Bypassing website check
Hi to all, this is my first guide lol xD.
Well, this guide is made for those that play MU Global and hate entering to their website in order to play the game.
In am going to start explaining a little of theory
A little of theory
Ok. This is what I am talking about:
If you enter with Mu.exe (launcher) it will appear that picture, don't letting you to enter, and if you press the OK button , game will close.
But there is something interesting...server list are there, so the game is in a normal state, and if we remove the "stupid box" we will play ^^.
Ok, how we do that?
1) Download OllyDBG.
2) Open main.exe with OllyDBG
3) Right click and click in Search for > All referenced text strings
4) Go to the top, right click ,Search for text and write MU with case sensitive option on.
5) The first "MU" you found press the enter (intro) button. You should appear here:
See the "JE" ? Well you have to select that line and convert it to a JMP. So select the line, press space bar and a text box will appear, just change JE for JMP.
6) Now the "stupid box" that blocked us to enter must have been dissapeared. But wait, there is another problem. If we enter in the game and select a server we will see that we can't write anything in the "Account box", only in the "Password box", so we can't login.
Thats why because there is something more than Mu.exe (launcher) and main.exe. Yeah, Webzen left us a hidden .exe in C:\Windows\System32 called CMStarterCore.exe. It is installed when you installed the software to run MU using their website.
So, in the legal way, you enter to their website, login, and click in "START GAME", then CMStarterCore.exe runs, but you don't notice it, you only see that Mu.exe (launcher) have been opened nothing more ^^.
Well less talk. You can't run by yourself CMStartCore.exe because it will give you an error, thats why it uses arguments. So I runned it clicking on "START GAME" and I saw the arguments
The only important thing are the numbers in bold letters 0000014527, the other things are random numbers and my username. Then what do you say 0000014527 is important and not the username?Code:00152310 22 43 3A 5C 57 49 4E 44 "C:\WIND 00152318 4F 57 53 5C 53 59 53 54 OWS\SYST 00152320 45 4D 33 32 5C 43 4D 53 EM32\CMS 00152328 74 61 72 74 65 72 43 6F tarterCo 00152330 72 65 2E 65 78 65 22 20 re.exe" 00152338 68 74 74 70 3A 2F 2F 77 http://w 00152340 77 77 2E 77 65 62 7A 65 ww.webze 00152348 6E 2E 63 6F 6D 2F 5F 46 n.com/_F 00152350 69 6C 65 73 2F 53 74 61 iles/Sta 00152358 72 74 65 72 49 6E 66 6F rterInfo 00152360 2E 78 6D 6C 7C 30 30 30 .xml|000 00152368 30 30 31 34 35 32 37 7C 0014527| 00152370 66 72 61 6D 6D 6D 7C 38 frammm|8 00152378 41 43 41 30 33 36 42 2D ACA036B- 00152380 46 39 41 32 2D 34 30 33 F9A2-403 00152388 36 2D 41 44 43 39 2D 42 6-ADC9-B 00152390 30 31 42 35 34 35 43 42 01B545CB 00152398 30 35 38 7C 31 7C 31 7C 058|1|1| 001523A0 32 7C 32 7C 30 00 00 00 2|2|0... 001523A8 46 00 14 00 13 01 0C 00 F....
Well main.exe, doesn't use your username, it uses 0000014527 , and I can't really tell you more about this, but that must be something related to a web browser cookie. And it must be related with your Account username, but I can't tell you 100% sure that my number will work for everybody :S We must check it.
EDIT => That number is related with the username, so it changes with it.
Now do the same you did for search for the word "MU" but now for "Login Request".
You should be here.
Select from PUSH 0B to CALL DWORD PTR DS:[EDX+50], do right click > Binary > Fill with NOPs.
Thats where it takes the number 0000014527 but since we won't use website we won't get the number, and we must code it for ourselves.
So add in the space we deleted, your number. How to get it? Login in muonline website, click in "START GAME" so CMStarterCore.exe opens, and now run GetNumber.exe (you can download it with the link on the bottom).
Where is the red box, left to your username, it is the secret number.
You have to change the bold numbers for your number.Code:30 = 0 31 = 1 32 = 2 33 = 3 34 = 4 35 = 5 36 = 6 37 = 7 38 = 8 39 = 9
Code:MOV DWORD PTR DS:[EBP-18],30303030 MOV DWORD PTR DS:[EBP-14],35343130 MOV DWORD PTR DS:[EBP-10],3732
The work is done ^^, so save the changes (I hope you know how :P) and play happy.
Btw, I think you must login at least 1 time on their website (and everytime you delete your cookies) before entering to the game, because the number 0000014527 must be related with your login in their website. But the rest of the times you don't have to login more
If you want you can download the main.exe I used for all of this, and also that same main.exe but fixed for don't need to enter on the website (is the last update 1.03z of today 18-6-2010). Also the GetNumber.exe
MEGAUPLOAD - The leading online storage and file delivery service
But don't forget 0014527 is not your number (is only mine), you need to put the number that you get with GetNumber.exe
Happy playing ^^
Reply With Quote
Originally Posted by [Soul-Reaper]
