Unpacked x700 main.exe of GMO (1.04.07 / 104G)

http://img338.imageshack.us/img338/9210/19733568.png

Tested on Win7 - 64Bit!

Offsets:

Code:

---

Mu.exe: 004ECCEB              . 74 12          JE SHORT unpacked.004ECCFF
Mu.exe: 004ECD46              . 75 5B          JNZ SHORT unpacked.004ECDA3
GG sucess: 004ED160              . 0F85 8A000000  JNZ unpacked.004ED1F0 
GameGuard: 004ED11D              . 74 19              JE SHORT unpacked.004ED138
RG #1: 004F016A    EB 23          JMP SHORT main.004F018F
RG #2: 00638349    EB 23          JMP SHORT main.0063836E
RG #3: 00638864    EB 23          JMP SHORT main.00638889

Crack Site Login System:
004AB541 - Cm StarterCore - Set Nop
0043DF96 - LoginBox * to Normal Characters - change PUSH 01 to PUSH 0
0043E4CC - Change - MOV EAX,DWORD PTR DS:[EAX+354] - to - MOV EAX,DWORD PTR DS:[EAX+350]
0043E4D5 - Change - MOV ECX,DWORD PTR DS:[ECX+354] - to - MOV ECX,DWORD PTR DS:[ECX+350]
0043E4DD - Change - CALL DWORD PTR DS:[EAX+30] - to - CALL DWORD PTR DS:[EAX+18]

Decrypted MuError.log
009D2197    |. E8 29FFFFFF    CALL Main_GGG.009D20C5 - Nop this call

---

Version:

Code:

---

2274<

---

Serial:

Code:

---

mwocvvz0x39vbcv3

---

No idea about IP, but on gmo its:

Code:

---

connect.muonline.webzen.com

---

Credits: Me & Willerson
Unpacked & Cracked (No resource guard, no login)
Downlaod link: Main.rar | Game Front

Full client and Patch:

Code:

---

[Asia]
http://az29570.vo.msecnd.net/muonline/ex700client.exe
[Europe]
http://az29571.vo.msecnd.net/muonline/ex700client.exe
[North America]
http://az29572.vo.msecnd.net/muonline/ex700client.exe

-Manual Patch-
[Asia]
http://az29570.vo.msecnd.net/muonline/ex700manualpatch.zip
[Europe]
http://az29571.vo.msecnd.net/muonline/ex700manualpatch.zip
[North America]
http://az29572.vo.msecnd.net/muonline/ex700manualpatch.zip

---

PS. thous who needs crack CMcore and Login, please reffer to this --> guide <--

Here is fully main.exe cracked: http://www.gamefront.com/files/21825..._fullRGFix.rar
Downlaod tool to decrypt packets: http://forum.ragezone.com/f197/unpac...ml#post7079941

Quote:

---

Originally Posted by mauka

Yup and clear this topic xD

---

Hmm i get just white screen when the main loads but after it just crashes. (Win 7 32bit)

Topic moved to release section and cleaned!

Can you give a full client download address?Thank you

Webzen - The Next Generation of Free-to-Play Online Games

Big Man, best work, thanks y my respect....

Run the "MAIN" flash will shut down, whether to supporting?

Anyone knows the CMStarterCore_Check offset? (I cant find it :?:)

Edit: These i found but correct me if im wrong

Code:

---

Login1 -> 0043DF96
Login2 -> 0043E4CC
Login3 -> 0043E4D5
Login4 -> 0043E4DD
CMStarterCore_Check -> ????????

---

Crack Site Login System:

004AB541 - Cm StarterCore - Set Nop in 2 Bytes
0043DF96 - LoginBox * to Normal Characters - change PUSH 01 to PUSH 0
0043E4CC - Change - MOV EAX,DWORD PTR DS:[EAX+354] - to - MOV EAX,DWORD PTR DS:[EAX+350]
0043E4D5 - Change - MOV ECX,DWORD PTR DS:[ECX+354] - to - MOV ECX,DWORD PTR DS:[ECX+350]
0043E4DD - Change - CALL DWORD PTR DS:[EAX+30] - to - CALL DWORD PTR DS:[EAX+18]

[]'s

Quote:

---

Originally Posted by willerson

Crack Site Login System:

004AB541 - Cm StarterCore - Set Nop in 2 Bytes
0043DF96 - LoginBox * to Normal Characters - change PUSH 01 to PUSH 0
0043E4CC - Change - MOV EAX,DWORD PTR DS:[EAX+354] - to - MOV EAX,DWORD PTR DS:[EAX+350]
0043E4D5 - Change - MOV ECX,DWORD PTR DS:[ECX+354] - to - MOV ECX,DWORD PTR DS:[ECX+350]
0043E4DD - Change - CALL DWORD PTR DS:[EAX+30] - to - CALL DWORD PTR DS:[EAX+18]

[]'s

---

Thx. I couldnt find first offset ><

Attachment 106700

Can you give can be used in the MAIN?

If the main is other encoding so is useless now? Or am I wrong?

Big thanks :P

No work

Spoiler:

http://img338.imageshack.us/img338/9210/19733568.png