hello, I saw different programs for morph an unit client-side (eg: http://www.mmowned.com/forums/world-...a-3-0-9-a.html) but I would like to know how it works and how I can do it in AutoIt (or C#)
I have not seen any Thread on this subject but I could be wrong.
edit: apparently I need the address of UptdateModel but it is not in the info dump thread how can I get this adress ?
re-edit: Ok i've find the adress but I don't know how I can call the function I am new in ASM injection it's UpdateModel = 0x73e410
I've try:
Code:
uint dwCodeCaveMorphF = w.AllocateMemory(0x3000);
uint dwMorphTargetBase = 0x2700;
uint t = w.ReadUInt(13469608);
uint t2 = w.ReadUInt(t + 52);
uint playermorphbase = w.ReadUInt( t2+ 36);
dwMorphTargetBase += dwCodeCaveMorphF;
w.Asm.Clear();
// s_curMgr
w.Asm.AddLine("mov eax, [0x00C79CE0]");
w.Asm.AddLine("mov eax, [eax+0x2ED0]");
w.Asm.AddLine("mov edx, eax");
// TIB
w.Asm.AddLine("xor eax, eax");
w.Asm.AddLine("fs mov eax, [0xAC]");
w.Asm.AddLine("mov eax, [eax]");
w.Asm.AddLine("add eax, 8");
w.Asm.AddLine("mov dword [eax], edx");
// call updateModel
w.Asm.AddLine("push 1");
w.Asm.AddLine("push 1");
//w.Asm.AddLine("mov {0}, {1}", dwMorphTargetBase, playermorphbase);
w.Asm.AddLine("mov ecx, {0}", playermorphbase);
w.Asm.AddLine("call {0}", UpdateModel); // ret 8
// goodbye
w.Asm.AddLine("retn");
w.Asm.Inject(dwCodeCaveMorphF);
but it doesn't work