                   ;  ASCII "test"
0041945C  |. 50             PUSH EAX
0041945D  |. E8 7E960A00    CALL MatchSer.004C2AE0
00419462  |. 83C4 08        ADD ESP,8
00419465  |. 85C0           TEST EAX,EAX
00419467  |. 75 0A          JNZ SHORT MatchSer.00419473
00419469  |. C786 CC010000 >MOV DWORD PTR DS:[ESI+1CC],4

Not sure what it means, but is it possible to call other functions along with the already pushed functions, if so wouldn't it be able to call Clan with Test(Quest) mode... :blink:

I'm complete noob in ASM, i'm just asking if it's possible.

Tman151 · Aug 3, 2009

The Calls and/or JMP's would be something to look into first, than taking an exception.

[Edit]
Just read the last line of your thread. =/
Thank you for this. This may be a nice little breakthrough because of you. ^^

pspboy2008 · Aug 3, 2009

Yay, i feel smart :]

Tman151 · Aug 3, 2009

I'll know within minutes. I'll edit this post.

[Edit]
Nope, sorry. It's not it.

pspboy2008 · Aug 3, 2009

Darn. I'll keep looking. :]
Maybe in Database too?

[Edit]
Made me feel like i wanna crawl in my whole again :[
MD5: 94d1626f4af5fce97e63c43863a05107

Tman151 · Aug 3, 2009

pspboy2008 said:
Darn. I'll keep looking. :]
Maybe in Database too?

[Edit]
Made me feel like i wanna crawl in my whole again :[
MD5: 94d1626f4af5fce97e63c43863a05107

Me and a friend is comparing old MatchServer + new MatchServer, ty for the idea. ^^

dellyoung · Aug 3, 2009

lol it would be awsome if soemone found it and relesed it lol cuz i fail at ASM cuz i never take the time to lern it

dacharles · Aug 3, 2009

004193E8 |. 68 F8415100 PUSH MatchSer.005141F8 ; ASCII "clan"
004193ED |. 50 PUSH EAX
004193EE |. E8 ED960A00 CALL MatchSer.004C2AE0
004193F3 |. 83C4 08 ADD ESP,8
004193F6 |. 85C0 TEST EAX,EAX
004193F8 |. 75 0C JNZ SHORT MatchSer.00419406
004193FA |. C786 CC010000 >MOV DWORD PTR DS:[ESI+1CC],1
00419404 |. EB 6D JMP SHORT MatchSer.00419473

mmm if the server is in clan mode on ESI+1CC will be 1 so around there might be a related functions D:

pspboy2008 · Aug 3, 2009

Tman151 said:
Me and a friend is comparing old MatchServer + new MatchServer, ty for the idea. ^^

Take me as your apprentice? I wish to learn ASM...

ThePhailure772 · Aug 3, 2009

pspboy2008 said:

I'm not sure how Trinity does it, but i was searching around in MatchServer.exe with OllyDbg and i found this...

Code:

004193C4  |. 68 08425100    PUSH MatchSer.00514208                   ;  ASCII "normal"
004193C9  |. 52             PUSH EDX
004193CA  |. E8 11970A00    CALL MatchSer.004C2AE0
004193CF  |. 83C4 08        ADD ESP,8
004193D2  |. 85C0           TEST EAX,EAX
004193D4  |. 75 0B          JNZ SHORT MatchSer.004193E1
004193D6  |. 8986 CC010000  MOV DWORD PTR DS:[ESI+1CC],EAX
004193DC  |. E9 92000000    JMP MatchSer.00419473
004193E1  |> 8D8424 4801000>LEA EAX,DWORD PTR SS:[ESP+148]
004193E8  |. 68 F8415100    PUSH MatchSer.005141F8                   ;  ASCII "clan"
004193ED  |. 50             PUSH EAX
004193EE  |. E8 ED960A00    CALL MatchSer.004C2AE0
004193F3  |. 83C4 08        ADD ESP,8
004193F6  |. 85C0           TEST EAX,EAX
004193F8  |. 75 0C          JNZ SHORT MatchSer.00419406
004193FA  |. C786 CC010000 >MOV DWORD PTR DS:[ESI+1CC],1
00419404  |. EB 6D          JMP SHORT MatchSer.00419473
00419406  |> 8D8C24 4801000>LEA ECX,DWORD PTR SS:[ESP+148]
0041940D  |. 68 F0415100    PUSH MatchSer.005141F0                   ;  ASCII "ladder"
00419412  |. 51             PUSH ECX
00419413  |. E8 C8960A00    CALL MatchSer.004C2AE0
00419418  |. 83C4 08        ADD ESP,8
0041941B  |. 85C0           TEST EAX,EAX
0041941D  |. 75 0C          JNZ SHORT MatchSer.0041942B
0041941F  |. C786 CC010000 >MOV DWORD PTR DS:[ESI+1CC],2
00419429  |. EB 48          JMP SHORT MatchSer.00419473
0041942B  |> 8D9424 4801000>LEA EDX,DWORD PTR SS:[ESP+148]
00419432  |. 68 E8415100    PUSH MatchSer.005141E8                   ;  ASCII "event"
00419437  |. 52             PUSH EDX
00419438  |. E8 A3960A00    CALL MatchSer.004C2AE0
0041943D  |. 83C4 08        ADD ESP,8
00419440  |. 85C0           TEST EAX,EAX
00419442  |. 75 0C          JNZ SHORT MatchSer.00419450
00419444  |. C786 CC010000 >MOV DWORD PTR DS:[ESI+1CC],3
0041944E  |. EB 23          JMP SHORT MatchSer.00419473
00419450  |> 8D8424 4801000>LEA EAX,DWORD PTR SS:[ESP+148]
00419457  |. 68 E0415100    PUSH MatchSer.005141E0                   ;  ASCII "test"
0041945C  |. 50             PUSH EAX
0041945D  |. E8 7E960A00    CALL MatchSer.004C2AE0
00419462  |. 83C4 08        ADD ESP,8
00419465  |. 85C0           TEST EAX,EAX
00419467  |. 75 0A          JNZ SHORT MatchSer.00419473
00419469  |. C786 CC010000 >MOV DWORD PTR DS:[ESI+1CC],4

Not sure what it means, but is it possible to call other functions along with the already pushed functions, if so wouldn't it be able to call Clan with Test(Quest) mode... :blink:

I'm complete noob in ASM, i'm just asking if it's possible.

That's the enumeration check.

pspboy2008 · Aug 3, 2009

Theoretical said:
That's the enumeration check.

Comman sence tells me that your saying the code I posted was just for checking what is in server.ini....
Sorry, I was just stating the idea, not that this code was actually what i was stating it as.

Nobody666 · Aug 3, 2009

Just compare the clan and quest match server. See what calls they make differently, then try and make it call both functions that they use singly.

Have no idea if thats what you do, nor do I have access to a match server right now so I can't test.

pspboy2008 · Aug 3, 2009

Nobody666 said:
Just compare the clan and quest match server. See what calls they make differently, then try and make it call both functions that they use singly.

Have no idea if thats what you do, nor do I have access to a match server right now so I can't test.

I have no knowledge of ASM.. only followed one tut on unmasking chat in duels...
So I really don't knoww what your talking about.

Solaire · Aug 3, 2009

It's a start, that function stores the type into a variable. That variable is used later on to check the type and disable functions if the mode is Quest, etc.

dacharles · Aug 3, 2009

ye i am looking for that variables xd

i am NULL on asm but i will try xd

ThePhailure772 · Aug 3, 2009

Wizkidje said:
It's a start, that function stores the type into a variable. That variable is used later on to check the type and disable functions if the mode is Quest, etc.

It sets an enumeration.

Wucas · Aug 3, 2009

Hint:

Conditional Jump

&

CALL 00419D60

pspboy2008 · Aug 4, 2009

BetrayedAcheron said:
Hint:

Conditional Jump

&

CALL 00419D60

I'm clueless

Wucas · Aug 4, 2009

i released it earlier psp boy, check the release section =P

[Theory] Clan + Quest on Same Server.

Newbie Spellweaver

Experienced Elementalist

Newbie Spellweaver

Experienced Elementalist

Newbie Spellweaver

Experienced Elementalist

Junior Spellweaver

Elite Diviner

Newbie Spellweaver

Mako is insane.

Newbie Spellweaver

(｡◕‿‿◕｡)

Newbie Spellweaver

Praise the Sun!

Elite Diviner

Mako is insane.

2D > 3D

Newbie Spellweaver

2D > 3D

RaGEZONE Sponsor

About RaGEZONE

Forum Statistics

RaGEZONE Partners