• Unfortunately, we have experienced significant hard drive damage that requires urgent maintenance and rebuilding. The forum will be a state of read only until we install our new drives and rebuild all the configurations needed. Please follow our Facebook page for updates, we will be back up shortly! (The forum could go offline at any given time due to the nature of the failed drives whilst awaiting the upgrades.) When you see an Incapsula error, you know we are in the process of migration.

fix SeasonX Sp1 GS 1.01.10

Newbie Spellweaver
Joined
May 16, 2011
Messages
93
Reaction score
28
HookThis((DWORD)&NewCharList,0x00832B14);
*(BYTE*)(0x00832B14) = 0xE9;

//JGPGetCharList()

int changeupT;
__declspec(naked) void NewCharList()
{

__asm
{
mov changeupT,0x00
mov eax, dword ptr ds: [ebp-0x18]
movzx ecx, byte ptr ds: [eax+0x1A]
and ecx, 0xF0
mov byte ptr ds:[ebp-0x0155], cl //pCList.CharSet[CS_CLASS] = CS_GET_CLASS(lpCL->Class);
mov eax, dword ptr ds: [ebp-0x18]
movzx ecx, byte ptr ds: [eax+0x1A]
and ecx, 0x01
mov byte ptr ds:[ebp-0x01C4], cl
mov eax, dword ptr ds: [ebp-0x18]
movzx ecx, byte ptr ds: [eax+0x1A]
sar ecx, 0x01
and ecx, 0x01
mov changeupT,ecx
cmp changeupT,1
je IITT
mov byte ptr ds:[ebp-0x01C4],0x01
IITT:
mov eax,changeupT
shl eax, 0x02
and eax, 0x04
movzx ecx, byte ptr ds:[ebp-0x0155]
or ecx, eax
mov byte ptr ds:[ebp-0x0155], cl
mov eax, dword ptr [ebp-0x01C4]
shl eax, 0x03
and eax, 0x08
movzx ecx, byte ptr ds:[ebp-0x0155]
or ecx, eax
mov byte ptr ds:[ebp-0x0155], cl
mov edi,0x00832B75
jmp edi

}

}

HookThis((DWORD)&GCMagicListMultiSendNew_DataSend,0x00853A26);
//Fix Char MagicList

void GCMagicListMultiSendNew_DataSend(int aIndex, LPBYTE lpMsg, DWORD size)
{
BYTE NewSend[255];
memcpy(&NewSend[3],&lpMsg[2],size - 2);
NewSend[0] = 0xC2;
NewSend[1] = SET_NUMBERH(size);
NewSend[2] = SET_NUMBERL(size);
DataSend(aIndex,NewSend,size);
}
 
Last edited by a moderator:
Skilled Illusionist
Joined
Mar 5, 2015
Messages
308
Reaction score
119
HookThis((DWORD)&NewCharList,0x00832B14);
*(BYTE*)(0x00832B14) = 0xE9;

//JGPGetCharList()

int changeupT;
__declspec(naked) void NewCharList()
{

__asm
{
mov changeupT,0x00
mov eax, dword ptr ds: [ebp-0x18]
movzx ecx, byte ptr ds: [eax+0x1A]
and ecx, 0xF0
mov byte ptr ds:[ebp-0x0155], cl //pCList.CharSet[CS_CLASS] = CS_GET_CLASS(lpCL->Class);
mov eax, dword ptr ds: [ebp-0x18]
movzx ecx, byte ptr ds: [eax+0x1A]
and ecx, 0x01
mov byte ptr ds:[ebp-0x01C4], cl
mov eax, dword ptr ds: [ebp-0x18]
movzx ecx, byte ptr ds: [eax+0x1A]
sar ecx, 0x01
and ecx, 0x01
mov changeupT,ecx
cmp changeupT,1
je IITT
mov byte ptr ds:[ebp-0x01C4],0x01
IITT:
mov eax,changeupT
shl eax, 0x02
and eax, 0x04
movzx ecx, byte ptr ds:[ebp-0x0155]
or ecx, eax
mov byte ptr ds:[ebp-0x0155], cl
mov eax, dword ptr [ebp-0x01C4]
shl eax, 0x03
and eax, 0x08
movzx ecx, byte ptr ds:[ebp-0x0155]
or ecx, eax
mov byte ptr ds:[ebp-0x0155], cl
mov edi,0x00832B75
jmp edi

}

}

I need to change something? In login protocol?
 
Junior Spellweaver
Joined
Feb 11, 2014
Messages
142
Reaction score
34
May Hook KGExDLL.DLL?
Is that what are you trying to mean?
 
Newbie Spellweaver
Joined
May 16, 2011
Messages
93
Reaction score
28
city7 - fix SeasonX Sp1 GS 1.01.10 - RaGEZONE Forums
 
King of the bongo
Joined
Oct 17, 2009
Messages
829
Reaction score
214
But without this fix, you cant use main D:, searching main too!

I'm well aware of the fact that it is a fix but i'm also aware of my knowledge in ASM, that's why I asked for a main. And as for main, i dont think that is the problem but the fix itself
 
Joined
Oct 29, 2007
Messages
1,292
Reaction score
1,314
Maybe is more easy... make 1 Ducking upgrade from: MU EMU GameServer Ex803, decompiling functions from Releaed: 1.01.10b + .pdb +.map here in forum, and modify directly in GameServer Sources.. I mean.. add Grow Lancer character supports, This is only 1 idea.
 
Joined
Oct 29, 2007
Messages
1,292
Reaction score
1,314
@mauro07
need to "fix" GuardIT crashs on main or decompile packettwister anyway...

MU GamethuVN have.. a Ducking unpacked main Season X, with removed: GuardIT... anyways... check out Laudaicat work.

Full Client (754 MB):
Lite Client (228 MB):
 
Last edited:
Joined
Jun 27, 2010
Messages
940
Reaction score
1,195
MU GamethuVN have.. a Ducking unpacked main Season X, with removed: GuardIT... anyways... check out Laudaicat work.

Full Client (754 MB):
Lite Client (228 MB):

packed main just hooked XIProject.dll and this dll is packed with oreans Code Virtualizer if anyone want to unpack the dll is very easy to get all fixes for this main...
 
-( . ) ( . )-
Loyal Member
Joined
Mar 28, 2012
Messages
1,356
Reaction score
68
anyone share the files of season X?
 
Back
Top