Ex702 Japanese Main Unpacked & cracked and Loader too.

Hi guys... i have something to Show to all of you.....

http://mu-dl-gameon.nefficient.jp/mu...U_20120919.exe - Ex702 Client

main_unpacked_original.rar - Main Unpacked Original

main_unpacked_cracked.rar - Main Unpacked & Cracked

Injector.rar - Injector( sometimes can crash with LoadLibrary Error, Just Try again until it works ).


Here i Leave a DLL Source... just compile and use with Injector.

Code:

---

#include "stdafx.h"
#include <Windows.h>

BOOL TrampolineAPI(HMODULE hModule, LPCSTR DllName, LPCSTR ProcName, DWORD dwReplaced)
{
  DWORD dwReturn;
  DWORD dwOldProtect;
  DWORD dwAddressToHook =  (DWORD)GetProcAddress(GetModuleHandle(DllName), ProcName);
  BYTE *pbTargetCode = (BYTE *)dwAddressToHook;
  BYTE *pbReplaced = (BYTE *)dwReplaced;
  VirtualProtect((LPVOID)dwAddressToHook, 5,      PAGE_EXECUTE_READWRITE, &dwOldProtect);
  *pbTargetCode++ = 0xE9;
  *((signed int*)(pbTargetCode)) = pbReplaced - (pbTargetCode + 4);
  VirtualProtect((LPVOID)dwAddressToHook, 5, PAGE_EXECUTE,  &dwOldProtect);
  dwReturn = dwAddressToHook + 5;
  FlushInstructionCache(GetCurrentProcess(), NULL, NULL);
  return TRUE;
}

void Crack()
{
        DWORD OldProtect;
        if(VirtualProtect(LPVOID(0x00400000),((35921408)+2),PAGE_EXECUTE_READWRITE,&OldProtect)) // 1.04.15
        {

                // JPN 1.04.15 - ex702
                *(BYTE*)(0x004ED0F4) = 0xEB; //MU.exe
                *(BYTE*)(0x004ED55C) = 0x75; //MuJp

                *(BYTE*)(0x004ED59F) = 0xE9;
                *(BYTE*)(0x004ED5A0) = 0x97;
                *(BYTE*)(0x004ED5A1) = 0x00;
                *(BYTE*)(0x004ED5A2) = 0x00;
                *(BYTE*)(0x004ED5A3) = 0x00;
                *(BYTE*)(0x004ED5A4) = 0x90;

                //
                *(BYTE*)(0x004ED509) = 0x90;
                *(BYTE*)(0x004ED50A) = 0x90;
        }
}

VOID WINAPI GetStartupInfoA_Mine(LPSTARTUPINFO lpStartupInfo )
{
        Crack();
}

BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpReserved)
{
        if (fdwReason == DLL_PROCESS_ATTACH)
        {
                TrampolineAPI(hinstDLL, "Kernel32.dll", "GetStartupInfoA",  (DWORD)GetStartupInfoA_Mine);
        }
        return TRUE;
}

---

Later i Try to post a tutorial to remove Japanese CmStarterCore...

Cheer's for all and good Luck.

its crashes be cause u got no set call original function in your detoured function

Code:

---

VOID WINAPI GetStartupInfoA_Mine(LPSTARTUPINFO lpStartupInfo )
{
 return GetStartupInfoA(lpStartupInfo);// call original function and after do whatever u need..
 Crack();
}

---

try to use detours from MS, it is easy to operate with them... =)

Quote:

---

Originally Posted by mauka

its crashes be cause u got no set call original function in your detoured function

Code:

---

VOID WINAPI GetStartupInfoA_Mine(LPSTARTUPINFO lpStartupInfo )
{
 return GetStartupInfoA(lpStartupInfo);// call original function and after do whatever u need..
 Crack();
}

---

---

Quote:

---

Originally Posted by SmallHabit

try to use detours from MS, it is easy to operate with them... =)

---

Yeah... id Know all this... i posted it only to the people that is developing a server... i dont developing a server for this version... i leave it for others coders xD.

[]'s

main_umpacked or cracked off line link dow

Quote:

---

Originally Posted by Yag4mi2k

main_umpacked or cracked off line link dow

---

Checked Links here.. all online.

[]'s

wilerson link bloqued (Free Cloud Storage - MediaFire)

Can not change other network disk

I download all . while run them but nothing to see.

thanks, link online for me..........

WHo can start the main
?
dead?