以前發(fā)表了個 資源 介紹里是怎么手動更改elementclient.exe? 這個文件達到不用外掛雙開的目的...

現(xiàn)在己經(jīng)更新了N多版本了, 方法還是可行的,但地址己經(jīng)改變了.

下面就說一下具體改的代碼....只要改動兩處就可以雙開

?

第一處((跳過查找Element Client窗口名的驗證)):

?

0043BAD9  |-. 68 9C088D00   PUSH    008D089C                         ;  UNICODE "Element Client"
0043BADE  |.  68 28FB8C00   PUSH    008CFB28                         ;  UNICODE "ElementClient Window"
0043BAE3  |.  FF15 A46E9200 CALL    NEAR DWORD PTR [926EA4]          ;  elementc.006C6496
0043BAE9  |.  85C0          TEST    EAX, EAX
0043BAEB  |.  74 1E         JE      SHORT 0043BB0B                   ;    JE(74)改為JMP(EB);可以實現(xiàn)多開
0043BAED  |.  6A 10         PUSH    10                               ; /Style = MB_OK|MB_ICONHAND|MB_APPLMODAL
0043BAEF  |.  68 40E68C00   PUSH    008CE640                         ; |Title = "ERROR"
0043BAF4  |.  68 60088D00   PUSH    008D0860                         ; |Text = "Game is currently running. You can't start another process!"
0043BAF9  |.  6A 00         PUSH    0                                ; |hOwner = NULL
0043BAFB  |.  FF15 F0068600 CALL    NEAR DWORD PTR [<&USER32.Message>; /MessageBoxA
0043BB01  |.  5F            POP     EDI
0043BB02  |.  5E            POP     ESI
0043BB03  |.  5D            POP     EBP
0043BB04  |.  32C0          XOR     AL, AL
0043BB06  |.  5B            POP     EBX
0043BB07  |.  83C4 10       ADD     ESP, 10
0043BB0A  |.  C3            RETN
0043BB0B  |-  8B4C24 24     MOV     ECX, DWORD PTR [ESP+24]
?

第二處((跳過必須從patcher.exe啟動的驗證)):

?

0043ABD9  |.  68 4C068D00   PUSH    008D064C                         ; /wstr2 = "game:cpw"
0043ABDE  |.  8B5D 10       MOV     EBX, DWORD PTR [EBP+10]          ; |
0043ABE1  |.  53            PUSH    EBX                              ; |wstr1
0043ABE2  |.  FF15 68048600 CALL    NEAR DWORD PTR [<&MSVCRT.wcsstr>>; /wcsstr
0043ABE8  |.  83C4 08       ADD     ESP, 8
0043ABEB  |.  85C0          TEST    EAX, EAX
0043ABED      75 29         JNZ     SHORT 0043AC18                   ;    JNZ(75)改為JMP(EB);不用參數(shù) 
0043ABEF  |.  6A 10         PUSH    10                               ; /Style = MB_OK|MB_ICONHAND|MB_APPLMODAL
0043ABF1  |.  68 40E68C00   PUSH    008CE640                         ; |Title = "ERROR"
0043ABF6  |.  68 28068D00   PUSH    008D0628                         ; |Text = "Please start game from launcher.exe"
0043ABFB  |.  50            PUSH    EAX                              ; |hOwner
0043ABFC  |.  FF15 F0068600 CALL    NEAR DWORD PTR [<&USER32.Message>; /MessageBoxA
0043AC02  |.  83C8 FF       OR      EAX, FFFFFFFF
0043AC05  |.  8B4D F0       MOV     ECX, DWORD PTR [EBP-10]
0043AC08  |.  64:890D 00000>MOV     DWORD PTR FS:[0], ECX
0043AC0F  |.  5F            POP     EDI
0043AC10  |.  5E            POP     ESI
0043AC11  |.  5B            POP     EBX
0043AC12  |.  8BE5          MOV     ESP, EBP
0043AC14  |.  5D            POP     EBP
0043AC15  |.  C2 1000       RETN    10
0043AC18  |>  68 18068D00   PUSH    008D0618                         ; /IniFileName = "./patcher.ini"

當(dāng)然第二處也可以不改但要 建個elementclient.exe快捷方式 參數(shù)定為"game:cpw"才可以不用 從 patcher.exe 進游戲...