Finding new offsets

[Fangor]

So, lately, I play mostly on the Test server, and the .ini for MacroQuest of course is for production. Where precisely are the function offsets getting pulled from? I examined every DLL and EXE inside the game and couldn't find them. Is it being pulled from the actual packets? Given the size of the offsets, I would assume not, but.. I don't understand this stuff so well as to know for sure.

Any help or info would be great. I know supporting Test server won't happen, due to how frequently changes occur, but on occasion it would be nice to be able to load up MacroQuest when I need it.

Thanks in advance!

Fang

[Fangor]

Think I may have realized the answer to my own question. This requires looking at the executable while it's loaded in memory, doesn't it? Via, presumably, SoftICE or some simliar analyzer?

If not, please, let me know, otherwise, think I know how to get the offset information already.

Fang

[Xaanin]

I believe that is possible, the method used by myself and some others is to disassemble old and new exe, and just try to find the new offsets with text searches (works even while they patch too=) )

[Fangor]

Ok.. I actually tried that, and I couldn't find any references in any of the executables for the specifically called out functions. Am I missing something?

Such as SpawnHeader, GetRaceByID (I've looked in every file for this one specifically), etc.. We talking eqgame.exe? Everquest.exe? eqmain.dll? I checked most of these and couldn't find em.

Thanks for the info.. I'll keep hunting.

Fang

[Xaanin]

For example SpawnHeader:

Disassemble both the old and new eqgame.exe
In the old exe, go to the offset, find something unique close to it (if I recall correctly there is something about "AllTraders" near spawnheader). In the new exe search for "AllTraders", then just compare the two files and find the new offset.

If you try that you will probably notice that there is a total of 2 "AllTraders" in eqgame.exe and it's the 2nd one that is near SpawnHeader.