2013 Ragexe Area

Right it knows it has a cart. Vending skill can be used, but not being able to open cart inventory the skill is useless

But the map type you posted looks interesting

 
Last edited by a moderator:
//Map types 21 - 24 not used.
//Map types 26 - 28 remains opens for future types.

Map type 29 and 30

Maybe we have to try with all this map type on and off

 
Yeah if this is all we have to go on so far

 
GO ahead ppl, i always need the enforce old login system 
default_ph34r.png


 
And the korean text that gets spit out translate to:Quote

이지역은 카트이용이 금지 되어 있습니다

This region are prohibited from using the cart.

So is there a mapflag we're missing O.o?
Click to expand...
hmmm..let me try to investigate in kRo when will this message comes out..

default_ani_meow.gif


 
Last edited by a moderator:
no luck..I tried every map from dungeon, pk, gvg, town, water and etc..but I can make the message show by spamming it in char select I mean before all loads after char select try to spam alt+w the message shows..so it seems that server send some thing that makes the cart inventory to show...

default_ani_meow.gif


 
hmm thats interesting. Thanks for testin that out

 
same, no idea what's causing that

EDIT: Tried an undiffed w/ skip packet obfus, and I don't error on clicking on NPCs. Could be one of the other diffs that's causing it.

 
Last edited by a moderator:
most likely, i can do experiementations tomorrow morning if no one got to it yet

 
It not works but we have to do smthing like this >.<

I found the first hex to change :

80 3D 74 8D C0 00 00 74 13 C6 05 74 8D C0 00 00 C7 43 0C 04 00 00 00to6A 03 B9 C8 65 A6 00 E8 AB B1 DF FF 90 90 90 90 90 90 90 90 90 90 90 
Assembly code :

00802119 . 803D 748DC000 >CMP BYTE PTR DS:[C08D74],000802120 . 74 13 JE SHORT 2013-03-.0080213500802122 . C605 748DC000 >MOV BYTE PTR DS:[C08D74],000802129 . C743 0C 040000>MOV DWORD PTR DS:[EBX+C],4
Should looks like something like this assembly code

PUSH 3MOV ECX,2013-03-.00A665C8 (MAYBE WRONG 00A665C8 if it is,what is the adress)CALL 2013-03-.00568960 (SAME)NOPNOPNOPNOP....NOP (to fill the old command)


The 2nd

0F 84 23 01 00 00 83 F8 12 0F 84 1A 01 00 00to90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
Assembly code

Code: 
00802A20   . 0F84 23010000  JE 2013-03-.00802B4900802A26   . 83F8 12        CMP EAX,1200802A29   . 0F84 1A010000  JE 2013-03-.00802B49
 
Last edited by a moderator:
I found the first part on OllyDb, i'm trying to figure out where to find the call adress >.<

 
hmm yeah, we'll close, good work so far =)

 
Judas, can you try with my hex modification ?

Maybe my 2nd is not good at all but the 1st should be good, we clearly see that it's not exit the client when you click on button but after few moment

Edit : Argh, it don't crash anymore but still don't work, i think i have the wrong CALL and MOV adress for the 1st modification >.<

 
Last edited by a moderator:
You must log in or register to reply here.
Back
Top