[LEAK] MapleStory Korea Test v.1029 raw EXE w/ debuggables

[sunnyboy]

Anyone managed to decompile the DecodeForLocal function yet?

I already redid it in 6.8. This version fixes a lot of failed decompiles from 6.1

http://forum.ragezone.com/f921/leak-maplestory-korea-test-1029-a-1100141/index3.html#post8621473

 

[br1337]

Did anyone managed to decompile the source code using Ida?
If so, could you gently post here? I want to analyze the source, but i dont have access to ida here



Another question, is this a playable client?
Can we use this to access the game if we emulate the backend side?



Also, did anyone managed to decompile the class CInPacket?

 

[PrinceReborn]

Did anyone managed to decompile the source code using Ida?
If so, could you gently post here? I want to analyze the source, but i dont have access to ida here



Another question, is this a playable client?
Can we use this to access the game if we emulate the backend side?



Also, did anyone managed to decompile the class CInPacket?

See the post right above yours. I asked a similar question. Follow Sunnys links and you'll have everything you need.

 

[br1337]

Is it possible to export the reverse enginnered source code to cpp, .h files?
I really would like to read the pseudo-code.

 

[Hilia]

Is it possible to export the reverse enginnered source code to cpp, .h files?
I really would like to read the pseudo-code.

You can export all the crap to a .c file, resulting in something as shown below.

//----- (004160E0) --------------------------------------------------------
int __fastcall SecondaryStat::_ZtlSecureGet_tEmber_(SecondaryStat *this)
{
  int v1; // edx@1
  unsigned int v2; // esi@1
  int v3; // ecx@1
  int v4; // eax@1
  int result; // eax@1
  int v6; // edx@1
  int pExceptionObject; // [sp+4h] [bp-8h]@2


  v1 = this->_ZtlSecureTear_tEmber_[0];
  v2 = this->_ZtlSecureTear_tEmber__CS;
  v3 = this->_ZtlSecureTear_tEmber_[1];
  v4 = __ROL4__(v3, 5);
  result = v1 ^ v4;
  v6 = __ROR4__(v1 ^ 0xBAADF00D, 5);
  if ( v3 + v6 != v2 )
  {
    pExceptionObject = 5;
    _CxxThrowException(&pExceptionObject, &_TI1_AVZException__);
  }
  return result;
}


//----- (00416130) --------------------------------------------------------
int __fastcall SecondaryStat::_ZtlSecureGet_nBossWaitingLinesBuff_(SecondaryStat *this)
{
  int v1; // edx@1
  unsigned int v2; // esi@1
  int v3; // ecx@1
  int v4; // eax@1
  int result; // eax@1
  int v6; // edx@1
  int pExceptionObject; // [sp+4h] [bp-8h]@2


  v1 = this->_ZtlSecureTear_nBossWaitingLinesBuff_[0];
  v2 = this->_ZtlSecureTear_nBossWaitingLinesBuff__CS;
  v3 = this->_ZtlSecureTear_nBossWaitingLinesBuff_[1];
  v4 = __ROL4__(v3, 5);
  result = v1 ^ v4;
  v6 = __ROR4__(v1 ^ 0xBAADF00D, 5);
  if ( v3 + v6 != v2 )
  {
    pExceptionObject = 5;
    _CxxThrowException(&pExceptionObject, &_TI1_AVZException__);
  }
  return result;
}

 

[Diamondo25]

You can export all the crap to a .c file, resulting in something as shown below.

//----- (004160E0) --------------------------------------------------------
int __fastcall SecondaryStat::_ZtlSecureGet_tEmber_(SecondaryStat *this)
{
  int v1; // edx@1
  unsigned int v2; // esi@1
  int v3; // ecx@1
  int v4; // eax@1
  int result; // eax@1
  int v6; // edx@1
  int pExceptionObject; // [sp+4h] [bp-8h]@2


  v1 = this->_ZtlSecureTear_tEmber_[0];
  v2 = this->_ZtlSecureTear_tEmber__CS;
  v3 = this->_ZtlSecureTear_tEmber_[1];
  v4 = __ROL4__(v3, 5);
  result = v1 ^ v4;
  v6 = __ROR4__(v1 ^ 0xBAADF00D, 5);
  if ( v3 + v6 != v2 )
  {
    pExceptionObject = 5;
    _CxxThrowException(&pExceptionObject, &_TI1_AVZException__);
  }
  return result;
}


//----- (00416130) --------------------------------------------------------
int __fastcall SecondaryStat::_ZtlSecureGet_nBossWaitingLinesBuff_(SecondaryStat *this)
{
  int v1; // edx@1
  unsigned int v2; // esi@1
  int v3; // ecx@1
  int v4; // eax@1
  int result; // eax@1
  int v6; // edx@1
  int pExceptionObject; // [sp+4h] [bp-8h]@2


  v1 = this->_ZtlSecureTear_nBossWaitingLinesBuff_[0];
  v2 = this->_ZtlSecureTear_nBossWaitingLinesBuff__CS;
  v3 = this->_ZtlSecureTear_nBossWaitingLinesBuff_[1];
  v4 = __ROL4__(v3, 5);
  result = v1 ^ v4;
  v6 = __ROR4__(v1 ^ 0xBAADF00D, 5);
  if ( v3 + v6 != v2 )
  {
    pExceptionObject = 5;
    _CxxThrowException(&pExceptionObject, &_TI1_AVZException__);
  }
  return result;
}

nBossWaitingLinesBuff. what.

 

[retep998]

nBossWaitingLinesBuff. what.

In recent maple versions they added a UI to easily join boss raids, where you get put into a queue until there's a spot and enough people to join you and then it teleports you to the boss region. In exchange for using the system you get a special buff.

 

[Diamondo25]

In recent maple versions they added a UI to easily join boss raids, where you get put into a queue until there's a spot and enough people to join you and then it teleports you to the boss region. In exchange for using the system you get a special buff.

I almost thought you were talking about the buff being the actual counter, heh.

 

[souravipc53]

I'm a little confused here. A noob in this kinda stuff, actually.
I've been learning C# in my first year and Java this year in university, I'm coding with the v83 Solaxia source right now which has been a real pleasure so far. Everyone seems so excited about this so I'm kinda eager to learn more about this. So my question is, what is this release? Like.. is it a high version korea MS client written in C++? Is it C++ at all? Is it the the testing files of server side classes?
Thanks in advance.

Client is written in c++ . Its for test server.

 

[br1337]

Is it possible to connect in game with this client?

 

[topkek]

Is it possible to connect in game with this client?

You must be registered to see links

after doing this i remembered why i hate this crappy game lol.

.text:006EC185 loc_6EC185:                             ; CODE XREF: CClientSocket::Connect(sockaddr_in const *)+1C2j
.text:006EC185 cmp     eax, ecx
.text:006EC187 jbe     loc_6EC197
.text:006EC18D sub     eax, 4
.text:006EC190 mov     [eax], ebx
.text:006EC192 jmp     loc_6EC185
.text:006EC197 ; ---------------------------------------------------------------------------
.text:006EC197
.text:006EC197 loc_6EC197:                             ; CODE XREF: CClientSocket::Connect(sockaddr_in const *)+1B7j
.text:006EC197 xor     eax, eax
.text:006EC199 xor     ecx, ecx
.text:006EC19B retn

this Ducking stack murdering poop is littered everywhere, when the hell did they start doing this?

 

[Xanix]

NVM
Ignore this post

 

[ilvmoney]

could anyone upload kmst 1.2.29 Client or kmst 1.2.10 upper (1.2.29 below) please?

 

[br1337]

Does anyone knows which function is responsable for moving the character?

 

[Eric]

Does anyone knows which function is responsable for moving the character?

The actual packet is CUserRemote::OnMove or OnUserMove, but the decoding of it (inside the packet, or MovementParse) is called CMovePath:ecode.

..and if you need it, Follow Character movement is CUserLocal::OnPassiveMove.

 

[topkek]

Well poop, so that's what it's used for :mellow:

 

[Linkerzz]

Well poop, so that's what it's used for :mellow:

Just for clarification.. Wtf is this?

 

[even]

Well poop, so that's what it's used for :mellow:

Its a countdown for when the world will end.

 

[Diamondo25]

Well poop, so that's what it's used for :mellow:

That's a bit disappointing

 

[br1337]

Anyone managed to get in game(private server or real server) with this client?