[Release]Changing Blacksmith maximum chance

zargon05 · 05/06/2011, 18:14

I will show how to change the maximum link chance of the blacksmith from the standard 50% to 100%. To do this you will need to edit ps_game.exe on server side and game.exe on client side.
The actual process is controlled by ps_game but even so the edits in the client is required for the actual % to show up.

Let us start with ps_game:
1. Open ps_Game.exe in ollydbg
2.
Go to offset 004616FA
Change the 32 to 64
Go to offset 004616FF
Change the 32 to 64

Save your changes.

Now let's modify the client game.exe
1. Open game.exe in ollydbg
2.
Go to offset 004955DA
Change the 32 to 64
Go to offset 004955E9
Change the 32 to 64

3.
Go to offset 00493713
Change the 32 to 64
Go to offset 00493718
Change the 32 to 64

Save your changes.

This was done using a EP5 game.exe so the offsets will change for a EP4 game.exe. I tested this out and it works but not very rigorously.

lilprohacker · 05/06/2011, 19:18

Nice work, and I like the tutorial, it gives enough info for people to figure it out themselves but doesn't make it too easy to where people are able to do it without understanding it.

mint13 · 05/07/2011, 03:06

Quote:

Originally Posted by castor4878

The distribution seems kind of standard to me.

400 runs not that much and variance is a *****.

It looks like over the long term we have pretty close to 17% success, no ?

Edit:
Oh and nice stuff zargon

kheyo · 05/07/2011, 07:33

For EP4 PS_Game the addresses are the very same. For the Game.exe the addresses I believe (after searching for the same code) are
005A656B
005A6570
00493273
00493278

I havent tested this yet, my at home sandbox server to test stuff in had to be reformatted

zargon05 · 05/07/2011, 08:08

ps_game that is used does not have an EP. It only differs in game.exe

kheyo · 05/07/2011, 08:11

ok my mistake. I figured there might be more difference than level between ep5 and ep4. However the addresses i believe for ep4 game.exe are the ones i posted

Cause those are the only address' i find with the EDI32 & ESI32 codes

zargon05 · 05/07/2011, 10:27

It doesn't have to have the same expression as

Code:

CMP ESI,32

in the EP4 game.exe since the registers used are not always the same in different versions. I will try to find the addresses in EP4.

kheyo · 05/07/2011, 12:36

Hmm interesting. The search I dd was for the MOV EDI,32 and CMP EDI,32 and the same with ESI. I gave it a shot if im wrong im wrong

mint13 · 05/07/2011, 15:57

Quote:

Originally Posted by castor4878

"standard" ... could you define ?

i didn't trace a frequency rate curve but data are visually too dispersed.

What I mean by standard is that distribution is excepted.

If I flip a coin 100 times I would not be shocked if it came 55 heads 45 tails.

Quote:

he/she more expects to not waste 50 OP to link 3 or 4 lapis

We should never expected more then 10/50 @ 20%. 2-4 out of 50 sucks ... but it happens. That has to be close to worst case scenario.

That said your risk of ruin is very high starting out with 50 tries and only having 20% equity ..

Ive not do done the actually math atm

I am getting ready to go to work but I will explain better w/ numbers tonight.

I will bet my house that I can flip 30 heads in a row if you give me enough flips. ...

edit :
Do you have and can share the raw data from your graph ?

[GM]Solo · 06/04/2011, 10:06

Not 100% Sure but I think I found the EP4 Game.exe Offsets...

005A656B
005A6570
0048470A
00484722

[GM]Solo · 06/04/2011, 10:57

didnt work =/

iykeusa · 07/08/2011, 21:22

argh i've tried everything, sorry for the noob question. How do you save changes? Thanks in advance

Bаne · 07/08/2011, 21:30

Quote:

Originally Posted by iykeusa

argh i've tried everything, sorry for the noob question. How do you save changes? Thanks in advance

In hex? ctr+S

iykeusa · 07/09/2011, 02:58

nar in ollydbg it doesnt work like dat, but thanks anyway

Bаne · 07/09/2011, 11:45

Oh, in olly do this, copy executable* > right click > save file.