Rebirthing and becoming the same class prevents 3rd job advancement due to sp gains about cosmic HOT 2 CLOSED

Turns out this was client based restriction that's referenced in an old HeavenMS issue.
I've short circuited the SP check on the client and it's removed the requirement to spend all your points, but it means that the player can spend them on the next job so if you want to have this fixed you'd have to also update the job advancement NPCs (if they aren't already).

To fix the client, I followed the instructions here.

Some details I found along the way:

• There are 3 popups for having too many skill points remaining, for first second and third job.
• Each popup is handled by an assembly cmp, so you can swap the outcome from a jl to a jmp to skip the comparison and go straight to the success case.

Process:

1. Retrieved the ID of the message using STREDIT and searching for Content LIKE '%lacking%'
2. Located the ID within IDA using a search for immediate value (Alt+i) on the ID and double clicked to go to the usage
3. Located what called the method in IDA gaph view
4. Clicked on the JL that lead to that graph block, swapped to text view, copied the memory address
5. Opened ollydbg, went to the memory address, updated from a JL instruction to JMP
6. Created a new localhost as a result, and tested it out
7. Successfully added skills

Notes that lead me to the solution:

# Client popup message (id 3510): You're lacking Level 1 Skills.
___:008AD21A	sub_8ACF1A	push    0DB6h
change jl at location 008AD20C to a jmp

# Client popup message (id 3509): You're lacking Level 1 or 2 Skills.
___:008AD175	sub_8ACF1A	push    0DB5h
change jl at location 008AD163 to a jmp

# Client popup message (id 3511): You are lacking in either 1st, 2nd, or 3rd level skills.
___:008AD0CA	sub_8ACF1A	push    0DB7h
change jl at location 008AD0B8 to a jmp

Graph view before the change:

Graph view after the change:

Note that the failure cases on the left have no inputs attached to them in the second picture, and those that previously pointed to the the failure function location(s) now bypass them and go straight to their success cases.

I'd offer the exe but without the server updates it is incomplete. I personally am not fussed since my server is for personal use, so I thought it best to post the method instead. If you want the exe let me know.

from cosmic.

Thank you so much for this, I am going to use this to learn how to do client editing, this really helps!

from cosmic.