The wow.exe version I'm going to demonstrate on is
2.4.2.8278 (I just translated my old tutorial, won't make new screenshots, using those)
Open wow.exe, connect to the server and when you're at the "choose character" screen open the debugger (I use OllyDbg) and
attach it to the wow.exe process.
Lets say you have this character,
Shocker:
In the debugger, go to this address
0076AC93* (CTRL+G), there should be a
MOV EAX,[DWORD DS:ECX+14C] (the 14C may vary on other versions) there. As far as I can understand, EAX holds character flags like: banned, marked for rename, cannot login until update complete, etc
Set a breakpoint at this address (F2):
Alt Tab in wow (it's highly recommended to set Video Settings to
windowed, or your wow will freeze when it hits the breakpoint) and click on
Enter world with the char you want renamed, then go in OllyDbg, EIP should show 0076AC93* (because it stopped at the breakpoint). Right click / Follow in dump / Memory address (to get to the zone where the flags are held):
Select DWORD (first 4 bytes), right click / binary / edit:
Modify second byte from xx to 4x (xx4xxxxx. Example: 00000000 will become 00400000)
Press F9, alt tab in wow, and a rename dialogue should appear:
Enter your new nake, click OK, and voila:
* Addresses for each version
2.4.2.8278 ---
0076AC93
2.4.3.8606 ---
0046F4E3
3.0.3.91 ---
00471299 - thanks to CrazyPyro
3.0.9 ---
00471B69 - thanks to LaconiC^
3.1.1 ---
007AD159 - thanks to johnnydj
3.1.2 US ---
007C1929 - thanks to johnnydj
3.3.3a ---
008001C2
3.3.5a ---
004D9C32