OllyDBG & CO

dondale8 · 11/26/2009, 14:53

Quote:
Originally Posted by trash
ctrl+f
Code:
CMP EAX,DWORD PTR DS:[71E454]

Thx Alot Bro..

Code:

CMP EAX,DWORD PTR DS:[[COLOR=Red]71E454[/COLOR]]

But This address Will change every patch..?Right..?
I wanna Know Other Thing To search for..?

trash · 11/27/2009, 09:29

Quote:
Originally Posted by dondale8
Thx Alot Bro..
Code:
CMP EAX,DWORD PTR DS:[[COLOR=Red]71E454[/COLOR]]
But This address Will change every patch..?Right..?
I wanna Know Other Thing To search for..?

the address may change but the [71E468] shouldnt
so searching for what i said will be fine.
Hawt said..

Quote:

After that, the result is compared with a fixed value ([71E468]) which is 180000 milliseconds (3 minutes).

~~IAmHawtness~~ · 11/27/2009, 10:13

Quote:

Originally Posted by trash

the address may change but the [71E468] shouldnt
so searching for what i said will be fine.
Hawt said..

It might change when a new .exe is released

trash · 11/28/2009, 10:35

Quote:

Originally Posted by IAmHawtness

It might change when a new .exe is released

meh dunno what world i was in when making that responce.

Ooook then with olly as active window and character in the away state
he could find any

Code:

CALL <JMP.&WINMM.timeGetTime>

then right click it and find reference to call destination.
right click and set a breakpoint on every command.
keep F2 F9 ing until co settles down and the breakpoints stop being triggered.
after a few mins when sure all the auto triggered breakpoints are unset.
mouse over co screen and that should bring you to...

Code:

00550047  |.  75 36         JNZ SHORT Conquer.0055007F
00550049  |.  E8 36660A00   CALL <JMP.&WINMM.timeGetTime>  <<---here
0055004E  |.  2B86 1C0C0000 SUB EAX,DWORD PTR DS:[ESI+C1C]
00550054  |.  3B05 54E47100 CMP EAX,DWORD PTR DS:[71E454]
0055005A  |.  72 23         JB SHORT Conquer.0055007F

well thats one way im sure theres better ones

dondale8 · 11/28/2009, 17:27

I'm On Win7-64x....
When Open Conquer in OllyDBG(ver 1.0.10) >>> All referenced text strings
found error

Wanna solve this prolem...Could any one help me...?

bboyecko · 11/28/2009, 18:41

Quote:

Originally Posted by dondale8

I'm On Win7-64x....
When Open Conquer in OllyDBG(ver 1.0.10) >>> All referenced text strings
found error

Wanna solve this prolem...Could any one help me...?

that is because you're running a 64bit os.

dondale8 · 11/28/2009, 18:54

Quote:

Originally Posted by bboyecko

that is because you're running a 64bit os.

I Used 64Bit Coz That make My Pc Work Very Good Than 32Bit..
So What The Solve Now..?

hippie · 11/28/2009, 23:54

how do u make tab work on all maps

.Guru · 11/29/2009, 00:08

what about bypassing itemlock? im sure its in conquer.exe

trash · 11/29/2009, 10:55

Quote:

Originally Posted by hippie

how do u make tab work on all maps

as mentioned a few pages back

hondaciviceg · 11/29/2009, 18:15

Quote:

Originally Posted by dondale8

I Used 64Bit Coz That make My Pc Work Very Good Than 32Bit..
So What The Solve Now..?

cause you even edit with ollydgb in 64bit windows sytems because i got windows xp 64bit running 8 gb ram i cant do any edits on it i have to use vmware with windows xp 32bit to edit

hippie · 11/29/2009, 19:55

Quote:

Originally Posted by trash

as mentioned a few pages back

thxns trash

dondale8 · 11/29/2009, 20:07

Quote:

Originally Posted by hondaciviceg

cause you even edit with ollydgb in 64bit windows sytems because i got windows xp 64bit running 8 gb ram i cant do any edits on it i have to use vmware with windows xp 32bit to edit

Me Too But with 6 gb ram ... And To make any edits i have to be on Xp mode...
Can u give me Vmware..?

hondaciviceg · 11/29/2009, 22:47

Quote:

Originally Posted by dondale8

Me Too But with 6 gb ram ... And To make any edits i have to be on Xp mode...
Can u give me Vmware..?

is it even allowed to post softwares here cause vmware has to be cracked

zhalyn · 11/30/2009, 05:35

Quote:
Originally Posted by IAmHawtness
I heard that GW Wall jump was fixed or something. It's not:

Find this piece of code inside Conquer.exe
Code:
004E3CB5   > 83F8 6C        CMP EAX,6C
004E3CB8   . 0F8F A1020000  JG Conquer.004E3F5F
004E3CBE   . 0F84 AC010000  JE Conquer.004E3E70
Change it into:
Code:
004E3CB5   > 83F8 6C        CMP EAX,6C
004E3CB8   . 0F8F A1020000  JG Conquer.004E3F5F
004E3CBE   . 0F84 AC010000  JE Conquer.[SIZE="4"][B]004E3CA5[/B][/SIZE]
And of course, JMP the check:
Code:
004C60FA     75 1E          JNZ SHORT Conquer.004C611A
So it looks like this:
Code:
004C60FA     75 1E          [SIZE="4"][B]JMP[/B][/SIZE] SHORT Conquer.004C611A

how can or where can i find this code inside the conquer.exe?
i want to make a walljump in my own conquer.exe for private server.
patch 5065