[REQUEST]Zoom out

[Sky]

Anyone able to tell me how to make the zoom out go further? I get in some postitions and the zoom out distance is not nearly enough. Thanks in advance.

[sess]

Been looking for the file and I havent found it yet, but when I do ill release a modified file(s) with the filter removed, increase turn speed and increased zoom.

[akson]

open Olly
Search for sequence of commands
fadd dword ptr [esi+40]
fst dword ptr [esi+40]

004056BE . D985 CD000000 fld dword ptr [ebp+CD]
004056C4 . D846 40 fadd dword ptr [esi+40]
004056C7 . D956 40 fst dword ptr [esi+40]
004056CA . D81D FCAB8400 fcomp dword ptr [84ABFC] may be XXXXXX
004056D0 . DFE0 fstsw ax
004056D2 . 25 00410000 and eax, 4100
004056D7 . EB 03 jnz short 004056DC <---jnz change to jmp
004056D9 . 894E 40 mov dword ptr [esi+40], ecx
004056DC > 8B07 mov eax, dword ptr [edi]
004056DE . 3BC3 cmp eax, ebx
004056E0 . 0F85 E8000000 jnz 004057CE
004056E6 . 8957 14 mov dword ptr [edi+14], edx
004056E9 . D947 18 fld dword ptr [edi+18]
004056EC . D947 14 fld dword ptr [edi+14]
004056EF . D947 10 fld dword ptr [edi+10]
004056F2 . D9C0 fld st

[sess]

Could you compile it with multi-client too?
Ive tried but it doesnt work

[Fiestaa]

Hi akson, thanks for your posts in this forum describing how to edit the elementclient.exe. I followed your instructions in another thread and was able to disable the launcher app requirement (but was unsuccessful in getting multiclient to work).

I also want to use this zoom hack but I've not been able to get it to work. Your code is fundamentally different to what I have in my own elementclient version (for the MY-ENG version of PW).

Using my code, could you instruct me which edits I need to make in order to freely zoom as far out as I want? If you need a larger segment, do let me know.

Thanks for your kind help.

004057D9  |. D985 CD000000  FLD DWORD PTR SS:[EBP+CD]
004057DF  |. D846 40        FADD DWORD PTR DS:[ESI+40]
004057E2  |. D956 40        FST DWORD PTR DS:[ESI+40]
004057E5  |. D81D DCDB8300  FCOMP DWORD PTR DS:[83DBDC]
004057EB  |. DFE0           FSTSW AX
004057ED  |. F6C4 41        TEST AH,41
004057F0  |. 75 03          JNZ SHORT elementc.004057F5
004057F2  |. 894E 40        MOV DWORD PTR DS:[ESI+40],ECX
004057F5  |> 8B07           MOV EAX,DWORD PTR DS:[EDI]
004057F7  |. 3BC3           CMP EAX,EBX
004057F9  |. 0F85 EB000000  JNZ elementc.004058EA
004057FF  |. 8957 14        MOV DWORD PTR DS:[EDI+14],EDX
00405802  |. D947 18        FLD DWORD PTR DS:[EDI+18]
00405805  |. D947 14        FLD DWORD PTR DS:[EDI+14]
00405808  |. D947 10        FLD DWORD PTR DS:[EDI+10]
0040580B  |. D9C0           FLD ST

[voe01]

TEST AH,41

is the check if you have reached the maximum zoomout level

[Fiestaa]

Originally Posted by voe01

TEST AH,41

is the check if you have reached the maximum zoomout level

I guessed this may be the case So... could changing the value (41) make a difference, or perhaps NOPing this line? (I've already tried re-writing it to be the same as akson's code, but that didn't work.)

Thanks!

[Fiestaa]

Ok, I don't get it. If I follow akson's code and change that "TEST AH,41" to "AND EAX,4100", the following bytes get overwritten, so the JNZ line disappears. So how are you supposed to change the JNZ line to JMP if it no longer exists?

I also tried filling the TEST line with NOPs. The code reads:

004057D9 |. D985 CD000000 FLD DWORD PTR SS:[EBP+CD]
004057DF |. D846 40 FADD DWORD PTR DS:[ESI+40]
004057E2 |. D956 40 FST DWORD PTR DS:[ESI+40]
004057E5 |. D81D DCDB8300 FCOMP DWORD PTR DS:[83DBDC]
004057EB |. DFE0 FSTSW AX
004057ED 90 NOP
004057EE 90 NOP
004057EF 90 NOP
004057F0 EB 03 JMP SHORT elementc.004057F5
004057F2 |. 894E 40 MOV DWORD PTR DS:[ESI+40],ECX
004057F5 |> 8B07 MOV EAX,DWORD PTR DS:[EDI]
004057F7 |. 3BC3 CMP EAX,EBX
004057F9 |. 0F85 EB000000 JNZ elementc.004058EA
004057FF |. 8957 14 MOV DWORD PTR DS:[EDI+14],EDX
00405802 |. D947 18 FLD DWORD PTR DS:[EDI+18]
00405805 |. D947 14 FLD DWORD PTR DS:[EDI+14]
00405808 |. D947 10 FLD DWORD PTR DS:[EDI+10]
0040580B |. D9C0 FLD ST

This doesn't work either.

[syntex]

004057D9 |. D985 CD000000 FLD DWORD PTR SS:[EBP+CD]
004057DF |. D846 40 FADD DWORD PTR DS:[ESI+40]
004057E2 |. D956 40 FST DWORD PTR DS:[ESI+40]
004057E5 |. D81D DCDB8300 FCOMP DWORD PTR DS:[83DBDC]
004057EB |. DFE0 FSTSW AX
004057ED |. F6C4 41 TEST AH,41
004057F0 |. 75 03 jmp SHORT elementc.004057F5
004057F2 |. 894E 40 MOV DWORD PTR DS:[ESI+40],ECX
004057F5 |> 8B07 MOV EAX,DWORD PTR DS:[EDI]
004057F7 |. 3BC3 CMP EAX,EBX
004057F9 |. 0F85 EB000000 jmp elementc.004058EA
004057FF |. 8957 14 MOV DWORD PTR DS:[EDI+14],EDX
00405802 |. D947 18 FLD DWORD PTR DS:[EDI+18]
00405805 |. D947 14 FLD DWORD PTR DS:[EDI+14]
00405808 |. D947 10 FLD DWORD PTR DS:[EDI+10]
0040580B |. D9C0 FLD ST

p.s. this part is missing : 004058EA
so we cant see where it jmp to

[Sky]

anyone able to get this to work or have another method?