I'm not posting the exe as I didn't want to/didn't have time to do all the extra hacks such as multiclient etc.. and didn't wanna re-post someone else's hacked client with the bypass edit (it mighta caused offence)
So here are the hex edits.
Code:
005C8F96 E9 D5081B00
005C8F9B 90
00779870 60
00779871 8BBC24 00010000
00779878 BE 009B7700
0077987D 56
0077987E 68 109B7700
00779883 FF15 04366A00
00779889 83C4 08
0077988C A3 F08F5C00
00779891 6A 02
00779893 6A 00
00779895 FF35 F08F5C00
0077989B FF15 C8356A00
007798A1 83C4 0C
007798A4 FF35 F08F5C00
007798AA FF15 F4366A00
007798B0 83C4 04
007798B3 8BD8
007798B5 6A 00
007798B7 6A 00
007798B9 FF35 F08F5C00
007798BF FF15 C8356A00
007798C5 83C4 0C
007798C8 FF35 F08F5C00
007798CE 6A 01
007798D0 53
007798D1 57
007798D2 FF15 CC356A00
007798D8 83C4 10
007798DB FF35 F08F5C00
007798E1 FF15 E0356A00
007798E7 83C4 04
007798EA 61
007798EB E9 ACF6E4FF
007798F0 90
00779B00 72 62 00
00779B10 2E 5C 51 4F 2E 64 61 74 00
You have to leave the original encrypted Server.dat unchanged, create a QO.dat file containing the unencrypted server data xml code.
You can change the data at 0x00779b10 to change the filename from QO.dat to something else if you want.
EDIT: Note that these are loaded offsets, if editing with a hex editor subtract 0x400000