[Perfect World] Multi Client + bypass autopatcher tutorial

[broer]

Originally Posted by akson

My english is poor
Download OllyDBG from
--------------*
Open OllyDBG
--------------*
File -> Open -> Choose your elementclient.exe
Right click -> Search for -> All referenced text strings(#pic1)

In the Text strings window
*Scroll to top & left click any line(#pic2)
Right click -> Search for Text
key in "launch" -> OK
Double click the line of ASCII "Plz start game from launcher.exe"(#pic3)

In the CPU window
Double click JNZ SHORT 00XXXXXX will show a Assemble box(#pic4)
change JNZ to JMP -> press Assemble button & close the box

Find again text in Text strings window
Search for "running"
do it again double click JE SHORT 00XXXXXX
change JE to JMP -> press Assemble button & close the box

Okay~
right click in CPU window -> Copy -> Select all
right click in CPU window -> Backup -> Update backup
right click in CPU window -> Copy to Executable -> Selection(#pic5)
Olly will show a File window
right click in File window -> Save file

now you can start the elementclient.exe directly

do u think ur tutorial will also works for other game as well...??? such as RF

[sspenang]

Ok... jump,multiclient work.. can guide how to make super zoom using odbg?

[dimode]

And is it possible to open a debug console or just to show NPC_ID's? I'm playing on other server and I need to turn NPC_ID on.
And btw, this guide works perfectly for my server. Could u pls make same tutorial for making unlimited jump, unlimited zoom and (if possible) turnin on debug console or NPC_ID?

[Yka]

Originally Posted by sspenang

Ok... jump,multiclient work.. can guide how to make super zoom using odbg?

Originally Posted by dimode

.... Could u pls make same tutorial for making unlimited jump, unlimited zoom and (if possible) turnin on debug console or NPC_ID?

Is jumping working ?

for unlimited zoom use :

Originally Posted by akson

open Olly
Search for sequence of commands
fadd dword ptr [esi+40]
fst dword ptr [esi+40]

004056BE . D985 CD000000 fld dword ptr [ebp+CD]
004056C4 . D846 40 fadd dword ptr [esi+40]
004056C7 . D956 40 fst dword ptr [esi+40]
004056CA . D81D FCAB8400 fcomp dword ptr [84ABFC] may be XXXXXX
004056D0 . DFE0 fstsw ax
004056D2 . 25 00410000 and eax, 4100
004056D7 . EB 03 jnz short 004056DC <---jnz change to jmp
004056D9 . 894E 40 mov dword ptr [esi+40], ecx
004056DC > 8B07 mov eax, dword ptr [edi]
004056DE . 3BC3 cmp eax, ebx
004056E0 . 0F85 E8000000 jnz 004057CE
004056E6 . 8957 14 mov dword ptr [edi+14], edx
004056E9 . D947 18 fld dword ptr [edi+18]
004056EC . D947 14 fld dword ptr [edi+14]
004056EF . D947 10 fld dword ptr [edi+10]
004056F2 . D9C0 fld st

[dimode]

Thnx bro =) It really works. And jump also should work on my server, but I just dunno what strings shoul I change.

[avande]

very good~

[alexprih91]

hey u said multi client works>???? how?? plz tell me i can only enter the game fast from link but how to multi cleint i heard i need renamer or somethink to rename the client plz guide me how to do it!!!

[zevorc]

just run the modded elementclient.exe twice or more.

[akasunadu69]

like alexprih, i can enter fast to the game but mutli doesn't work

In the CPU window
Double click JNZ SHORT 00XXXXXX will show a Assemble box(#pic4)
change JNZ to JMP -> press Assemble button & close the box

there is two command named JNZ SHORT XXXXXXX form me, do i have to change the both of them?

do it again double click JE SHORT 00XXXXXX
change JE to JMP -> press Assemble button & close the box

it's the same for this command.

someone answer me plz

(sorry for my english guys )

[lheng]

Hello!...the PH server just patched today and the elementclient version just changed so i followed the tutorials here for the multiclient and zoomhack..it worked perfectly but i cant find the unli jump command here..sir zevorc can u add the command for the unli jumps?...thanx,your a great help 2 us..^^...

[BetaBowElfe]

don't worry he is working on it i already send him the client

[yolak19]

nice betabowelfe

[Fluxd]

Originally Posted by yiman

I can start directly, but doesnt seem to work in multi. I heard we need to rename the client. How do i rename the client?I dont know how to use autoIT ..>.<

i just solved my problem which's like yours, when u add the keyword "running" in text box for the first time, u have to done the JE to JMP process first (scroll up a bit u'll find JE) then go back to text window again, find text, then go for "running" again, and do the exact process just like before, then at the end of the steps my suggestion save ur file with different name from your origin elementclient.exe file to avoid overwriting ur original elementclient file. Then start from your modified EC.exe,

So basically what u need to do is, modified "launch", then "Running", then go back to "Running" again.

hope it will works with the multiclient!

[gripo]

its doesnt work in new patch T_T

[l2kapsimo]

i did it...but ..dont work at lost city server!