Other sitesPhantasia GameBlitzkriegWoW RP ProfilerRage of Mages

HomeAbout the GameHistory
ArticlesCheatsEncyclopedia


Phantasia.nl - Rage of Mages 2

Editor HelpPicturesFiles
Hat ServersLinksForum

Menu  Register  Login

Topic: Account Creation Script


Navigation: Forums \ Rage of Mages 2


Author: James (King_APK [at] hotmail [dot] com)
Date: 20-Dec-08, 03:16:35
Sorry for the delay in responding...life has been hectic lately and I've honestly forgotten to check in :S

For the moment I haven't had a chance to build an auto patcher for the map hold (been putting it off since it is the longest of them)

ps-
hi BB
been a long time since there was any need for an APK... ^.^
 
Author: bbKing (arsnova30 [at] hotmail [dot] com)
Date: 16-Dec-08, 05:29:34
hi James
ofcourse i remember you :)
APK that would ne nice
 
Author: Albadaran (simondekker [at] hotmail [dot] com)
Date: 15-Dec-08, 19:28:20
I was looking for the script of the hold map patch here:
http://actathia.com/rom2/files/files.php
But its not there. Is there a patchfile yet, or must it be done manually (typing the list)?
 
Author: NOVA (KINGKOTA666 [at] HOTMAIL [dot] COM)
Date: 16-Sep-08, 06:21:03
OK...some feedback on the latest patches:

1. the MAP HOLD patch is friggin' brilliant. It works fantastically. Better even than I had hoped. Not only can you not hold a map anymore, the admin can set the duration of maps (in the server config file) to fractions of hours (example 0.5 hours)


2. the SPEED patch however did not work at all. We tested on two different HATs and with two different people editing the rom2server.exe file from scratch just to be sure we did not make a typo error. You are still able to reduce speed to below zero (and get 255 speed) and also reduce speed to exactly ZERO and crash the server. Shame...that one would have been nice.


So there it is.....one more rom2 game bug patched thanks to Exlend!!!

With any luck, he'll find a simple tweak or a tiny error in the speed patch that will make that one work too. And perhaps he'll find a fix for the damned SCREEN FLOOD crash as well.

Later all,
NOVA
 
Author: James (King_APK [at] hotmail [dot] com)
Date: 15-Sep-08, 02:50:03
Great! thanks for all the fixes, these should be most of them now...

btw, you mentioned something about hosting the hat from behind a router?
 
Author: NOVA (KINGKOTA666 [at] HOTMAIL [dot] COM)
Date: 15-Sep-08, 01:37:54
Excellent....thanks for these. We'll test them out and report back how they work.

We've also been able to count the number of digits in a chat message which crashes the server. The magic number is exactly 239. Any message shorter than that will not crash; any message 239 digits or longer WILL crash the server.

-- NOVA
 
Author: exc!ton (vladimir [dot] chebotarev [at] gmail [dot] com)
Date: 14-Sep-08, 21:48:39
oops. read this:
00 ED
as:
0020744C: 00 ED
 
Author: exc!ton (vladimir [dot] chebotarev [at] gmail [dot] com)
Date: 14-Sep-08, 21:47:44
this fixes hold map bug
rom2server.exe:
000F692A: 74 EB //< this allows to set map time from 1 minute (~0.02) and greater
000F887B: 6A 8B
000F887C: 00 4D
000F887D: 6A FC
000F887E: 00 C7
000F887F: 8B 81
000F8880: 45 08
000F8881: 08 02
000F8882: 50 00
000F8883: 68 00
000F8884: C3 01
000F8888: B9 E8
000F8889: F8 93
000F888A: 39 EB
000F888B: 6C 10
000F888D: E8 EB
000F888E: 28 10
000F888F: 3A 90
00207420: 00 55
00207421: 00 89
00207422: 00 E5
00207423: 00 83
00207424: 00 EC
00207425: 00 08
00207426: 00 8D
00207427: 00 4D
00207428: 00 F8
00207429: 00 E8
0020742A: 00 82
0020742B: 00 ED
0020742C: 00 E8
0020742D: 00 FF
0020742E: 00 8B
0020742F: 00 0D
00207430: 00 14
00207431: 00 DB
00207432: 00 6C
00207434: 00 51
00207435: 00 8D
00207436: 00 4D
00207437: 00 F8
00207438: 00 E8
00207439: 00 83
0020743A: 00 ED
0020743B: 00 E8
0020743C: 00 FF
0020743D: 00 85
0020743E: 00 C0
0020743F: 00 74
00207440: 00 10
00207441: 00 50
00207442: 00 E8
00207443: 00 0E
00207447: 00 8D
00207448: 00 4D
00207449: 00 F8
0020744A: 00 E8
0020744B: 00 C1
00 ED
0020744D: 00 E8
0020744E: 00 FF
0020744F: 00 EB
00207450: 00 EC
00207451: 00 89
00207452: 00 EC
00207453: 00 5D
00207454: 00 C3
00207455: 00 55
00207456: 00 89
00207457: 00 E5
00207458: 00 8B
00207459: 00 45
0020745A: 00 08
0020745B: 00 85
0020745C: 00 C0
0020745D: 00 74
0020745E: 00 5E
0020745F: 00 83
00207460: 00 78
00207461: 00 2C
00207463: 00 75
00207464: 00 58
00207465: 00 8B
00207466: 00 40
00207467: 00 38
00207468: 00 50
00207469: 00 B9
0020746A: 00 1C
0020746B: 00 2C
0020746C: 00 64
0020746E: 00 8B
0020746F: 00 09
00207470: 00 E8
00207471: 00 A3
00207472: 00 5F
00207473: 00 EE
00207474: 00 FF
00207475: 00 8B
00207476: 00 45
00207477: 00 08
00207478: 00 31
00207479: 00 C9
0020747A: 00 66
0020747B: 00 8B
0020747C: 00 48
0020747D: 00 04
0020747E: 00 51
0020747F: 00 B9
00207480: 00 F8
00207481: 00 39
00207482: 00 6C
00207484: 00 E8
00207485: 00 7A
00207486: 00 04
00207487: 00 F1
00207488: 00 FF
00207489: 00 50
0020748A: 00 B9
0020748B: 00 F8
0020748C: 00 39
0020748D: 00 6C
0020748F: 00 E8
00207490: 00 E1
00207491: 00 EF
00207492: 00 F0
00207493: 00 FF
00207494: 00 B9
00207495: 00 F8
00207496: 00 39
00207497: 00 6C
00207499: 00 E8
0020749A: 00 30
0020749B: 00 FF
0020749C: 00 F0
0020749D: 00 FF
0020749E: 00 B9
0020749F: 00 1C
002074A0: 00 2C
002074A1: 00 64
002074A3: 00 8B
002074A4: 00 09
002074A5: 00 8B
002074A6: 00 11
002074A7: 00 4A
002074A8: 00 8B
002074A9: 00 45
002074AA: 00 08
002074AB: 00 89
002074AC: 00 90
002074AD: 00 50
002074AE: 00 0A
002074B1: 00 B9
002074B2: 00 14
002074B3: 00 DB
002074B4: 00 6C
002074B6: 00 8B
002074B7: 00 09
002074B8: 00 E8
002074B9: 00 F9
002074BA: 00 CC
002074BB: 00 F2
002074BC: 00 FF
002074BD: 00 89
002074BE: 00 EC
002074BF: 00 5D
002074C0: 00 C2
002074C1: 00 04
 
Author: exc!ton (vladimir [dot] chebotarev [at] gmail [dot] com)
Date: 14-Sep-08, 19:48:27
that patch is for rom2server.exe
 
Author: exc!ton (vladimir [dot] chebotarev [at] gmail [dot] com)
Date: 14-Sep-08, 19:47:32
this is zero speed crash fix, also checks if speed greater than 127 and treats such speed as 1

00190494: F7 84
00190495: F9 C9
00190496: 8B 7F
00190497: 55 09
00190498: 08 B9
00190499: 8B 01
0019049A: 8A 00
0019049B: C0 00
0019049C: 01 00
0019049D: 00 90
0019049E: 00 90
0019049F: 88 90
001904A0: 81 90
001904A1: A4 F7
001904A2: 00 F9
001904A3: 00 8B
001904A4: 00 55
001904A5: 8B 08
001904A6: 55 8B
001904A7: 08 8A
001904A8: 8B C0
001904A9: 82 01
001904AA: C0 00
001904AB: 01 00
001904AC: 00 88
001904AD: 00 81
001904AE: 33 A4
001904AF: C9 00
001904B0: 8A 00
001904B1: 88 00
001904B2: A4 33
001904B3: 00 C9
001904B4: 00 88
001904B5: 00 C1
 
Author: exc!ton (vladimir [dot] chebotarev [at] gmail [dot] com)
Date: 14-Sep-08, 17:08:17
2 James. Script file can be saved as any name you wish. I don't understand.

2 Nova. I have answered to you by e-mail
 
Author: NOVA (KINGKOTA666 [at] HOTMAIL [dot] COM)
Date: 14-Sep-08, 16:55:24
To Ex-lend:

Here are my long-winded descriptions of the game bugs you requested. I also sent this to your email, but thought I'd post it here as well....


1. The ZERO SPEED crash. If your character is carrying a lot of heavy items, your walking speed will get slower. If you carry enough weight, you will slow down to speed of 7. Now if you cast s SLOW spell on yourself using ELVEN SLOW SCROLL, it will further reduce your speed by negative 7 (thus your total speed is now ZERO). Now, if you give a command to walk somewhere on the map, it creates what I believe is a "division by zero" error and causes the server to crash.

2. The CHAT SCREEN FLOOD crash. When you are chatting to the other players, if you keep typing your message until no more letters will appear on your screen and then hit ENTER to send this message, the game will try to display this message. However, the server experiences an error and crashes. The long message is the last thing which is saved in the server log file and then the server crashes. I'm assuming it creates some sort of overflow error.

3. SERVER HOLD. Players can prevent a server from timing out and changing to the next map simply by exiting to the main menu a few seconds before the map times out. The server loses communication with the player and for some reason will NOT close the map while any player has disconnected in this way. So the server does not go to the next map in the rotation list. Instead, when the timer reaches zero, the server locks all new players out and will not let them join (if anyone tries to join they receive a message saying "this server is changing"). If the player who exited to main menu now rejoins their game session, it will say their character is still there and ask if you wish to join that game session. You can accept and you will now regain your game session. But because the server timer has expired already, it is no longer counting down and the map will now never end. But the server is also locked so no one else can join the map. The player has now effectively retained this map forever and no one else can play until this player leaves the map by either camping or if they disconnect again and their time to re-establish communication expires.


Those are the nastiest game bugs still existing in the ROM2 game. In addition to the ZERO SPEED crash, if you reduce your speed to something less than zero by casting a SLOW spell on yourself, it will wrap back to 255 speed and you will be VERY fast indeed until the SLOW spell wears off.

-- NOVA
 
Author: James (King_APK [at] hotmail [dot] com)
Date: 13-Sep-08, 20:37:07
Hmm...maybe I should have been a little more clear...what is the scriptfile supposed to be saved as in order to be run in hack it?

Thanks,
 
Author: exc!ton (vladimir [dot] chebotarev [at] gmail [dot] com)
Date: 13-Sep-08, 19:44:02
About router - there IS a possibility to hold hat behind it - i'll describe it later
 
Author: exc!ton (vladimir [dot] chebotarev [at] gmail [dot] com)
Date: 13-Sep-08, 19:42:52
00100334: 8B C7
00100336: 0C 98
00100337: 25 00
00100338: FF 00
0010033B: 00 8B
0010033C: 50 45
0010033D: E8 98
0010033E: 1E 3D
0010033F: F9 04
00100340: FF 00

but it'll just corrupt your file if you try to apply it
 
Author: James (King_APK [at] hotmail [dot] com)
Date: 13-Sep-08, 19:33:40
This might be a complete newb question, but I don't suppose you could give me an example scriptfile that I could use to base mine around?
 
Author: James (King_APK [at] hotmail [dot] com)
Date: 13-Sep-08, 19:14:54
About the router - Yes it's mine. Using it to share internet with roommates.
 
Author: exc!ton (vladimir [dot] chebotarev [at] gmail [dot] com)
Date: 13-Sep-08, 13:09:32
Never experienced these bugs. Can you give me more detailed description?
If you can, send it via e-mail
 
Author: NOVA (KINGKOTA666 [at] HOTMAIL [dot] COM)
Date: 13-Sep-08, 10:07:33
Ex-lend:

Good to see you're still hanging about on this forum.

I realize you have your time filled with allods.com, but I don't suppose you've worked out a fix for:

1. the speed zero map crash
2. the chat screen flood crash
3. the server hold when character is disconnected


These are the three most annoying bugs remaining in the ROM2 game that I know of and I REALLY wish we had a fix for them.

NOVA
 
Author: exc!ton (vladimir [dot] chebotarev [at] gmail [dot] com)
Date: 13-Sep-08, 09:22:14
about patcher - download that:
http://allods.homeunix.org/files/hi.zip

----------------------------------------
-*- Hack It ! * Copyright (C) Aleph 2000 -*-

A Quick Hack The Target File Using Crack Script

Usage: hi.com [-r] ScriptFile TargetFile
--------------------------------------

Key '-r' is for restoring original file
 
Author: exc!ton (vladimir [dot] chebotarev [at] gmail [dot] com)
Date: 13-Sep-08, 09:15:57
Is it your router?
 
Author: James (King_APK [at] hotmail [dot] com)
Date: 13-Sep-08, 06:57:09
Wow, looks like I've got a lot of hex editing to look forward to ;) Thanks for all the info!

I can't think of anything else I need info on for the time being, although if you know of a 'simple' way to create an auto patcher to change the hex codes rather than go in manually it would save me a lot of time ;)

As for going public, I might have a second comp up and running in a month of so, but we will see. Unfortunately it will be Hamachi access only. Unless Someone's figured out running a Hat from behind a router while I've been gone ^.^
 
Author: NOVA (KINGKOTA666 [at] HOTMAIL [dot] COM)
Date: 13-Sep-08, 06:36:42
4. STAT HACK - I was going to simply link to Exlend's posts where he gave the information I used to make a quick patcher for this....but it appears his web site is down. Fortunately, I kept the data needed to make your own patcher (or just manually make the HEX edit). It is as follows (the first number is the OFFSET, the 2nd number is what you will find at that location, the 3rd number is what you change that into:

ROM2SERVER.EXE

00100334: 8B C7
00100336: 0C 98
00100337: 25 00
00100338: FF 00
0010033B: 00 8B
0010033C: 50 45
0010033D: E8 98
0010033E: 1E 3D
0010033F: F9 04
00100340: FF 00
00100341: FF 00
00100342: 83 00
00100343: C4 7D
00100344: 04 56
00100345: 8B 8D
00100347: E0 0C
00100348: 2B 8B
00100349: C8 14
0010034A: 89 81
0010034B: 4D 81
0010034C: E0 E2
0010034D: 8B FF
0010034E: 55 00
0010034F: 10 00
00100350: 81 00
00100351: E2 83
00100352: FF FA
00100353: 00 2B
00100354: 00 7F
00100355: 00 05
00100356: 52 83
00100357: E8 FA
00100358: 04 0F
00100359: F9 7D
0010035A: FF 07
0010035B: FF C7
0010035C: 83 04
0010035D: C4 81
0010035E: 04 19
0010035F: 8B 00
00100360: 4D 00
00100361: E0 00
00100362: 2B 8B
00100363: C8 14
00100364: 89 81
00100365: 4D 81
00100366: E0 E2
00100367: 8B FF
00100368: 55 00
00100369: 14 00
0010036A: 81 00
0010036B: E2 52
0010036C: FF E8
0010036D: 00 EF
0010036E: 00 F8
0010036F: 00 FF
00100370: 52 FF
00100371: E8 83
00100372: EA C4
00100373: F8 04
00100374: FF 29
00100375: FF 45
00100376: 83 E0
00100377: C4 FF
00100378: 04 45
00100379: 8B 98
0010037A: 4D EB
0010037B: E0 BF

I've tried it and it works. Anyone who tries to edit their new character stats at all winds up with 25s for each stat instead (which makes for a real crappy character).

5. DEFEND CRASH PATCH - This is yet another patch given to us by Exlend. It alters your rom2server.exe file so no one can deliberately or even accidentally crash your servers when the target of a DEFEND order leaves the map (which often was used as part of method one duping). The OFFSETs etc for this patch are as follows:

ROM2SERVER.EXE

001B4BEA: 89 8B
001B4BEB: 4D 45
001B4BEC: FC 08
001B4BEE: 45 40
001B4BEF: 08 14
001B4BF0: 8B 85
001B4BF1: 48 C0
001B4BF2: 14 75
001B4BF3: 0F 02
001B4BF4: BF EB
001B4BF5: 51 27
001B4BF6: 04 0F
001B4BF7: 6B BF
001B4BF8: D2 50
001B4BF9: 46 04
001B4BFA: 8B 6B
001B4BFB: 45 D2
001B4BFC: FC 46
001B4BFF: 10 11

I've tested this one as well....and it also works great.

6. ACCOUNT CREATION SCRIPT - Since FF wrote this and not me, I don't feel comfortable simply posting the script in an open forum. He did tell me I could share it, but I think posting it is taking a bit too much liberty with HIS code. So I'd be happy to send it to you as a file if you contact me via MSN or email my HOTMAIL account. Or perhaps FF himself will see this and give permission to post it or even post it himself.

Sorry if this seems harsh or stupid....but it's not my code and I respect FF tremendously. As such, I don't want to risk taking more liberty with his creation than he intended for me to have.



If you can think of anything eles you'd like to juice up your HAT, let us all know. And make that damned thing public so we can all share in the fun...!!!!!

Peace,
NOVA
 
Author: NOVA (KINGKOTA666 [at] HOTMAIL [dot] COM)
Date: 13-Sep-08, 06:18:51
1. Sight Hack - As far as I know, there is NO way to prevent use of the sight hack. That's because every client (aka player) receives a full mirror of the server-side map. Each client then determines how much of that map to display. This was likely done in order to speed play since calculating a display field for every player server side would be rather intensive. Whatever the reason, since sight range is determined client-side, you simply cannot restrict use of the sight hack (short of recoding giant portions of the game).

2. GM HACK - You can utterly disable the cheat mode server side by simply HEX editing your rom2server.exe file.

Find OFFSET 001025A9, change 75 ---> EB and save the change.

3. NUMERIC ACCOUNTS - The reason for numeric-only accounts is to prevent use of one of the two main gear duping methods.

The first method takes advantage of the server auto-save feature where a snapshot of each character on each map is taken every 30 seconds and stored in a temporary file. When a map ends under "normal" conditions such as camping or a map timing out, the current character conditions are saved. Then all character temp files are sent back to the HAT for updating. When a server crashes, however, no such update can be made. So when that server restarts, the first thing that happens is unsent character files are sent to the HAT. So if you remove items from a character onto either the map (drop them) or onto another character who then leaves quickly (thus saving that character), you can crash the server and revert back to the last autosave condition of your character. This last save also still has the items, so you have effectively now duped them. This is why the autorestart feature is seldom used by a HAT since this allows repeated server crashing/duping.

The second method of duping takes advantage of bugs in the programming to allow multiple simultaneous access to the SAME account and the SAME character. You effectively have multiple live copies of the same character on a map at the same time. By dropping the same items from each character copy, then retrieving them shortly thereafter, you can dupe very easily and never have to crash any maps. This method takes advantage of the program not distinguishing between upper and lower case letters in the account name. So if you allow only numeric accounts, this duping is impossible (since there is no such thing as upper and lower case numbers in the ASCII system).



This post is getting pretty long....so I'll continue in another post......
 
Author: James (King_APK [at] hotmail [dot] com)
Date: 13-Sep-08, 03:09:01
Ah, I wasn't sure about the GM Hack thanks for the info. (I was under the impression that the numbered accounts everyone kept requiring had something to do with it)

It would be great if you could post Firefly's PHP version as well, as I have a much better working knowledge with PHP than with VBS...

I'm pretty sure that I have the GM patch hanging around, although I have yet to see the Stat Hack patch...Any links to download? Also any anti sight-hack patch? ;)

The Hat I have running was because myself and a few friends wanted to go back and play the old Lith maps again. For now I plan to keep it more or less private since it is a little unstable and has only a few maps up full time. Although there is a good chance that will change once I get a spare computer...

PS: Thanks Ex-Lend for your work on Rom2, it's much appreciated in keeping the game enjoyable, even 10 years after its release. :)
 
Author: NOVA (KINGKOTA666 [at] HOTMAIL [dot] COM)
Date: 12-Sep-08, 22:17:49
I have the PHP script version that FF wrote a long time ago. It requires that you have a webserver running on the same computer that you run the HAT from. And obviously your webserver has to have a plugin that processes PHP script.

For the record, the account maker script does not make your HAT vulnerable to the GM hack (or any other hack for that matter). The script is simply a web form based way to generate a data file (.dat) in the "new accounts" sub-folder of the HAT program. The GM hack is a totally separate issue. And you can disable the GM hack simply by modifying your rom2server.exe file so that it jumps around the cheat mode program code (thus creating a region of "dead code").

If you plan to run a HAT, I would highly recommend patching against the GM hack. I would also highly recommend using Exlend's patch against the STAT HACK so no one can edit brand new character stats. It works great....thanks to Exlend for the code on that one.
 
Author: James (King_APK [at] hotmail [dot] com)
Date: 12-Sep-08, 03:12:50
Hey, that was pretty quick!

Thanks for the info.

Now I've just gotta learn a little about how virtual basic works ;)
 
Author: exc!ton (vladimir [dot] chebotarev [at] gmail [dot] com)
Date: 11-Sep-08, 17:13:52
create_account.vbs:
-------------------------------------------
Function MakePath(fs, path)
MakePath = False
If Not fs.DriveExists(fs.GetDriveName(path)) Then Exit Function
If fs.FolderExists(path) Then
MakePath = True
Exit Function
End if
If Not MakePath(fs, fs.GetParentFolderName(path)) Then Exit function
On Error Resume Next
fs.CreateFolder path
MakePath = fs.FolderExists(path)
End function

Function MakeAcc(fs, file, password)
Dim f: Set f = fs.CreateTextFile(file)
Dim contents(&H233)
For Each x In contents
x = 0
Next
contents(0) = &HFB
contents(1) = &H34
contents(2) = &HED
contents(3) = &H12
For i = 1 To Len(password)
contents(3+i) = Asc(Mid(password, i, 1))
Next
For Each x In contents
f.Write Chr(x)
Next
End function

Dim fs: Set fs = CreateObject("Scripting.FileSystemObject")

Dim dir: dir = "F:\src\samples\vbs\Chr\" ' You'd replace this path with yours

Dim account : account = WScript.Arguments.Item(0)
Dim password : password = WScript.Arguments.Item(1)

dir = dir + Mid(account, 1, 1) + "\"

MakePath fs, dir

Dim file: file = dir + account + ".lgn"

If fs.FileExists(file) Then
WScript.Echo "Already exists"
WScript.Quit
End if

MakeAcc fs, file, password
---------------------------------------

run it as:
create_account.vbs Login Password
 
Author: James (King_APK [at] hotmail [dot] com)
Date: 11-Sep-08, 03:19:07
Hey all, (To those of you who might remember me)

Nice to see things still alive in some form or other ;)

Does anyone perchance have the old script for creating HAT server logins?

One of the few old file's I can't seem to find...(The fact that it leaves you vulnerable to the GM hack isn't an issue atm)
 
^top