完美世界国际版不用外挂多开的方法

以前发表了个 资源 介绍里是怎么手动更改elementclient.exe  这个文件达到不用外挂双开的目的...

现在己经更新了N多版本了, 方法还是可行的,但地址己经改变了.

下面就说一下具体改的代码....只要改动两处就可以双开

 

第一处((跳过查找Element Client窗口名的验证)):

 

0043BAD9  |-. 68 9C088D00   PUSH    008D089C                         ;  UNICODE "Element Client"
0043BADE  |.  68 28FB8C00   PUSH    008CFB28                         ;  UNICODE "ElementClient Window"
0043BAE3  |.  FF15 A46E9200 CALL    NEAR DWORD PTR [926EA4]          ;  elementc.006C6496
0043BAE9  |.  85C0          TEST    EAX, EAX

0043BAEB  |.  74 1E         JE      SHORT 0043BB0B                   ;    JE(74)改为JMP(EB);可以实现多开

0043BAED  |.  6A 10         PUSH    10                               ; /Style = MB_OK|MB_ICONHAND|MB_APPLMODAL
0043BAEF  |.  68 40E68C00   PUSH    008CE640                         ; |Title = "ERROR"
0043BAF4  |.  68 60088D00   PUSH    008D0860                         ; |Text = "Game is currently running. You can't start another process!"
0043BAF9  |.  6A 00         PUSH    0                                ; |hOwner = NULL
0043BAFB  |.  FF15 F0068600 CALL    NEAR DWORD PTR [<&USER32.Message>; /MessageBoxA
0043BB01  |.  5F            POP     EDI
0043BB02  |.  5E            POP     ESI
0043BB03  |.  5D            POP     EBP
0043BB04  |.  32C0          XOR     AL, AL
0043BB06  |.  5B            POP     EBX
0043BB07  |.  83C4 10       ADD     ESP, 10
0043BB0A  |.  C3            RETN
0043BB0B  |-  8B4C24 24     MOV     ECX, DWORD PTR [ESP+24]
 

第二处((跳过必须从patcher.exe启动的验证)):

0043ABD9  |.  68 4C068D00   PUSH    008D064C                         ; /wstr2 = "game:cpw"
0043ABDE  |.  8B5D 10       MOV     EBX, DWORD PTR [EBP+10]          ; |
0043ABE1  |.  53            PUSH    EBX                              ; |wstr1
0043ABE2  |.  FF15 68048600 CALL    NEAR DWORD PTR [<&MSVCRT.wcsstr>>; /wcsstr
0043ABE8  |.  83C4 08       ADD     ESP, 8
0043ABEB  |.  85C0          TEST    EAX, EAX

0043ABED      75 29         JNZ     SHORT 0043AC18                   ;    JNZ(75)改为JMP(EB);不用参数 

0043ABEF  |.  6A 10         PUSH    10                               ; /Style = MB_OK|MB_ICONHAND|MB_APPLMODAL
0043ABF1  |.  68 40E68C00   PUSH    008CE640                         ; |Title = "ERROR"
0043ABF6  |.  68 28068D00   PUSH    008D0628                         ; |Text = "Please start game from launcher.exe"
0043ABFB  |.  50            PUSH    EAX                              ; |hOwner
0043ABFC  |.  FF15 F0068600 CALL    NEAR DWORD PTR [<&USER32.Message>; /MessageBoxA
0043AC02  |.  83C8 FF       OR      EAX, FFFFFFFF
0043AC05  |.  8B4D F0       MOV     ECX, DWORD PTR [EBP-10]
0043AC08  |.  64:890D 00000>MOV     DWORD PTR FS:[0], ECX
0043AC0F  |.  5F            POP     EDI
0043AC10  |.  5E            POP     ESI
0043AC11  |.  5B            POP     EBX
0043AC12  |.  8BE5          MOV     ESP, EBP
0043AC14  |.  5D            POP     EBP
0043AC15  |.  C2 1000       RETN    10
0043AC18  |>  68 18068D00   PUSH    008D0618                         ; /IniFileName = "./patcher.ini"

当然第二处也可以不改但要 建个elementclient.exe快捷方式 参数定为"game:cpw"才可以不用 从 patcher.exe 进游戏...