The Matrix Online Server Emulator - The MxO Client

when you on?

Tue, 06 Apr 2010 09:02:04 +0000

It's sad when I jack in to the test server I see no one.....
when do ppls jack in?
There was a mass of ppl and now ghost town.......
Come on its our MXOEMUSIM
Just jack in and dance and chat (at least thats all we can do anyway)
Explore the town...you might find something you never saw before.

grumble grumble......

Error: Couldn't initialize internet connection?

Sun, 21 Mar 2010 16:57:01 +0000

When I try to start up MXO after following the idiots guide I get this error:

Error: Couldn't initialize internet connection. You must be connected to the internet to play. The application will now close.

Does anyone know what I do from here? My internet is working fine and I am not currently using a router.

Can not see anything in game.

Mon, 08 Mar 2010 22:49:38 +0000

I tried looking for a solution allover the forums but couldn't find one so i'm posting this here.

I logged into the test server today. This is what i see below.

I cant see anything, i added these two lines to below the useropts file and still nothing works and i tried the win 7 fix . Three other peoplein the server was having the same problem as well.

Quote:WR_DrawNavMesh = 0
WR_DLLoadIrrelevantMissionSpaces = 1

This is what i see. I tried restarting the game tons of times but still no fix.

Basically i cant see anything in game, everything is white with green sky no matter where i go. Anyone have an idea to a solution?

MxO Vista/Windows 7 Fixes (useropts.cfg Tweaks)

Sat, 06 Mar 2010 23:06:07 +0000

For those having issues in Windows Vista/Windows 7 and looking for a quick fix add these lines to your useropts.cfg.

#possible Vista lighting fix
modellighting_enable = 0
modellighting_ambadd_r = 0.33
modellighting_ambadd_g = 0.33
modellighting_ambadd_b = 0.33
PlayerFX_LightPool_Bright_Scale = 0

ScreenFilters_GreenShift_Color_1_R = 0
ScreenFilters_GreenShift_Color_1_G = 0
ScreenFilters_GreenShift_Color_1_B = 1

ShowAllHealthInCombat = 1
AlwaysShowHealth = 1
ShowTitleInName = 1

(Those settings in BOLD are optional)

Took a little looking to find the proper commands considering the whole "Vista Fixes" thread got deleted from the offical MxO forums, but I found them thanks to the Reviled Restoration forums. Props to RR and especially Apostle for this. Mercidos I didnt forget ya big dog, PROPS!

Hyperjumping calculation (server part)

Fri, 12 Feb 2010 18:56:54 +0000

Hi all.

Lets talk about something good.
Theory about how hyperjump works in the server part.

You all must have notices that hyperjump looks like a giant parabola. But how all that works?.

MATH CONTENT ALERT !!MATH CONTENT ALERT !!

Pick an apple.

Then divide it by two.

If it has 2 seeds.. then plant 1 and eat the other.

This assures you that double seeded apples will grow too!

Morph.

Idiot's Guide to Installing MxOE

Sun, 24 Jan 2010 05:39:00 +0000

Idiot's Guide to installing MXOE

Hello, my name is Metalogic, and I will be helping you install MXOE! This is a simple step by step guide on how to install all the necessary programs files so that you can play in MegaCity in your very own Stand Alone Client.

Step 1: Download

Download the following files:
http://mxoemu.info/forum/thread-64.html (This is the client itself, with all the latest updates)

http://sourceforge.net/projects/appserv/...e/download (This sets up the localserver)

http://www.sendspace.com/file/fe66ht (This is needed so that your client can interact with the localserver)

http://files.mxoemu.info/files/RealityMood.rar (This is the latest update to the Complied Server, now with moods, so you can run around MegaCity /drunk. Like I do...)

Setting up your folders

Now comes the fun part, setting everything up on your computer. First let's start with the client itself. This is pretty straight forth, you just create a folder in your computer for the Matrix Online Client. I have done the following.

C:/Program Files/Monolith Productions/The Matrix Online

Honestly all you have to do is make the folder destination like I have aboved, unzip the client from the .rar drag and drop it into your Matrix Online folder.

Ok, so we got our client set up, let's move on to the Complied Server stuff.

Ok, so you unzip "MXO Compiled Server (September) FIXED BAT.rar" and you should get this.

For the Binaries stuff, you can put them anywhere. I have put mine in my MxOE folder in "My Documents". The same is done for the SQL folder. You'll use that folder later.

Next, you'll need to open up your MxO folder again. Once you have that open, you open up your "Copy to MxO Folder" folder and you select all, drag and drop the stuff from "Copy to MxO Folder" to your MxO Folder on your computer.

Installing localserver

Ok, now you need to Install Appserv. It'll install normally, now it'll ask you for user name and password. Make sure you remember your password!

Once you have Appserv install, open up your Internet Explorer window (This does not work on Firefox, I have tried), and type in this address in IE.

http://localhost/phpMyAdmin/

It'll ask for your user name and password. Your user name is Root, and password is whatever you chose it to be when you installed Appserv.

Ok, now you'll get a window like this.

Now see where the red box is? You'll want to name the new database Reality, if you don't it doesn't work. Then click on "Create"

You will now get a window, which doesn't matter. Click on Import and you'll get the window as seen above. Click Browse, and go to your SQL folder that you have gotten out of the "MXO Compiled Server (September) FIXED BAT.rar". Open it up, and click on reality.sql. Then click "Go" on the lower right.

Congratulations, you have set up your localserver!

Now you need to go into your Binaries Folder, go to Reality.conf and open that up with your favorite text editor. I use notepad.

Once you've opened Reality.conf look for Database.password =. Erase what is after that = and put in the password that you have on your Appserv. Save it and close it back up.

Finishing up

Ok, now we just need to do a few more things, and you'll be able to jack back into MegaCity!

Unzip Realitymood.rar. All you'll see is a "RealityMood.exe" file. Drag and drop that into your "Binaries" Folder. This .exe file will allow you to do moods in the game. I like to do /drunk.

Now, you need to make two shortcuts. Go into your MxO Folder, and go to Matrix2.bat. Right click and select "Create shortcut". It will either make a shortcut on your desktop or in that folder. If it drops it into that folder, then you need to drag it to your desktop.

Now go into your Binaries folder, click on "Realitymood.exe" and create a shortcut of that, and drop that shortcut onto your desktop.

Now you don't have to do this, I did. Create a MxOE folder on your desktop, and drop those two shortcuts in there. It cuts down on the clutter.

Jacking In

Ok, if you have played MxO during it's SOE days, then you'll need to adjust how you jack in. First you'll need to click on the Reality mood shortcut that you have on your desktop. Then you click on Matrix2.bat.

You should see the MxO Client running. When it gets to Character selection, select "lolcharacter".

That is it! You are offically jacked into The Matrix once again!!

As of right now, we don't have any abilities, or interactive working, but you can explore the city and listen to the music!

I hope this guide has helped you, and make it that much easier for you to jack into The Matrix.

The Matrix Online Client

Sun, 02 Aug 2009 03:00:24 +0000

Version 7.5668

http://mxoemu.info/MatrixOnline.7z

File size: 1534018982 bytes
MD5 hash: 6ca436de462ca736b7d6ef22ceb099ea

Just in case you don't have it, it's the same one from Station Launcher/Fully updated Matrix launcher.

Python discovery API

Sun, 12 Jul 2009 13:48:37 +0000

methods of Discovery object
"Discovery Engine rules API"

"outputDebugString" 'Send debug message out to the debug environment'

"consolePrint" 'Send debug message out to the game console'

"serverPrint" 'Send debug message out to the server console'

"errorPrint" 'Send message to the logs via Minor Error.'

"clientConsolePrint" 'Send debug message out to the client console'

"sendMissionResult" "Send mission result to mission object"

"getGameObjectType" 'Get the type id for the game object string'

"getAllObjects" 'Get a dictionary mapping all object names to IDs'

"getTypeInfo" "Get type info for a game object ID"

"clientSystemMessage" 'Send a dungeon master message to the client.'

"clientMissionUpdate" "Send a mission update to the client."

"addHardline" "Send OS an add hardline message."

"playEffect" "Send IO to player to create an effect."

"addAccessNode" "Send OS to record access node."

"abilityMessageToAll" 'Sent by ability to all objects in area (currently just caster and target)'

"abilityMessageToCaster" "Sent by ability to caster only"

"abilityMessageToTarget" "Sent by ability to target only"

"abilityIDToGameObjectID" 'Convert from Ability ID to GameObject ID (as it appears in GODes.)'

"getGameObjectPropValue" 'Get the property (alias) value on an object type'

"getGameObjectName" 'Gets the objects name as it appears in godes (i.e gameobject database).

"getGaussianRandom" 'Returns a random number given avg/std that follows gaussian distribution.'

"getGaussianRandomClamped" 'Returns a random number given avg/std that follows gaussian distribution clamped to min/max.'

"getInstDataFromStability" 'Returns the instData for an item of the given stability'

"getInstDataFromPurity" 'Returns the instData for an item of the given purity'

"getInstDataFromLevel" 'Returns the instData for an ability code of the given level'

"sendModalMessage" 'Send IO to player to display modal message'

Cryptopp <-> Matrix.exe code-matches

Sat, 11 Jul 2009 14:14:34 +0000

Hi all

As I've some progress analyzing the ingame code, and looking through the cryptopp5.1 code (which is probably the version used), i created a XML file (parsed for view ) so all of you can check the matches, and I can track a record on what is found.

Here's the url:
http://tmo.hostoi.com/xml/matches.xml

It's still a xml, so it could be processed by programs and so. I will try to update it as often as i can xD.

Hope you all enjoy .

Client->AUTH

Thu, 09 Jul 2009 15:34:00 +0000

This is was when the auth servers are unnavaible

Quote:Client->AUTH [12:30:29 07/09/09] packet size: 170
08 04 00 00 00 01 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 80 00 a4 c2 86 85 94 76 8c 8a 28 fc 35 94 a1 eb dc 1d c7 13 11 24 a4 2c
ef 60 4d 8d 0b da 18 82 ce 46 e6 0c aa 53 3d cb 1f c4 9b 77 ab 3a 61 ae 1c d1 58 c1 dd 92 ea 39
5e 54 f3 75 87 8c 22 56 bd ee 40 d7 58 ae b8 36 8c 24 3e db 3d fb 70 d9 26 18 7c 34 16 54 e9 19
74 1f 0f 26 76 92 b4 00 47 22 74 8a 25 91 5e 11 71 8b 0a cb 43 ce 2c f2 42 44 0c 03 1f fe aa 75
bc 88 65 1b ef 78 13 fe 04 3e
. . . . . . ( . . . . . . . . . . . . . . . . . . . . . . . . .
. . . . . . . . . . . . . . . v . . ( . 5 . . . . . . . . $ . ,
. ` M . . . . . . F . . . S = . . . . w . : a . . . X . . . . 9
^ T . u . . " V . . @ . X . . 6 . $ > . = . p . & . | 4 . T . .
t . . & v . . . G " t . % . ^ . q . . . C . , . B D . . . . . u
. . e . . x . . . >

i think that with this we can put on Auth Server
soon i post a detailed
(well i think that i need warning why i only post garbages)

MxO Client - Time + Random Callings

Mon, 06 Jul 2009 13:59:02 +0000

Hi all!

This is a listing of what functions are called and what do they do (if we know) in the client code/window.

At the moment, only till the first auth packet, which contains a timestamp.

Client Init

msvcr71.time
msvcr71.gmtime
advapi32.cryptGenRandom

msvcr71.time seed for next srand
msvcr71.srand

msvcr71.time seed for next srand
msvcr71.srand

Client Window. Show

msvcr71._time64
msvcr71._localtime64
msvcr71._gmtime64

msvcr71.strftime format the date into Client window showed date format
msvcr71._Strftime

Client Window. Show "Login:"

msvcr71.rand * number of key Pressed plays a random typing sound

Client Window. Show "Password:"

msvcr71.rand * number of key Pressed plays a random typing sound

msvcr71.time
msvcr71.time

Launchpad Socket is created

msvcr71.time seed for next srand
msvcr71.srand returns data used for the 4bytes, aka "connection ID" for launchpad 1st packet

msvcr71.rand * n
msvcr71.time "Autenticating..." appears

msvcr71.rand launchpad socket gets a port. maybe result from this rand

msvcr71.time/msvcr71.rand * n

Socket TCP created
Socket UDP created

Exception 406D1388 raised

msvcr71.time

msvcr71.time

Socket TCP points to Auth server on 11000
Socket UDP points to itself
Socket TCP sends 1st packet to Auth server
Socket UDP sends packet(s) to itself

CRC checks

Sat, 04 Jul 2009 10:06:29 +0000

If i modify matrix.exe/launcher.exe i get "Please run virus check and full system scan", if i modify client.dll i get "Incompatible client version" etc, work on how to disable this, makes life much easier (i can modify to output additional debug info etc)

Lol useropts

Sat, 04 Jul 2009 09:13:17 +0000

Mess up your game

#[MxOConfig]
ILTTCPEngineLogging = 1
WR_DrawNavMesh = 1
Verbose = 8
LogFileNames = 8
LogToFile = 3
ServerDebugWindowEnabled = 1

# Disable the matrix letter load effect...
WR_MatrixView_Min_T =-1
WR_MatrixView_Max_T =0

Splash0 = ""
SplashDelay0 = 1
Splash1 = ""
SplashDelay1 = 1
Splash2 = ""
SplashDelay2 = 1
Splash3 = ""
SplashDelay3 = 1
Splash4 = ""
SplashDelay4 = 1
Splash5 = ""
SplashDelay5 = 1
CameraChaseDuration = 0.1
ILCameraMode = 2
CameraMinDist =50
CameraMaxDist =2800
CameraMaxSpeed = 1000
TargetClearOnClick = 0
AntiAliasFSOverSample = 16
AntiAliasFSQuality = 16
AntiAlias_Level=4
CameraHeightOffset=0.700
CameraHeightOffsetSitGrnd=0.025
CameraHeightOffsetSitChair=0.800
WR_PrefabLODEnable=0

UseLaunchPad = 1
ILTTCPEngineLogging = 1
PacketLifespam = 0
UDPPacketEncryptionStyle = 2
StaticInitVector = 0
No_Load_Textures = 1
CachedFileReport = 1
SubAlloc_DebugProfile = 1
Sim_Time_Scale = 1.0
Sim_Time_ShowAdjust = 1

ConsoleX = 200.0
ConsoleY = 200.0
ConsoleWidth = 500.0
ConsoleHeight = 500.0
ConsoleMinLines = 20
ConsoleFontSize = 20
ConsoleAlpha = 1.0
ConsoleShowRunFile = 1
ConsoleEchoToFile = 1
UseWorldPhysics = 0
DefaultHardline = 5
LogToFile = 1
ReloadRules = 1
DebugPreloadAnims = 1
Client_RenderThrottle_Override = 1
ModelDefaultMaterialLibrary = 0x22000077
AlwaysPollTCP = 0
ServerDebugWindowEnabled = 0
MapShowThreatOverlay = 0
MapShowPOIText = 1
MapShowPOIPosition = 1
ResetViewPositions = 1
HardlineLACloseDistance = 100.0

DMWindowXLocation = 200
DMWindowYLocation = 200
DMWindowHeightLocation = 500
DMWindowWidthLocation = 500
ShowSelectMaxSearchRange = 50000.0
CombatChatLevel = 50
CombatAnimTime = 0.05
CombatUIMultiOnOneMultiplier = 1000.0
CombatUIShowStates = 1
CombatUIShowTacticInputs = 1
InterlockIconAnimTime = 2.0
ui_LatencyThreshold = 2000
MapRotation = 50
MissionVendorCloseDistance = 500.0
PlayerFaceCamY = 172
ShowItemIDInVendor = 1
EnableMessageTrace = 1
MaxMerchantPurchaseDistSqr = 900000.0
cl_ReportOldNeighborhood = 1
EnterWorldCmd = ""
ILCameraMode = 2

CameraNavMeshPhysics = 1
CameraPhysics = 1
CameraSpherePhysics = 1
CameraFrustumPhysics = 1

TestPropBox = 1
ILCameraShowTransform = 1
KeyConfigUseServer = ""
CombatAttackDelayTime = 0.5
MovementRotationVelocity = 360.0
MovementRotationScale = 8.0
MovementStrafeVelocityScale = 0.4
PlayerPathing_UseQuickPath = 0
ShowPlayerPath = 1
ChallengeMaxConsiderTime = 50.0
MaxCharacterVelocity = 5000.0
MusicSystemDebug = 1
ConsoleText = "DERP"
Verbose = 1
LogFileNames = 1
Cin_Play_File = ""
Cin_ShowTiming = 1
SecondsPerRSetRebuild = 0
CyclesPerRSetRebuild = 1
DefconRSetRebuildScalar = 1.0
RelevanceLostDelay = 5
RelevanceLostSendRate = 0.2
ClientObjectCleanupInterval = 3.0
DPrintf = 1
VerifyClientInput = 1
VerifyServerInput = 1
DObSysDebugBreak = 1
DObSysXTrack = 1
DisconnectOnHandleInputError = 1
LengthWordForHandleInputRecovery = 0
FX_Packed_RezID = 0x22000026
NormalizeNormals = 1
Render_No_Textures = 1
Wireframe = 1
RenderDebugLevel = 50
Gfx_Force_Cull_None = 1
ServerFPS = 20.0
UDPConnSendInterval = 300
IPDebug = 1
UDPConnWaitTime = 10000
ShowConnStats = 1
BandwidthTargetClient = 500
BandwidthTargetServerLoading = 1000
BandwidthTargetServer = 2000
PaceIntervalClient = 0.5
PaceIntervalServerLoading = 0.4
PaceIntervalServer = 0.4
ShowThruput = 1
MinPacketSize = 100
#ClientTroubleHint =
DirtyWordFile = ""
ReservedWordFile = ""
Profile_Enable = 1
IgnoreLayoutVersion = 1
VerboseUIDebugging = 1
WR_Water_Use_Version_2 = 1
Workshop_NavPorcessing = 1
WR_InteriorMapScale = 7.0
WR_DrawNavMesh = 1
WR_DrawPhysics = 1
WR_DrawExteriorBBs = 1
WR_DrawPropBBs = 1
WR_DrawObjectBBs = 1
WR_DebugDirtyRect = 1
WR_DebugPortals = 1
WR_DebugOccluders = 1
WR_TracePropRenders = 1
WR_DebugDynamicLights = 1
WR_IntFullbright = 1
WR_DLDisplayLoadScreen = 1
WR_DrawInteriorNormals = 1
WR_DrawExteriorNormals = 1
LoadScreen_Tex_RezID = 0x22000062
WR_DLLoadScreenStartPercentage = 50
WR_DLLoadScreenTotalPercentage = 100
WR_DLOptimizeDynamicLoadHandling = 1
DL_FloorHeight = 420.0
WR_UseOptimizedPhysics = 0
ability_max_avg_value_skew = 1.6
ability_max_avg_value_growth = 5.0
ability_stddevs_per_range = 1
NPCDetection_DistanceFactor = 0.01
NPCDetection_NoiseFactor = 0.01
ILTTCPEngineLogging = 1
PacketLifespan = 1

#ILMovementDatabaseListRezID
#ILMovementDatabase0RezID

DelayScriptsIfNotPrefetched = 0
ScriptShowAdjust = 1
ShowServerUpdate = 1
ShowJump = 1
DamageNumberAttachNode = 5
DamageNumberOffset = 2.0
AlwaysShowHealth = 1
ShowAllHealthInCombat = 1
AllowedServerPosTweak = 0.1
JumpPhysics = 0
PlayerExtrapolateMovement = 1
CharacterMaxServerDistSqr = 1000000.0
CharacterShowServerPos = 1
CombatIdleChangeChance = 1
CombatMinIdleDuration = 1.0
CombatMaxIdleDuration = 2.0
CombatClientSmartWeaponEquip = 0
CombatMoveWeaponInvalidateTime = 1200
UpdateDeltaCharacterMvt = 100
CmpChar_HackView_Enable = 1
CmpChar_HackView_MinLvl_Float = 1.0
CmpChar_HackView_MaxLvl = 50.0
ShowTitleInName = 1
DebugNoise = 10
DebugRipple = 10
StartAttributeEffectLevel = 40
UsableExecuteMaxDist = 100000.0
AlwaysPvP = 1
AbilityDebugOut = 1
AbilityWarningsOut = 1
TMSerializeDbg = 1
MaxSimulacraCount = 10
RSILibraryID = 0x3A00020E
CombatMinUnlockDuration = 0.2
AlwaysDoBulletTime = 1
ReloadAugments = 1
CombatMaxConnectedHeight = 15000.0
CombatMaxConnectedRange = 60000.0
CombatMaxHeight = 50000.0
CombatFailedForcedAttackIS = 1
CombatWithdrawIS = 1
AMBUSH_LeadDist = 14000.0
TARGETCHOOSER_DetectionHeight = 100.0
TARGETCHOOSER_PassiveTimeBetweenPings = 1.0
TARGETCHOOSER_SpawnedTimeBetweenPings = 0.12
TARGETCHOOSER_AttackRange = 3000.0
AI_NPCsCheckLevel = 0
AI_AggroDecayTime = 2.0
AI_DelayBeforeDecay = 1.0
AI_NewAggroBaseValue = 5.0
AI_ProximityAggroBaseValue = 2.0
AI_ActionTime = 1.0
AI_StartCombatPassive = 1
AI_MinimumEngagedTurns = 1000
AI_DestroyOnDeathDelay = 999.0
AI_AttackDistance = 1.0
AI_BaseLootTime = 9999.0
AI_TgtSwitchProbability = 1.0
AI_UseSmartAbilities = 0
AI_InterlockFailureRetries = 1
AI_InterlockRetryTimeout = 90.0
AGENT_TransformTime = 999.0
AI_AgentChaseEngageDistance = 1.0
AI_AgentNotAttackedTime = 1.0
AI_AgentCantAttackTargetTime = 2.0
AGENT_AttackDistance = 1.0
AI_TalkDuration = 999.0
JumpMinDuration = 0.1
JumpMaxDuration = 0.2
JumpAverageSpeed = 1000.0
JumpMaxSpeed = 9999.0
HyperJumpInitDist = 99999.0
HyperJumpScaleDist = 999.0
HyperJumpMaxDist = 99999999.0
HyperJumpInitHeight = 9999.0
HyperJumpScaleHeight = 999.0
HyperJumpMaxHeight = 9999999.0
FreeJumpInitDist = 9999999.0
FreeJumpMaxDist = 9999999.0
MovementDiagnostics = 1
#Magnitude of position change needed to
#PredictNearThreshold
#PredictMaxHeightChange
AGENT_Draw = 1
BreakOnMissingCharSheet = 1

Auth Packets -> stopping randomizing!

Tue, 30 Jun 2009 08:37:12 +0000

Hi at all,
we found something out (maybe its a very "stupid" solution at first) regarding this topic.

As we all know and you can see : normal Auth Server Packets (The TCP Packets on Port 11000 after launchpad UDP Session), are varied everytime (it is uninteresting what you send to the client).

We tried many things out, first the "send stupid the packets i got sniffed" solution. This doenst works, cause the client gerates at every session new packets which are encrypted.

So to make a session "real" you need to generate the same packets and
the same session, but how could this be done ?

A simple question with (at first!) stupid solution

First we tried it with giving the srand command a static value (like 0 or something)...but this doesnt worked really...but for some reason at my one client , i thought it works...what i had forgot : i had tried something other before that

As i saw in filemon, the client access many dlls , one of them was crypt32.dll .

So as all of us know , a programm searched first in his root folder for a library and then search all know pathes .

I have placed a empty file called "crypt32.dll" in the matrix online root folder, sniffed a auth session from real server connect and place this packets in my auth and launchpad enviroment.

And then stared client up with the empty crypt32.dll and see what happened....client send the same packets as sniffed from real to the auth server and after that i got connected to my test margin and test world server and entered the world.

Easy to reproduze :
-------------------
1. create the dummy crypt32.dll file in your mxo directory.
2. start client and sniff a auth session with it.
3. replace the packets in your server sources (if you have).
4. start and have fun

At the moment this seems to be good, but we must thing further : this only works on one client ...cause it seems that the MxO client generates something that changed the packet from PC to PC (i bet for a client hash checksum that is generated depend on the hardware and something more).

At all a small explanation about some auth packets too (what we found out too):

Packet 1 from Client
---------------------------
Example :
09 06 F1 1D 07 00 04 00 00 00
09 06 ->header
F1 1D 07-> not really know only that this is sent everytime

04 -> this is the RSA algorythm that is used..you can change this value by editing the pubkey.dat file...but if you fill out 00 Zero, the real server see that something is wrong and resend you the pubkey.dat in a packet.

Response 1 from Client Example
------------------------------
12 07 00 00 00 00 CF 88 44 4A 04 00 00 00 00 00
00 00 00

12 07 -> header
CF 88 44 4A -> timestamp in hex, but must be readed backwards..means :
4A 44 88 CF = 1246005455 = 26.06.2009 10:37:35
04 -> RSA Algo identifier

If you have an invalid pubkey or no pubkey.dat , you get an another answer with the public.key (to test this you can delete the key and see what real server answers you).

And important is that you cant gereate the timestamp by yourself cause its part of the encryption and as we dont know how the encryption really works and you dont have the secret key, there is no big chance to do something with it.

Packet 2 from client
-------------------
80 AA 08 04 00 00 00 01 28 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 80 00 and them many encrypted data which varies.

We dont really know what the values means ..80 AA is the header sure, but dont know really the rest cause its encrypted.

If you view your memory with a cheat tool or something you can see that the encrypted part must be username and password and something else.

Response from Server 2
--------------------
11 09 and 16 bytes with encrypted part.
11 09 is a header.

Client request 2
---------------
A packet with a header from 55 0A or 45 0A or 35 0A, depends on if you use launchpad and if you use qlsession or something with no user and password.

Dont really know for what this stand , we only know that the response is the server list.

For World Server list decryption see the topic from morpheus...one thing important there is , that there is a again a backwards readed timestamp , and there are two parts in the packets which are encrypted too.

And if you change only the timestamp you see that the encryption doesnt work cause you can an incompatble message.

So that was it for now

Bayamos Guide - maybe helpful too?

Mon, 29 Jun 2009 09:47:06 +0000

See : http://forums.station.sony.com/mxo/posts...6300559760

I have download the Guide and see through, there are maaaaaaany client stuffs that could help / modify the clients Resources.

There are big lists with stuffs and IDs and and and ....

The Matrix Online (3 CD) [ISO]

Mon, 29 Jun 2009 04:35:11 +0000

The Matrix Online is the future of the Matrix, picking up right where the trilogy left off.
The revolution is over, but within the Matrix a secret war still rages - a war of control between the Machines, the Exiles, and the people of Zion.
Come join the continuing storyline of the Matrix where you decide who to oppose and what to believe.
Only your courage and perserverance can protect the lefacy of Neo's sacrifice.
Jack in.

> Explore Every Inch Of The Matrix: Mega City
Experience the most realistic urban environment of any MMO. The Entire City, including every room of every building, is in play.

> Master The Innovative Combat System
Defeat your enemies using devastating martial arts manoeuvres and gunplay. Breakthrough MMO technology produces rich animations and hyper-kinetic battle aequences.

> Retain Character Flexibility
Escape character regret and reconfigure your character's abilities on demand.

Windows Minimum System Requirements: Windows WinMe, Win2K, WinXP or above; 512 MB of RAM; Programmable shader (Radeon 8xxx, 9xxx and above, GeForce 3 Ti and above); DirectX 9 compatible card with 64 MB VRAM; 1.4 gHz CPU; DirectX 9 compatible sound card; 7 GB available HDD space; ATA100/DMA or Faster HD; Broadband Internet Connection
Windows Recommended System Requirements: Windows XP or above; 1 GB of RAM; Radeon 9xxx and above DirectX 9 compatible card; 128 MB VRAM; 2.4 gHz Intel Pentium 4 or AMD Athlon XP 2800+; DirectX 9 compatible sound card with EAX support; 10 GB available HDD space; ATA133/DMA or faster HD; Broadband internet connection

The Matrix Online [CD1]
The Matrix Online [CD2]
The Matrix Online [CD3]

Resource/python - files unpacked^^

Wed, 24 Jun 2009 12:36:45 +0000

I have today found out, that these files are packed as ZIP .

You have to change before the headers of the files inside the ltp files (It Starts with the String LTP and these you will find often in the files).

If you compare you have only to change the first 4 bytes of these things to ZIP Headers (and dont forget the end byte).

I have done this work for you, and here you can download and extract it normal (it consists maaaaany pyc files , Python binarys).

http://stepload.de/uploads/eBsDD5cFPlmgH...index.html

MxO Client - Connection sequence Launchpad->Worldlist (Work in progress)

Sun, 21 Jun 2009 11:47:40 +0000

Findings findings and more findings...

At first, i used some easy-cheating software to look for my user and pass. It was supposed to work as even having great encryption mechanism, what you typed has to be plain-text sended to the client as string to encode it later; and it worked indeed.

Got a fixed location where user + pass where plain text stored. I was happy.

But happyness is a short state, as I found that i was mid-wrong. Indeed, MxO client stored the user + pass there but... when I looked more into the matrix code (haha easy joke) i saw that it was copied from another fixed location and writes some more data.

This may mean that what i saw in first place was the place where a copy was stored, and we know that copies are mean to be .. sent, edited, compared, ... so it may be the place where it tooks the password plain-text to encoded one...

It needs some research but... hey.. is a start.

More things...

After so many tries, I have found that the first packet to launchpad:

Code:

00 01 00 00 00 02 <4 "random" characters here> 00 00 02 00

is stored in the ingame code (that means where the packet info is) and made a trace after sending, so i reach the place where response is stored too.

first place is always the same, but 2nd i'm not so sure about it (maybe it was xD).

followed the ingame code (from now on i will refer to this as "press F7 till your finger hurts") after getting the:

Code:

00 02  <4chars response> 00 00 00 00 00 00 00 00 00 02

And i... (apart from getting a "sick" status over my head) found that:
- it writes it in some code that makes blahblahblah, commented like 100-200 lines of pure asm + "press f7 till finger really hurts...." and got nothing.
- I suspect that it doesnt make so much about that response, meaning that client may accept it and use it later.
- suspecting is augmented because client checks the first block of the response, aka "" agains one memory dir, and keeps doing operations with the second block aka "<4chars response>", writing it on another memory place, and not comparing it to anything (or i got tired before it did!)

.... its a work in progress from here peeps! ....

The Matrix Online standalone-client

Thu, 18 Jun 2009 09:49:46 +0000

Hi,
i found a wired thing in the client.dll , search for "standalone" , than you find some entrys about "The Matrix Online standalone client...." , is there a real possibility to run it standalone????

MxO Client - Parameters & tricks

Wed, 17 Jun 2009 11:38:59 +0000

MxO client exe got a lot of hard-coded parameters, which I putted together in a list:

qlver --> Unknown
session --> session id?
qlsession --> quick login/launch session id?
char --> character selected
qlchar -> quick login/launch selected?
pwd -> password
qlpwd -> quick login/launch password?
user -> username
qluser -> quick login/launch username?
lptest -> Unknown
skiplaunch -> Unknown
noeula -> Skip EULA, right to patch/login
justpatch -> Simply patch the server
recover-> Performs a Full System Check
deletechar -> delete character?
nopatch -> Ignore patch checking (launcher+client+updates)
silent-> "no verbose" mode?

---------------------------

MxO Client got some options great for doing tricks with the client.
I will put one or two.

Open "options.cfg" with a text editor (even notepad) and look for a line like:

Quote:windowed = 0

Quote:windowed = 1

if it doesnt appear, insert the windowed = 1 sentence, so you can test things on your client and wont matter if it gets stuck or hangs and you can always finish the windows process (because you'r not fullscreen! )