---

HermeS
forever - because knowledge is power

vainly presents

Baldur's Gate 2 - Throne of Bhaal v2.5.26498 - No CD

---

Supplier/Courier: http://www.dlh.net/
Stripper/Ripper: Tegné
Hacker/Cracker: Tegné
Packager: Tegné (Thanx to ScAEvoLa's PatchEngine v1.33)

---

Installation Notes

Do a FULL install of this great game. Do a FULL install of the
add-on/expansion. Get the update patch from somewhere. Run the
attached No CD patch in your Baldur's Gate 2: Throne of bhaal
installed directory.

---

Release Notes

This is for the US/English release.

---

Hacking Notes

Baldur's Gate 2 - Throne of Bhaal v2.5.26498 = assembly dump


* Referenced by a CALL at Addresses:
|:00707F99 , :00708166 , :007943B5 , :007945AC , :007964AE
|:00796678
|
:00439D1F 55 push ebp ;Change to B8
:00439D20 8BEC mov ebp, esp ;Change to 0100
:00439D22 6AFF push FFFFFFFF ;Change to 0000
:00439D24 683121A600 push 00A62131 ;Change to C3
:00439D29 64A100000000 mov eax, dword ptr fs:[00000000]
:00439D2F 50 push eax
:00439D30 64892500000000 mov dword ptr fs:[00000000], esp
:00439D37 83EC60 sub esp, 00000060
:00439D3A 894D98 mov dword ptr [ebp-68], ecx
:00439D3D A11020B700 mov eax, dword ptr [00B72010]
:00439D42 8945F0 mov dword ptr [ebp-10], eax
:00439D45 C745FC00000000 mov [ebp-04], 00000000
:00439D4C 8B0D1020B700 mov ecx, dword ptr [00B72010]
:00439D52 894DE0 mov dword ptr [ebp-20], ecx
:00439D55 C645FC01 mov [ebp-04], 01
:00439D59 837D0800 cmp dword ptr [ebp+08], 00000000
:00439D5D 742D je 00439D8C
:00439D5F 837D0C00 cmp dword ptr [ebp+0C], 00000000
:00439D63 7427 je 00439D8C
:00439D65 C645B801 mov [ebp-48], 01
:00439D69 C645FC00 mov [ebp-04], 00
:00439D6D 8D4DE0 lea ecx, dword ptr [ebp-20]
:00439D70 E8586B6100 call 00A508CD
:00439D75 C745FCFFFFFFFF mov [ebp-04], FFFFFFFF
:00439D7C 8D4DF0 lea ecx, dword ptr [ebp-10]
:00439D7F E8496B6100 call 00A508CD
:00439D84 8A45B8 mov al, byte ptr [ebp-48]
:00439D87 E91E030000 jmp 0043A0AA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439D5D(C), :00439D63(C)
|
:00439D8C 8B5598 mov edx, dword ptr [ebp-68]
:00439D8F 33C0 xor eax, eax
:00439D91 8A82796C0000 mov al, byte ptr [edx+00006C79]
:00439D97 83F801 cmp eax, 00000001
:00439D9A 752D jne 00439DC9
:00439D9C 837D0800 cmp dword ptr [ebp+08], 00000000
:00439DA0 7527 jne 00439DC9
:00439DA2 C645B401 mov [ebp-4C], 01
:00439DA6 C645FC00 mov [ebp-04], 00
:00439DAA 8D4DE0 lea ecx, dword ptr [ebp-20]
:00439DAD E81B6B6100 call 00A508CD
:00439DB2 C745FCFFFFFFFF mov [ebp-04], FFFFFFFF
:00439DB9 8D4DF0 lea ecx, dword ptr [ebp-10]
:00439DBC E80C6B6100 call 00A508CD
:00439DC1 8A45B4 mov al, byte ptr [ebp-4C]
:00439DC4 E9E1020000 jmp 0043A0AA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439D9A(C), :00439DA0(C)
|
:00439DC9 8B4D98 mov ecx, dword ptr [ebp-68]
:00439DCC C681796C000000 mov byte ptr [ecx+00006C79], 00

* Reference To: KERNEL32.GetLogicalDrives, Ord:0120h
|
:00439DD3 FF153053AA00 Call dword ptr [00AA5330]
:00439DD9 8945DC mov dword ptr [ebp-24], eax
:00439DDC C645E400 mov [ebp-1C], 00
:00439DE0 EB09 jmp 00439DEB

---

Reach Out and Touch Us

WebSite: http://hermes.itinhere.co.za/
email: hermes@itinhere.co.za
IRC: n/a
Message Board: Goto our site for the link

---

Quote

Hey U hogs, I have a new girlfriend!

---

The Hermes Founding Members Are
Xuncle, Tegné and blew

---

This .nfo file was generated using HermeS nfoGen - coded by Xuncle

---