Bypassing website check

Hi to all, this is my first guide lol xD.

Well, this guide is made for those that play MU Global and hate entering to their website in order to play the game.

In am going to start explaining a little of theory

A little of theory

Ok. This is what I am talking about:

http://img143.imageshack.us/img143/1...1815350000.jpg

If you enter with Mu.exe (launcher) it will appear that picture, don't letting you to enter, and if you press the OK button , game will close.

But there is something interesting...server list are there, so the game is in a normal state, and if we remove the "stupid box" we will play ^^.

Ok, how we do that?

1) Download OllyDBG.

2) Open main.exe with OllyDBG

3) Right click and click in Search for > All referenced text strings

http://img411.imageshack.us/img411/7...2010155943.png

4) Go to the top, right click ,Search for text and write MU with case sensitive option on.

http://img715.imageshack.us/img715/3...2010160241.png

5) The first "MU" you found press the enter (intro) button. You should appear here:

http://img35.imageshack.us/img35/145...2010174237.png

See the "JE" ? Well you have to select that line and convert it to a JMP. So select the line, press space bar and a text box will appear, just change JE for JMP.

http://img191.imageshack.us/img191/7...2010174534.png

6) Now the "stupid box" that blocked us to enter must have been dissapeared. But wait, there is another problem. If we enter in the game and select a server we will see that we can't write anything in the "Account box", only in the "Password box", so we can't login.

http://img203.imageshack.us/img203/6...1817530000.jpg

Thats why because there is something more than Mu.exe (launcher) and main.exe. Yeah, Webzen left us a hidden .exe in C:\Windows\System32 called CMStarterCore.exe. It is installed when you installed the software to run MU using their website.

So, in the legal way, you enter to their website, login, and click in "START GAME", then CMStarterCore.exe runs, but you don't notice it, you only see that Mu.exe (launcher) have been opened nothing more ^^.

Well less talk. You can't run by yourself CMStartCore.exe because it will give you an error, thats why it uses arguments. So I runned it clicking on "START GAME" and I saw the arguments

Code:

---

00152310  22 43 3A 5C 57 49 4E 44  "C:\WIND
00152318  4F 57 53 5C 53 59 53 54  OWS\SYST
00152320  45 4D 33 32 5C 43 4D 53  EM32\CMS
00152328  74 61 72 74 65 72 43 6F  tarterCo
00152330  72 65 2E 65 78 65 22 20  re.exe"
00152338  68 74 74 70 3A 2F 2F 77  http://w
00152340  77 77 2E 77 65 62 7A 65  ww.webze
00152348  6E 2E 63 6F 6D 2F 5F 46  n.com/_F
00152350  69 6C 65 73 2F 53 74 61  iles/Sta
00152358  72 74 65 72 49 6E 66 6F  rterInfo
00152360  2E 78 6D 6C 7C 30 30 30  .xml|000
00152368  30 30 31 34 35 32 37 7C  0014527|
00152370  66 72 61 6D 6D 6D 7C 38  frammm|8
00152378  41 43 41 30 33 36 42 2D  ACA036B-
00152380  46 39 41 32 2D 34 30 33  F9A2-403
00152388  36 2D 41 44 43 39 2D 42  6-ADC9-B
00152390  30 31 42 35 34 35 43 42  01B545CB
00152398  30 35 38 7C 31 7C 31 7C  058|1|1|
001523A0  32 7C 32 7C 30 00 00 00  2|2|0...
001523A8  46 00 14 00 13 01 0C 00  F....

---

The only important thing are the numbers in bold letters 0000014527, the other things are random numbers and my username. Then what do you say 0000014527 is important and not the username?

Well main.exe, doesn't use your username, it uses 0000014527 , and I can't really tell you more about this, but that must be something related to a web browser cookie. And it must be related with your Account username, but I can't tell you 100% sure that my number will work for everybody :S We must check it.

EDIT => That number is related with the username, so it changes with it.

Now do the same you did for search for the word "MU" but now for "Login Request".

http://img408.imageshack.us/img408/9...2010174850.png

You should be here.

Select from PUSH 0B to CALL DWORD PTR DS:[EDX+50], do right click > Binary > Fill with NOPs.

Thats where it takes the number 0000014527 but since we won't use website we won't get the number, and we must code it for ourselves.

So add in the space we deleted, your number. How to get it? Login in muonline website, click in "START GAME" so CMStarterCore.exe opens, and now run GetNumber.exe (you can download it with the link on the bottom).

Where is the red box, left to your username, it is the secret number.

http://img249.imageshack.us/img249/3...2010192721.png

Code:

---

30 = 0
31 = 1
32 = 2
33 = 3
34 = 4
35 = 5
36 = 6
37 = 7
38 = 8
39 = 9

---

You have to change the bold numbers for your number.

Code:

---

MOV DWORD PTR DS:[EBP-18],30303030
MOV DWORD PTR DS:[EBP-14],35343130
MOV DWORD PTR DS:[EBP-10],3732

---

http://img180.imageshack.us/img180/7...2010181852.png

The work is done ^^, so save the changes (I hope you know how :P) and play happy.

Btw, I think you must login at least 1 time on their website (and everytime you delete your cookies) before entering to the game, because the number 0000014527 must be related with your login in their website. But the rest of the times you don't have to login more :thumbup:

If you want you can download the main.exe I used for all of this, and also that same main.exe but fixed for don't need to enter on the website (is the last update 1.03z of today 18-6-2010). Also the GetNumber.exe

MEGAUPLOAD - The leading online storage and file delivery service

But don't forget 0014527 is not your number (is only mine), you need to put the number that you get with GetNumber.exe

Happy playing ^^

thank you

PS and also if i want to connect to a private server using this main is it pausible ?

Quote:

---

Originally Posted by [Soul-Reaper]

thank you

PS and also if i want to connect to a private server using this main is it pausible ?

---

Yes, search for connect.muonline.webzen.com in a hex editor like XVI32 and replace it for the private server IP.

well ii did tried and also changed the version and serial number but if keeps asking to input my username and i cant input it only the password

from some reason that username field is stucked for me

i dint do the last step with that core program cause i only whant to use it in a private server

any hints :P i whould be gratefull

Quote:

---

Originally Posted by [Soul-Reaper]

well ii did tried and also changed the version and serial number but if keeps asking to input my username and i cant input it only the password

from some reason that username field is stucked for me

i dint do the last step with that core program cause i only whant to use it in a private server

any hints :P i whould be gratefull

---

As I said the Username field must be blocked, and you have to enter your number and save the changes.

and if i block the username i cant use the main as a private server because u need a separate block filed for each username am i right?

Ahh, yes, I didn't read good, you want to use it for a private server, so let me find how to unblock username field.

Holy,

Hi... Nice guide...

But I can not get my number.

Your number is displayed in getNumber.exe, but no number appears. Where did I go wrong then?

i've tried and got the number but its useless if you are trying to use the main for private server

also i've tried to unlock that user field but was unsuccessful

maybe HOLY is doing better and will share his knowledge

Quote:

---

Originally Posted by [Soul-Reaper]

i've tried and got the number but its useless if you are trying to use the main for private server

also i've tried to unlock that user field but was unsuccessful

maybe HOLY is doing better and will share his knowledge

---

more good is edit the server struct to accept numbers and validate them.

see you

kind a useless :D since u can simply start CMStarter with params.. and no need login thought web or cracking main.exe.. waste of time

anyway thats for guide ;D

I need GG bypass, can i simply crack the main for GG? xD

yes u can the same way u do it on korean versions

config.ini read error

gg init error

> ResourceGuard Error

http://i50.tinypic.com/2wf1z08.jpg

Final progress , if i enter my password it says "Incorrect Password"

wtf?

@SoulReapper do you play gmo? xD

yes i play gmo

did u get the cmstarter number?

Quote:

---

Originally Posted by [Soul-Reaper]

yes i play gmo

did u get the cmstarter number?

---

dohh ofc ><

Quote:

---

MOV DWORD PTR DS:[EBP-18],30303030
MOV DWORD PTR DS:[EBP-14],38383038
MOV DWORD PTR DS:[EBP-10],3439


30 = 0
31 = 1
32 = 2
33 = 3
34 = 4
35 = 5
36 = 6
37 = 7
38 = 8
39 = 9



0000880849

---

worked for me

and its still working

ill try clearing my chache and cokies to see if i get another number and ill retry

Sure?
What about checksum oO?
DIDN't pwned you?

i only get disconnected after 5-10 minutes of gameplay

did someone made any new progress on this

cause i didnt found yet how to unlock that account field

can we use this in private server?

tnx :) great guide

useless crack and bypass

Quote:

---

Originally Posted by mauka

kind a useless :D since u can simply start CMStarter with params.. and no need login thought web or cracking main.exe.. waste of time

anyway thats for guide ;D

---

As mauka said - use the CMStarterCore parameters and start the game whenever u want (no need to change anything in the game).

Offtopic
Would be awesome if it would work for SUN the same as for MU, but SUN has different login (login with hash check from db when u login in web and no login box in the game) ;( maybe anyone was successful in bypassing it?

can we use the web starter for private servers too?

Quote:

---

Originally Posted by darckalan

can we use the web starter for private servers too?

---

It would require an ID system instead of username -> a separate server maybe.

Hi bro, i have a question, why when i run the main I get an error?? and a message like this appear: "a debugger has been found running in your system", well thank you for ur response.:blushing:

Hi all, this is great guide but i got small problem when i try find "Login Request" i got some like this and where write mine number ?
Thx alot.
PS:Screen -->http://zapodaj.net/8e2569aa159e.bmp.html