[Release] Unpacked x700 main.exe of GMO (1.04.07 / 104G)

[bet0x]

Problem is that MU dev's, cant catch new structs of protos from official server ^_^

By that ur meaning u cant right? :D

BTW: nice job mauka

[mauka]

Problem is that MU dev's, cant catch new structs of protos from official server ^_^

hm, hook protocol core and get decrypted buffer and work with it..
U know it, but i will post it here for me and all others who will need it in future

Protocol Core

00663B3F   . E8 943E0000    CALL dump_NO_.006679D8

[SmallHabit]

Already made it :

#define DataRecvE ((void(*)(BYTE,PBYTE,DWORD,DWORD,...)) 0x006679D8)

void ProtocolCore(BYTE protoNum, BYTE * aRecv, int aLen, int aIndex, BOOL Encrypt, int serial)
{

		DataRecvE(protoNum,aRecv,aLen,aIndex,Encrypt,serial);
}

						BYTE ProtoHook1[] = {0xE9, 0xF1, 0xC7, 0xD9, 0xFF };
	
						memcpy((int*)0x663B3F,&ProtoHook1,sizeof(ProtoHook1));
					
						BYTE ProtoHook2[] = {0xFF, 0x15, 0x45, 0x03, 0x40, 0x00};
						memcpy((int*)0x400335,&ProtoHook2,sizeof(ProtoHook2));

						BYTE ProtoHook3[] = {0xE9,0x3B,0xEE,0xD5,0x00,0x90};
						memcpy((int*)0x40033B,&ProtoHook3,sizeof(ProtoHook3));

						_asm
						{
							MOV DWORD PTR DS:[00400345H],Offset ProtocolCore
						}

[ggragonss]

Could YOU unpack the main of Taiwan MUonline. (1.03e+).

www.muonline.com.tw (mublue)

[k2diablo]

Not all packets have FIX OPCODE, only some of them.

[asparagos]

bro y main.exe doesnt apear cant load ? i use windows 2008 r2 ?

[Shagoon]

Mirror Link:
Unpacked x700 main.exe of GMO (1.04.07 & 104G) - SeeItWorks .COM Download Center


...

[mauka]

Not all packets have FIX OPCODE, only some of them.

Kamil is right. Some packets have additional xor - such a GG packet etc.. depending on opcode
I dint study it yet

Added: i write small app for packet decryption, will post here maybe somebody will find it usefull



x700EncDec.rar

[icedoxforce]

Kamil is right. Some packets have additional xor - such a GG packet etc.. depending on opcode
I dint study it yet

Added: i write small app for packet decryption, will post here maybe somebody will find it usefull



x700EncDec.rar

Mauka u can post how i can get or hook , Protocolcore?

Web site about packet´s MuChina X700
[url=http://blog.sina.com.cn/s/blog_6354812b01012auy.html]Mu

[asparagos]

Tested on Win7 - 64Bit!

Offsets:

Mu.exe: 004ECCEB               . 74 12          JE SHORT unpacked.004ECCFF
Mu.exe: 004ECD46               . 75 5B          JNZ SHORT unpacked.004ECDA3
GG sucess: 004ED160               . 0F85 8A000000  JNZ unpacked.004ED1F0  
GameGuard: 004ED11D               . 74 19               JE SHORT unpacked.004ED138
RG #1: 004F016A     EB 23          JMP SHORT main.004F018F
RG #2: 00638349     EB 23          JMP SHORT main.0063836E
RG #3: 00638864     EB 23          JMP SHORT main.00638889

Crack Site Login System:
004AB541 - Cm StarterCore - Set Nop
0043DF96 - LoginBox * to Normal Characters - change PUSH 01 to PUSH 0
0043E4CC - Change - MOV EAX,DWORD PTR DS:[EAX+354] - to - MOV EAX,DWORD PTR DS:[EAX+350]
0043E4D5 - Change - MOV ECX,DWORD PTR DS:[ECX+354] - to - MOV ECX,DWORD PTR DS:[ECX+350]
0043E4DD - Change - CALL DWORD PTR DS:[EAX+30] - to - CALL DWORD PTR DS:[EAX+18]

Decrypted MuError.log
009D2197     |. E8 29FFFFFF    CALL Main_GGG.009D20C5 - Nop this call

Version:

2274<

Serial:

mwocvvz0x39vbcv3

No idea about IP, but on gmo its:

connect.muonline.webzen.com

Credits: Me & Willerson
Unpacked & Cracked (No resource guard, no login)
Downlaod link: Main.rar | Game Front

Full client and Patch:

[Asia]
http://az29570.vo.msecnd.net/muonline/ex700client.exe
[Europe]
http://az29571.vo.msecnd.net/muonline/ex700client.exe 
[North America]
http://az29572.vo.msecnd.net/muonline/ex700client.exe

-Manual Patch-
[Asia]
http://az29570.vo.msecnd.net/muonline/ex700manualpatch.zip
[Europe]
http://az29571.vo.msecnd.net/muonline/ex700manualpatch.zip
[North America]
http://az29572.vo.msecnd.net/muonline/ex700manualpatch.zip

PS. thous who needs crack CMcore and Login, please reffer to this --> guide <--

hi bro mauka legend i use this client [Asia]
http://az29570.vo.msecnd.net/muonline/ex700client.exe

and this patch Main.rar | Game Front

every iclick the main.exe no windows loadings apear how make works the main.exe

iuse windows 2008 r2 enterprice 64bit

thanks bro

[ggragonss]

Windows Servers always have some problems with the 2.5~3D games. or you can install dxdiag?

[asparagos]

Windows Servers always have some problems with the 2.5~3D games. or you can install dxdiag?

but if i update the auto update of Webzen main.exe works in os windows server 2008 r2 ? ithink have problem on main.exe Crack release ? not compatible for all os ?

[[RCZ]ShadowKing]

but if i update the auto update of Webzen main.exe works in os windows server 2008 r2 ? ithink have problem on main.exe Crack release ? not compatible for all os ?

Edit section headers and set full permission to all sections.

[asparagos]

Edit section headers and set full permission to all sections.

good day sir ShadowKing what you mean edit the headers and set full permission to all sections. the properties and compabilities ?

thank you for your reply and god bless

[[RCZ]ShadowKing]

Download LordPE and go PE Editor -> Sections -> Right click -> Edit section -> check executable, readable, writeable to all then save th exe.