try this:
Changes i explain are made completly in the game.exe with ollydbg.
Make sure the game.exe is in a working client placed.
1st find the address 004A91B3 (right click -> go to -> expression-> put the adress in)
then u will see
"MOV DWORD PTR DS:[ESI+1EB8],EAX" double click on that and put "MOV EDX,DWORD PTR SS:[EBP+10]" in and press assemble.
"MOV BYTE PTR DS:[ESI+1EB4],0FF" double click on that and put "MOV EDX,DWORD PTR SS:[EBP+10]" in and press assemble.
"MOV BYTE PTR DS:[ESI+1EB5],AL" double click on that and put "MOV EDI,DWORD PTR SS:[EBP+8]" in and press assemble.
now go to expression 4A91F5 make right click press Binary and press fill with NOPs
now go to expression 5166e4 make right click press Binary and press fill with NOPs
now u finished the modifications to safe all now
make right click -> copy to executable -> All Modifications -> copy all -> right click on the new window -> save file
After that u guys are done
credits to killer for the offsets
Thanks to Teddy Bear
|