- Joined
- Apr 12, 2007
- Messages
- 426
- Reaction score
- 251
As the title said. This small tutorial will show you how to enable quest inventory on any world id in your CabalMain.
You must have:
1. Finding the needed adresses + some explanation
2. Adding new checks for new worlds
3. Testing if it worked
I hope the guide is clear enough to understand.
Have fun and good luck with it guys.
You must have:
- OllyDBG.
- Some knowledge in OllyDBG usage.
- If you are new to it then patience.
1. Finding the needed adresses + some explanation
- Open your CabalMain in OllyDBG
- Press Ctrl+G and paste this adress: 0x40C2E0
- You will find the following codes there
- Here it checks for 3 worlds (CMP EAX,0D = World 13, CMP EAX,18 = World 24, CMP EAX,17 = World 23)
These lines are followed by a JE SHORT 0x40C2FD so if the above check is equal it will jump to 0x40C2FD where it will make our world have a quest inventory.
2. Adding new checks for new worlds
- First you will have to NOP (FILL WITH NOP'S) these adresses 0x40C2FA, 0x40C2FC, 0x40C2FD, 0x40C302
After the nops it should look like:
- Next you will search for some free space/area in your cabalmain.
*0x755BDA* - Now we will rewrite some codes at some adresses (see below)
At 0x40C2FA we will perform a jump to 0x755BDA
JMP 0x755BA0
At 0x40C2FF we will add back XOR EAX, EAX
XOR EAX, EAX
At 0x40C301 we will add back RETN
RETN
At 0x40C302 we will add back MOV EAX, 1
MOV EAX, 1
At 0x40C307 we will add back RETN
RETN
After you made these modifications the new code should look like this:
- You are done with the first step. Next you will press Ctrl+G and go to the free space/area you've picked in the first step.
*In this case its 0x755BDA*
- Here we will start adding our new checks (see below)
*Note that i will only add World 17 and World 18 to be checked but you can add as many as you want.
At 0x755BDA we do our first check (In this case it will be CMP EAX, 11 = World 17) and if equal we perform a jump to 0x40C302 where quest inventory is enabled.
CMP EAX, 11
JE 0x40C302
At 0x755BE3 we do our second check (In this case it will be CMP EAX, 12 = World 18) and if equal we perform a jump again to 0x40C302 where quest inventory is enabled.
CMP EAX, 12
JE 0x40C302
And so on... you can add as many as you want.
Now that we added the new custom checks we need to jump back to 0x40C2FF
*Compare the above adress with the adresses from the first step and you will understand why we jump back there.
JMP 0x40C2FF
The new checks will look like:
- At this point the only thing left is to copy all modifications to executable and save it.
*Be sure to make backup of your executable before saving it so you dont mess it up
3. Testing if it worked
- Well you will test it and you will see it.
I will post a few screens from World 17 as Forgotten Temple B2F.
I hope the guide is clear enough to understand.
Have fun and good luck with it guys.