OllyDBG & CO

Anyone can tell us what we need to edit to bypass the free item check. I tried everything but I didn't managed to stop it. When I try to compose the client crashes...
I looked into fobos multiclient but the thing is extremely hidden. There is nothing edited, I checked almost all lines lines up and down but nothing obvious. (I spent almost my entire day looking in it) I think it's something related to this but I don't have a clue about it.

[Only registered and activated users can see links. Click Here To Register...]

What are those Case things ?
Fobos I want the code because I checked your multiclient and is infected.

im going to mess around with this later and the tutorial is really nice +k :D

Thx alot Bro for this Guide...
But Can u Post New and Clear screenshots..And The step of Multi acc Can be more clear...(about what i chage or write..)
To Be ur topic More Doers...
Plz Bro..

Quote:

Originally Posted by IsTI37 Anyone can tell us what we need to edit to bypass the free item check. I tried everything but I didn't managed to stop it. When I try to compose the client crashes... I looked into fobos multiclient but the thing is extremely hidden. There is nothing edited, I checked almost all lines lines up and down but nothing obvious. (I spent almost my entire day looking in it) I think it's something related to this but I don't have a clue about it. What are those Case things ? Fobos I want the code because I checked your multiclient and is infected.

nice find.
i have been looking at fobos multiclient for few hours and nearly fall asleep :D
fobos client still can be use for the current patch tho.

Use a program like Hex Workshop to compare the 2 files and then use something like CFF Explorer's address converter to convert the different file offsets in hex workshop to virtual addresses so you can view the changes easily in olly.

Quote:

Originally Posted by high6 Use a program like Hex Workshop to compare the 2 files and then use something like CFF Explorer's address converter to convert the different file offsets in hex workshop to virtual addresses so you can view the changes easily in olly.

You don't have a guide about comparing 2 files ? How I can search the changed lines with olly ? It not offers a hex search option. The expressions in olly are virtual adresses ?

Quote:

Originally Posted by IsTI37 You don't have a guide about comparing 2 files ? How I can search the changed lines with olly ? It not offers a hex search option. The expressions in olly are virtual adresses ?

Google for Hex workshop >> download it .... Google CFF Explorer converter >> Download it.

Then install em both.

Open Hex workshop > Tools > Comapre >Compare Files (Ctrl+K) now it ll buffer da comparin .

sighs what a shame fobos really didnt think you would add that to your multi, another exploit goes to waste :|

Quote:

Originally Posted by trash sighs what a shame fobos really didnt think you would add that to your multi, another exploit goes to waste :|

tuesday emergency server maintanance on march 31st wasted this exploit :(

fobos didn't want anyone to had them in their mc to begin w/ :|

Quote:

Originally Posted by dondale8 Hey... i found problem when make Conquer run directly 1. I dont know what i change... 2. How to change it..? And change it for what...? [Only registered and activated users can see links. Click Here To Register...] Plz any one help fast in clear steps..

NOP the JL above blacknull, and change JE below blacknull to JMP

Quote:

Originally Posted by leavemealone NOP the JL above blacknull, and change JE below blacknull to JMP

Quote:

Originally Posted by Maikar In the client push 2D3F points to the error "Free items cannot be used to make socket on talisman!". If we can bypass this error, we can use the free items.

Quote:

Originally Posted by _fobos_ Hmm, sounds interesting. Have you tried tracing it back to where it gets determined if its a free item or not?

Hello guys, I've been trying to do this just for the sake of learning reverse engineering, so far I´ve worked on smaller projects however, never had the chance to use Olly since Its the first time I´m messing on 80x86,

So far what I´ve been trying to do is finding out a way to trace back, what I´ve found is once you stop on 0x00491C18, and start moving back you get to 0x00491C0E, there Olly tells you it corresponds to a jump from 0x004916E9, it is a call instruction tho, so it would mean once it reaches this point it goes to the indicated place right?,

so my question is... should I go back to 0x004916E9 and start checking? and if so... is there anyway to know what does that number 99-519 mean? I think it must be related with the item quality, possibly on itemtype.dat am I right?
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]

Quote:

Originally Posted by IAmHawtness - First I skipped the "100022=You can`t jump that high!" check ... -...then I started checking all the different procedures that accessed the address when I tried to jump GW gate and was pulled back. By tracing back, I finally found the check that pulls you down from the GW wall and I skipped it :).

is it possible to do it on hot? I mean while executing the program?

I try and got success in all modifications least open conquer.exe direct, im trying to modify a conquer.exe 5065 version.

Im try to modify it with and without NOP, and value 7C 18 is modified too after i change the value, this i don't know because i tried several times and always got the error of the picture below, someone has a possible solution?

Images:

[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]

Quote:

Originally Posted by akizz I try and got success in all modifications least open conquer.exe direct, im trying to modify a conquer.exe 5065 version. Im try to modify it with and without NOP, and value 7C 18 is modified too after i change the value, this i don't know because i tried several times and always got the error of the picture below, someone has a possible solution?

Actually all you need to do is :

1. Find the Push 273F
2. Find the JL SHORT instruction on 00482B80
3. Change the address of the jump to the one on the jump on 00482B98

as follows....

[Only registered and activated users can see links. Click Here To Register...]