Register for your free account! | Forgot your password?

Go Back   elitepvpers > MMORPGs > Perfect World
You last visited: Today at 17:46

  • Please register to post and access all features, it's quick, easy and FREE!

Advertisement



Guide: Debug console

Discussion on Guide: Debug console within the Perfect World forum part of the MMORPGs category.

Reply
 
Old   #1
 
plixbugmenot's Avatar
 
elite*gold: 0
Join Date: Dec 2008
Posts: 89
Received Thanks: 56
Cool Guide: Debug console [updated for 1.4.0]

In this guide I wil tell you how to get the debug console to work in 2 ways.

Updated for pw international 1.4.0

First and easy way:
Launch the game with console:1
you can make a batchscript for that

1 create an empty .txt file in the folder where your elementclient.exe is located
2 copy pase the following code in it:
(this also bypasses the launcher)
Code:
elementclient.exe game:cpw console:1
3 rename your file to UltimatehaxxorLauncher.bat
4 run the bat file
5 press Shift+~ to see the console

see console commands at the end of this post
--------------------------------------

Second and harder way
(but more awesome way, only for the more advanced user though)
1 You will need a dissasembler(I used ollydbg)
(if you need some basic ollydbg skills, try this topic: )

2 Search for the string "console:"

3 you will see this code:
Code:
0043BB70      PUSH perfectw.008F3794  ;  UNICODE "console:"
0043BB75      PUSH ESI
0043BB76      CALL EDI
0043BB78      ADD ESP,8
4 Replace that code with this
Code:
0043BB70      XOR EAX,EAX			;sets EAX to 0
0043BB72      INC EAX				;sets EAX to 1
0043BB73      MOV DWORD PTR ES:[94D450],EAX 	;puts EAX into 94D450
0043BB79      JMP SHORT perfectw.0043BB8F 	;jumps to the end of the function
yes, it just checks if 94D450 * is 1 (true) so this patch sets it always to true

5 make the executable (if you need help with this, you shouldn't be doing this)

6 run the game and press Shift+~

*Note: This addres changes from version to version. You get it from the next lines:

Code:
0043BB7F  |.  68 50D49400   PUSH perfectw.0094D450  ; HERE IT IS!!
0043BB84  |.  68 7C378F00   PUSH perfectw.008F377C                   ;  UNICODE "console:%d"
0043BB89  |.  50            PUSH EAX
0043BB8A  |.  FFD3          CALL EBX
---------------------------------

console commands:
Code:
// ========== Debug commands ==========
"d_cameramode"
"d_boundbox"
"d_rtdebug"
"d_npcid"
"d_runspeed"
"d_goto"
"d_fly"
"d_c2scmd"
"d_viewradius"
"d_relogin"
"d_skill"
"d_render_water"
"d_render_grass"
"d_render_forest"
"d_render_shadow"
"d_render_outline"
"d_turnaround"
"d_testdist"
"d_gfx"
"d_showpos"
"d_trnlayer"
"d_a3dstat"
"d_gamestat"
"d_treelod"
"d_fps"
"d_playerradius"
"d_showid"
"d_skipframe"
"d_modelupdate"
"d_minidump"
"d_settimeofday"
"d_getservertime"
"d_task"
"d_mipmapbias"
"d_trncull"
"d_gscmd"
"d_delcmd"
plixbugmenot is offline  
Thanks
9 Users
Old 12/11/2008, 23:48   #2
 
elite*gold: 0
Join Date: Mar 2008
Posts: 54
Received Thanks: 9
Hi dude....

Well work fine for mi, but how i can use console commands?
SEVENS is offline  
Old 12/12/2008, 03:58   #3
 
elite*gold: 0
Join Date: Jun 2008
Posts: 292
Received Thanks: 36
Quote:
GM console commands:
gm_kickout_role
gm_kickout_user
gm_list_user
gm_online_num
gm_restart_sev
gm_shutup_role
gm_shutup_user
gm_moveto_player
gm_callin_player
gm_broadcast
gm_showid
gm_forbid_role
gm_trigger_chat
gm_generate
usless to most but heres the GM console commands, nice post, it truely works thx
GODDNESS is offline  
Thanks
1 User
Old 12/12/2008, 13:27   #4
 
plixbugmenot's Avatar
 
elite*gold: 0
Join Date: Dec 2008
Posts: 89
Received Thanks: 56
Quote:
Originally Posted by SEVENS View Post
Hi dude....

Well work fine for mi, but how i can use console commands?
you just type them in.
like

d_boundbox

and then enter.

it will show you the boundingboxes

or

d_rtdebug

wich shows some server messages you receive.

just try them out
plixbugmenot is offline  
Thanks
2 Users
Old 12/12/2008, 13:44   #5
 
elite*gold: 0
Join Date: Nov 2008
Posts: 7
Received Thanks: 1
sorry for my newbie question can you tell me it's function, i already tried but nothing happen.
i tried "d_fly, d_task, d_runspeed" may be you can give more information. thanks b4
santosa99 is offline  
Old 12/12/2008, 16:49   #6
 
elite*gold: 0
Join Date: Mar 2008
Posts: 54
Received Thanks: 9
Quote:
Originally Posted by plixbugmenot View Post
you just type them in.
like

d_boundbox

and then enter.

it will show you the boundingboxes

or

d_rtdebug

wich shows some server messages you receive.

just try them out


Ok...
I tried this form be all right, worked.. but this commands "d_fly, d_task, d_runspeed" dont working, or i puting wrong commands? can u give example for use this commands?

Ty so much..
SEVENS is offline  
Old 12/12/2008, 19:30   #7
 
garnoo's Avatar
 
elite*gold: 0
Join Date: Mar 2008
Posts: 204
Received Thanks: 177
try to use google -.-

etc. type 'perfect world dev' in google and you will see nice forum with info...

use brain - use google
garnoo is offline  
Old 12/12/2008, 21:17   #8
 
elite*gold: 0
Join Date: Mar 2008
Posts: 54
Received Thanks: 9
Quote:
Originally Posted by garnoo View Post
try to use google -.-

etc. type 'perfect world dev' in google and you will see nice forum with info...

use brain - use google

hey dude im ask any resp to you? if you dont come help dont disturb plz..

cya
SEVENS is offline  
Old 12/12/2008, 21:44   #9
 
plixbugmenot's Avatar
 
elite*gold: 0
Join Date: Dec 2008
Posts: 89
Received Thanks: 56
"d_fly, d_task, d_runspeed"

haven't got them to work either. probably server side check

nothing really usefull found yet, but let me know when you do find something
plixbugmenot is offline  
Old 12/12/2008, 22:17   #10
 
elite*gold: 0
Join Date: Jun 2008
Posts: 292
Received Thanks: 36
Here, i've done ALL the work for you, here's the link:
GODDNESS is offline  
Old 12/13/2008, 00:49   #11
 
garnoo's Avatar
 
elite*gold: 0
Join Date: Mar 2008
Posts: 204
Received Thanks: 177
Quote:
Originally Posted by SEVENS View Post
hey dude im ask any resp to you? if you dont come help dont disturb plz..

cya
you ask a stiupid questions, you are dumb or you cant use search engines, we dont need leechers that cant think here

and yes, cya
garnoo is offline  
Old 12/21/2008, 08:17   #12
 
elite*gold: 0
Join Date: Aug 2008
Posts: 23
Received Thanks: 2
I've tried using Olly but don't work, so I need advice (maybe I'm doing it wrong). So to the people who success using Olly, pls. advice/help.
Thanks..

This is what I do:
Search for "console:"


Found the lines (original)


Then I modified it to


Then I make the exe but when I press [Shift] + [~], it don't work. So I think I must be doing it the wrong way
ColdFire_ is offline  
Old 12/21/2008, 13:58   #13
 
plixbugmenot's Avatar
 
elite*gold: 0
Join Date: Dec 2008
Posts: 89
Received Thanks: 56
You have overwritten one line too much, since you left Test eax,eax in there. you need to overwrite that

also make sure your keyboard layout is QWERTY or it wont work (you can change keyboard layout in the windows control panel)

I will just post the whole function

ORIGINAL CODE:

Code:
0043B740   /$  53                PUSH EBX
0043B741   |.  56                PUSH ESI
0043B742   |.  57                PUSH EDI                                                   ;  ntdll.7C910208
0043B743   |.  E8 88000000       CALL ecDMCMul.0043B7D0
0043B748   |.  8B7424 10         MOV ESI,DWORD PTR SS:[ESP+10]
0043B74C   |.  8B3D 68F48600     MOV EDI,DWORD PTR DS:[<&MSVCRT.wcsstr>]                    ;  MSVCRT.wcsstr
0043B752   |.  68 68178E00       PUSH ecDMCMul.008E1768                                     ; /wstr2 = "rendersize:"
0043B757   |.  56                PUSH ESI                                                   ; |wstr1 = FFFFFFFF ???
0043B758   |.  FFD7              CALL EDI                                                   ; \wcsstr
0043B75A   |.  8B1D 6CF48600     MOV EBX,DWORD PTR DS:[<&MSVCRT.swscanf>]                   ;  MSVCRT.swscanf
0043B760   |.  83C4 08           ADD ESP,8
0043B763   |.  85C0              TEST EAX,EAX
0043B765   |.  74 15             JE SHORT ecDMCMul.0043B77C
0043B767   |.  68 689D9300       PUSH ecDMCMul.00939D68
0043B76C   |.  68 649D9300       PUSH ecDMCMul.00939D64
0043B771   |.  68 44178E00       PUSH ecDMCMul.008E1744                                     ; |format = "rendersize:%dx%d"
0043B776   |.  50                PUSH EAX                                                   ; |wstr = NULL
0043B777   |.  FFD3              CALL EBX                                                   ; \swscanf
0043B779   |.  83C4 10           ADD ESP,10
0043B77C   |>  68 3C178E00       PUSH ecDMCMul.008E173C                                     ;  UNICODE "ip:"
0043B781   |.  56                PUSH ESI
0043B782   |.  FFD7              CALL EDI                                                   ;  ntdll.7C910208
0043B784   |.  83C4 08           ADD ESP,8
0043B787   |.  85C0              TEST EAX,EAX
0043B789   |.  74 15             JE SHORT ecDMCMul.0043B7A0
0043B78B   |.  68 6C9D9300       PUSH ecDMCMul.00939D6C
0043B790   |.  68 6C9F9300       PUSH ecDMCMul.00939F6C
0043B795   |.  68 28178E00       PUSH ecDMCMul.008E1728                                     ;  UNICODE "ip:%d:%s"
0043B79A   |.  50                PUSH EAX
0043B79B   |.  FFD3              CALL EBX
0043B79D   |.  83C4 10           ADD ESP,10
0043B7A0       68 14178E00       PUSH ecDMCMul.008E1714                                     ;  UNICODE "console:"
0043B7A5       56                PUSH ESI
0043B7A6       FFD7              CALL EDI                                                   ;  ntdll.7C910208
0043B7A8       83C4 08           ADD ESP,8
0043B7AB       85C0              TEST EAX,EAX
0043B7AD       74 10             JE SHORT ecDMCMul.0043B7BF
0043B7AF   |.  68 709F9300       PUSH ecDMCMul.00939F70
0043B7B4   |.  68 FC168E00       PUSH ecDMCMul.008E16FC                                     ;  UNICODE "console:%d"
0043B7B9   |.  50                PUSH EAX
0043B7BA   |.  FFD3              CALL EBX
0043B7BC   |.  83C4 0C           ADD ESP,0C
0043B7BF   |>  5F                POP EDI                                                    ;  kernel32.7C817067
0043B7C0   |.  5E                POP ESI                                                    ;  kernel32.7C817067
0043B7C1   |.  5B                POP EBX                                                    ;  kernel32.7C817067
0043B7C2   \.  C3                RETN
PATCHED:

Code:
0043B740    $  53                PUSH EBX
0043B741    .  56                PUSH ESI
0043B742    .  57                PUSH EDI                                                   ;  ntdll.7C910208
0043B743    .  E8 88000000       CALL ecDMCMul.0043B7D0
0043B748    .  8B7424 10         MOV ESI,DWORD PTR SS:[ESP+10]
0043B74C    .  8B3D 68F48600     MOV EDI,DWORD PTR DS:[<&MSVCRT.wcsstr>]                    ;  MSVCRT.wcsstr
0043B752    .  68 68178E00       PUSH ecDMCMul.008E1768                                     ; /wstr2 = "rendersize:"
0043B757    .  56                PUSH ESI                                                   ; |wstr1 = FFFFFFFF ???
0043B758    .  FFD7              CALL EDI                                                   ; \wcsstr
0043B75A    .  8B1D 6CF48600     MOV EBX,DWORD PTR DS:[<&MSVCRT.swscanf>]                   ;  MSVCRT.swscanf
0043B760    .  83C4 08           ADD ESP,8
0043B763    .  85C0              TEST EAX,EAX
0043B765    .  74 15             JE SHORT ecDMCMul.0043B77C
0043B767    .  68 689D9300       PUSH ecDMCMul.00939D68
0043B76C    .  68 649D9300       PUSH ecDMCMul.00939D64
0043B771    .  68 44178E00       PUSH ecDMCMul.008E1744                                     ; |format = "rendersize:%dx%d"
0043B776    .  50                PUSH EAX                                                   ; |wstr = NULL
0043B777    .  FFD3              CALL EBX                                                   ; \swscanf
0043B779    .  83C4 10           ADD ESP,10
0043B77C    >  68 3C178E00       PUSH ecDMCMul.008E173C                                     ;  UNICODE "ip:"
0043B781    .  56                PUSH ESI
0043B782    .  FFD7              CALL EDI                                                   ;  ntdll.7C910208
0043B784    .  83C4 08           ADD ESP,8
0043B787    .  85C0              TEST EAX,EAX
0043B789    .  74 15             JE SHORT ecDMCMul.0043B7A0
0043B78B    .  68 6C9D9300       PUSH ecDMCMul.00939D6C
0043B790    .  68 6C9F9300       PUSH ecDMCMul.00939F6C
0043B795    .  68 28178E00       PUSH ecDMCMul.008E1728                                     ;  UNICODE "ip:%d:%s"
0043B79A    .  50                PUSH EAX
0043B79B    .  FFD3              CALL EBX
0043B79D    .  83C4 10           ADD ESP,10
0043B7A0    >  26:C705 709F9300 >MOV DWORD PTR ES:[939F70],1
0043B7AB    .  EB 12             JMP SHORT ecDMCMul.0043B7BF
0043B7AD    .  74 10             JE SHORT ecDMCMul.0043B7BF
0043B7AF    .  68 709F9300       PUSH ecDMCMul.00939F70
0043B7B4    .  68 FC168E00       PUSH ecDMCMul.008E16FC                                     ;  UNICODE "console:%d"
0043B7B9    .  50                PUSH EAX
0043B7BA    .  FFD3              CALL EBX
0043B7BC    .  83C4 0C           ADD ESP,0C
0043B7BF    >  5F                POP EDI                                                    ;  kernel32.7C817067
0043B7C0    .  5E                POP ESI                                                    ;  kernel32.7C817067
0043B7C1    .  5B                POP EBX                                                    ;  kernel32.7C817067
0043B7C2    .  C3                RETN
plixbugmenot is offline  
Thanks
1 User
Old 12/21/2008, 16:15   #14
 
elite*gold: 0
Join Date: Aug 2008
Posts: 23
Received Thanks: 2
Thanks for the reply Now I understand ^^
ColdFire_ is offline  
Old 12/27/2008, 11:10   #15
 
elite*gold: 0
Join Date: Aug 2008
Posts: 23
Received Thanks: 2
I followed your instructions but it won't work (The one using batch file console:1 works). Include with this is my exe. Can you check what is going wrong? This is a MY-EN ver13 1.3.1 client.

The lines I modified (should be correct):


My EXE file:

Pls. guide (I'm interested in learning this.. , thanks
ColdFire_ is offline  
Reply


Similar Threads Similar Threads
guide: debug pwi, find function addresses and offsets, write a bot(c++ code included)
09/04/2022 - PW Hacks, Bots, Cheats, Exploits - 123 Replies
hi, let's start right away. what you can learn: - trace and call ingame-functions like attack, cast spell, pick up, moveto, ... - traverse object lists like items, mobs, players - read ingame structures (class objects) and how they play together - write your own fully client-side bot that doesnt need to simulate mouse/keyboard input and doesnt need to read pixels
[GUIDE] How to use the GM console
05/24/2015 - SRO Guides & Templates - 13 Replies
YouTube - GM console
[Guide] How to activate Free Cam and GM Console
11/19/2013 - SRO Hacks, Bots, Cheats & Exploits - 16 Replies
Okey, so alot of people asked me for it, so I did a Video about it. Thank me if it helepd you ;). YouTube - Silkroad - Freecam & GM Console
[Guide] Hooking the Console Input and Output
11/19/2011 - SRO Coding Corner - 24 Replies
My next guide is more of a boring one, but it is necessary to show the concepts now since I will be using them in an upcoming guide (assuming I can get it done before any client updates)! There are no images to show really and I don't expect anyone to really spend a lot of time on this one now, but it will be a good reference for later on when I use the concepts. Just remember all of the guides up to now are setting the stage for future guides (barring anything that might prevent me from...
Debug Console (for pwmy 1.3.1)
12/03/2009 - Perfect World - 5 Replies
Hello all, I'm starting to run my own pw pserver and I found out that I can't open the debug console even if I have GM. I'd like to modify the 1.3.1 elementclient.exe to enable the debug mode console to issue commands to help with events. Is this possible? ~nademasta



All times are GMT +1. The time now is 17:46.


Powered by vBulletin®
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Support | Contact Us | FAQ | Advertising | Privacy Policy | Terms of Service | Abuse
Copyright ©2025 elitepvpers All Rights Reserved.