Bypassing website check

Junior Spellweaver
Joined
Jul 24, 2007
Messages
139
Reaction score
30
Hi to all, this is my first guide lol xD.

Well, this guide is made for those that play MU Global and hate entering to their website in order to play the game.

In am going to start explaining a little of theory


A little of theory

Ok. This is what I am talking about:

Holy - Bypassing website check - RaGEZONE Forums


If you enter with Mu.exe (launcher) it will appear that picture, don't letting you to enter, and if you press the OK button , game will close.

But there is something interesting...server list are there, so the game is in a normal state, and if we remove the "stupid box" we will play ^^.

Ok, how we do that?

1) Download OllyDBG.

2) Open main.exe with OllyDBG

3) Right click and click in Search for > All referenced text strings

Holy - Bypassing website check - RaGEZONE Forums


4) Go to the top, right click ,Search for text and write MU with case sensitive option on.

Holy - Bypassing website check - RaGEZONE Forums


5) The first "MU" you found press the enter (intro) button. You should appear here:

Holy - Bypassing website check - RaGEZONE Forums


See the "JE" ? Well you have to select that line and convert it to a JMP. So select the line, press space bar and a text box will appear, just change JE for JMP.

Holy - Bypassing website check - RaGEZONE Forums


6) Now the "stupid box" that blocked us to enter must have been dissapeared. But wait, there is another problem. If we enter in the game and select a server we will see that we can't write anything in the "Account box", only in the "Password box", so we can't login.

Holy - Bypassing website check - RaGEZONE Forums


Thats why because there is something more than Mu.exe (launcher) and main.exe. Yeah, Webzen left us a hidden .exe in C:\Windows\System32 called CMStarterCore.exe. It is installed when you installed the software to run MU using their website.

So, in the legal way, you enter to their website, login, and click in "START GAME", then CMStarterCore.exe runs, but you don't notice it, you only see that Mu.exe (launcher) have been opened nothing more ^^.

Well less talk. You can't run by yourself CMStartCore.exe because it will give you an error, thats why it uses arguments. So I runned it clicking on "START GAME" and I saw the arguments

Code:
00152310  22 43 3A 5C 57 49 4E 44  "C:\WIND
00152318  4F 57 53 5C 53 59 53 54  OWS\SYST
00152320  45 4D 33 32 5C 43 4D 53  EM32\CMS
00152328  74 61 72 74 65 72 43 6F  tarterCo
00152330  72 65 2E 65 78 65 22 20  re.exe"
00152338  68 74 74 70 3A 2F 2F 77  http://w
00152340  77 77 2E 77 65 62 7A 65  ww.webze
00152348  6E 2E 63 6F 6D 2F 5F 46  n.com/_F
00152350  69 6C 65 73 2F 53 74 61  iles/Sta
00152358  72 74 65 72 49 6E 66 6F  rterInfo
00152360  2E 78 6D 6C 7C 30 30 30  .xml|[B]000[/B]
00152368  30 30 31 34 35 32 37 7C  [B]0014527[/B]|
00152370  66 72 61 6D 6D 6D 7C 38  frammm|8
00152378  41 43 41 30 33 36 42 2D  ACA036B-
00152380  46 39 41 32 2D 34 30 33  F9A2-403
00152388  36 2D 41 44 43 39 2D 42  6-ADC9-B
00152390  30 31 42 35 34 35 43 42  01B545CB
00152398  30 35 38 7C 31 7C 31 7C  058|1|1|
001523A0  32 7C 32 7C 30 00 00 00  2|2|0...
001523A8  46 00 14 00 13 01 0C 00  F....

The only important thing are the numbers in bold letters
0000014527, the other things are random numbers and my username. Then what do you say 0000014527 is important and not the username?

Well main.exe, doesn't use your username, it uses
0000014527 , and I can't really tell you more about this, but that must be something related to a web browser cookie. And it must be related with your Account username, but I can't tell you 100% sure that my number will work for everybody :S We must check it.

EDIT => That number is related with the username, so it changes with it.

Now do the same you did for search for the word "MU" but now for "Login Request".

Holy - Bypassing website check - RaGEZONE Forums


You should be here.

Select from PUSH 0B to CALL DWORD PTR DS:[EDX+50], do right click > Binary > Fill with NOPs.

Thats where it takes
the number 0000014527 but since we won't use website we won't get the number, and we must code it for ourselves.

So add in the space we deleted, your number. How to get it? Login in muonline website, click in "START GAME" so CMStarterCore.exe opens, and now run GetNumber.exe (you can download it with the link on the bottom).

Where is the red box, left to your username, it is the secret number.

Holy - Bypassing website check - RaGEZONE Forums


Code:
30 = 0
31 = 1
32 = 2
33 = 3
34 = 4
35 = 5
36 = 6
37 = 7
38 = 8
39 = 9

You have to change the bold numbers for your number.

Code:
MOV DWORD PTR DS:[EBP-18],[B]30303030[/B]
MOV DWORD PTR DS:[EBP-14],[B]35343130[/B]
MOV DWORD PTR DS:[EBP-10],[B]3732[/B]
Holy - Bypassing website check - RaGEZONE Forums


The work is done ^^, so save the changes (I hope you know how :P) and play happy.

Btw, I think you must login at least 1 time on their website (and everytime you delete your cookies) before entering to the game, because the number 0000014527 must be related with your login in their website. But the rest of the times you don't have to login more :thumbup:

If you want you can download the main.exe I used for all of this, and also that same main.exe but fixed for don't need to enter on the website (is the last update 1.03z of today 18-6-2010). Also the GetNumber.exe



But don't forget 0014527 is not your number (is only mine), you need to put the number that you get with GetNumber.exe

Happy playing ^^
 
Last edited:
well ii did tried and also changed the version and serial number but if keeps asking to input my username and i cant input it only the password

from some reason that username field is stucked for me

i dint do the last step with that core program cause i only whant to use it in a private server

any hints :P i whould be gratefull
 
well ii did tried and also changed the version and serial number but if keeps asking to input my username and i cant input it only the password

from some reason that username field is stucked for me

i dint do the last step with that core program cause i only whant to use it in a private server

any hints :P i whould be gratefull

As I said the Username field must be blocked, and you have to enter your number and save the changes.
 
Ahh, yes, I didn't read good, you want to use it for a private server, so let me find how to unblock username field.
 
i've tried and got the number but its useless if you are trying to use the main for private server

also i've tried to unlock that user field but was unsuccessful

maybe HOLY is doing better and will share his knowledge
 
i've tried and got the number but its useless if you are trying to use the main for private server

also i've tried to unlock that user field but was unsuccessful

maybe HOLY is doing better and will share his knowledge

more good is edit the server struct to accept numbers and validate them.

see you
 
Back