Warning: All hacks are done at your own risk. Don't try them at home
The incoming map loading bitmap 2d size is being stored in 2 registers ebx (x-value) and edi (y-value).
We cannot assign ebx and edi values once they are read into registers, but we can modify them by arithmetic op code.
swat_1366x768.exe
cmp, edi 00000780 - we compare the incoming bitmap width to the default LRM mission loading bitmap width of 1920
jne - jump if not equal (the value must be the default mission loading screen width of 800) and we jump to Modify 800 x 600 values
if they are equal then we go to next line of op code
cmp ebx, 00000438 - First we compare the incoming bitmap height to the default LRM mission loading bitmap height of 1080
jne - jump if not equal (the value must be the default mission loading screen height of 600) and we jump to Modify 800 x 600 values
if they are equal then we go to next line of op code to Modify 1920 x 1080 Values
Modify 1920 x 1080 Values
sub, ebx 00000138 - we can assume at this point that ebx = 1080 and we need to subtract 312 from ebx (height) so that ebx = 768
sub, edi 00000022A - we can assume at this point that edi = 1920 and we need to subtract 554 from edi (width) so that edi = 1366
jmp, jump to push values of ebx and edi on stack and return.
Modify 800 x 600 values
add, ebx 000000A8 - we can assume at this point that ebx = 600 and we need to add 168 to ebx (height) so that ebx = 768
add, edi 00000236 - we can assume at this point that edi = 800 and we need to add 566 to edi (width) so that edi = 1366
Push the values of ebx and edi on stack and return, this is also the jmp location in the cmp op codes above
push ebx
push edi
push ecx
push eax
lea, eax,[esp+3] - load the address relative from the jump location so we can return after it sets the image to screen
jmp - back to the location we were at before this method call
This is the jump to new method.
Offset - 16B2BC
Code:
Change - 53 57 51 50 8D 44 24 3C
Code:
To - E9 3F AA 1D 00 90 90 90
New method. offset - 2C2D00
Code:
81 FF 80 07 00 00 75 16 81 FB 38 04 00 00 75 0E 81 EF 2A 02 00 00 81 EB 38 01 00 00 EB 1C 81 FF 20 03 00 00 75 14 81 FB 58 02 00 00 75 0C 81 C7 36 02 00 00 81 C3 A8 00 00 00 53 57 51 50 8D 44 24 3C E9 7D 55 E2 FF
Explanation of the new method:
