[RELEASE] Int Kalonline Config.Pk Editor by HighGamer

09/26/2018 06:26 HighGamer.#1
Hello this is a config.pk editor I modified a old PK editor called PKED to support the new keys for kalonline.
Make your cooldown hacks today for kalonline international official server today!

[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]

Newest International config.pk password: = q09V169$u-+_Y2ak
Old International config.pk password: In#ixFuc*kin!g
Old International config.pk password: axFGVj4NyC9UY[
Decrypt using Old Crypt

Download comes with Source code!
[Only registered and activated users can see links. Click Here To Register...]

Download link for MD5 Spoofer (so you can get into the game)
[Only registered and activated users can see links. Click Here To Register...]

Download link for new jobsystem.dat fixer (so skill no cooldowns will work need to use this with MD5Spoofer)
[Only registered and activated users can see links. Click Here To Register...]

Attached to thread.

P.S.>
If anyone likes my hack please donate to support my work.
My Paypal is [Only registered and activated users can see links. Click Here To Register...]

Anyone want to buy a bot for kalonline add me to discord.
Discord: HighGamer.com#8990

[Only registered and activated users can see links. Click Here To Register...]
09/26/2018 06:45 valzzz40#2
Thank you :).
09/26/2018 09:34 Mohhy#3
Thx, but how to properly save it? If I modify small thing and save it, in game I get error that I need to restart game and than it closes down.
09/26/2018 09:47 TheRealPower#4
now now now, i guess u "forgot" the virustotal check.

[Only registered and activated users can see links. Click Here To Register...]
09/26/2018 15:17 HighGamer.#5
That error "There are updated data. Restart the game to proceed with the update." must be somewhere in the config.pk.. or e.pk because I cannot find that string anywhere inside the engine.exe so i have no idea how to disable it.


i edit xlate.dat file and i don't get that error i could play without any problems.. maybe some files are just detected

Here i show you example:

[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
09/26/2018 16:36 TheRealPower#6
because before server select u aren't having a conntectionb between client(you) and the (server)... much waw, once u select a server u'll get incoming and outgoing traffic, including the md5 check on e.pk and config.pk.
09/26/2018 19:07 ArreQ#7
Quote:
Originally Posted by HighGamer. View Post
That error "There are updated data. Restart the game to proceed with the update." must be somewhere in the config.pk.. or e.pk because I cannot find that string anywhere inside the engine.exe so i have no idea how to disable it.


i edit xlate.dat file and i don't get that error i could play without any problems.. maybe some files are just detected

Here i show you example:

[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
The problem is that error occur after entering 2nd pw.
And yea I guess it's about the MD5.
09/26/2018 21:09 PlexiX#8
Quote:
Originally Posted by ArreQ View Post
The problem is that error occur after entering 2nd pw.
And yea I guess it's about the MD5.
useless thread
10/02/2018 00:16 HighGamer.#9
in the file message.dat you will find

Code:
;클라이언트 hash_error
(sys 4396 "There are updated data. Restart the game to proceed with the update.")
in korean translation it means Client hash_error.

I searched for 4396 in ida pro and i found it in 2 places and the function is too big to decompile so it fails but it does have strings like "RECV CLOSE Reason(%d)" so its most likely coming from the server and it gets called under case 16.

[Only registered and activated users can see links. Click Here To Register...]
After modifying my hexrays.cfg from MAX_FUNCSIZE from 64 to 1024 i was able to decompile the function, took about 5 minutes very long decompiling..

Here is the function
[Only registered and activated users can see links. Click Here To Register...]

short version..

it's the recv from packet called 66 which is RECV CLOSE connection

Code:
   case 66:
      v2559 = (unsigned __int16 *)sub_470BB0(v2559, (unsigned int)&unk_80EEC8);
      v1819 = 108;
      *(_DWORD *)&v772[16] = v1818;
      sub_706B30("RECV CLOSE Reason(%d)\n");
      v799 = v1818;
      switch ( v1818 )
      {
        case 0u:
          v1819 = 107;
          break;
        case 1u:
          v1819 = 145;
          break;
        case 2u:
        case 3u:
          v1819 = 144;
          break;
        case 5u:
          v1819 = 143;
          break;
        case 6u:
          v1819 = 1567;
          break;
        case 8u:
          v1819 = 565;
          break;
        case 9u:
          v1819 = 1181;
          break;
        case 0xAu:
          v1819 = 1223;
          break;
        case 0xCu:
          v1819 = 1375;
          break;
        case 0xFu:
          v1819 = 4367;
          break;
        case 0x10u:
          v1819 = 4396;           //<-- here is the hash_error call
          break;
        default:
          break;
      }
      if ( v1818 == -1 )
        goto LABEL_2861;
      if ( v1819 != 145 && v1819 != 4396 && v1819 != 144 )
      {
        if ( v1819 == 565 )
          sub_6A4950(565, 0, 12, 0, 0, 0, 0);
        else
          sub_6A4950(v1819, 0, 2, 0, 0, 0, 0);
      }
      else
      {
        sub_6A1A40();
        sub_6A4950(v1819, 0, 5, 0, 0, 0, 0);
      }
      return 0;
All this is useless because I have no idea where hashing is even done, this is just the results.

on my packet editor the last packet on RECV is
Code:
[Recv] type[66]: 04 00 42 10
Here is the send packets for both GOOD config.pk and BAD config.pk

Code:
Bad config.pk packet data

Type: [9]: 18 00 09 C1 91 00 00 DD 19 85 6E 85 1C EE 31 CD 7E 99 0C 85 F5 8C 77 00 
Type: [4]: 08 00 04 01 03 2A 00 00 
Type: [8]: * username and password packet removed
Type: [11]: 07 00 0B 01 00 00 00 
Type: [2]: 0B 00 02 A3 B6 4F 00 0E 01 00 00 
Type: [10]: 11 00 0A 00 31 31 31 31 31 31 31 31 00 00 42 06 00  <- pin packet (could have hash 2 bytes at end)
Type: [13]: 33 00 0D BF C6 CB E5 0D BF 9B F0 2E AC 45 18 EF E3 28 71 45 7C 68 C9 B1 4E B1 26 D2 99 DC 06 82 23 50 AE 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Good config.pk packet data

Type: [9]: 18 00 09 77 31 00 00 18 20 BB 2D 6C 61 18 33 4C 93 3A 76 62 56 2D 57 01  <- (could have hash unknown packet)
Type: [4]: 08 00 04 01 97 26 00 00                               <- (could have hash all bytes different)
Type: [8]: * username and password packet removed
Type: [10]: 11 00 0A 00 31 31 31 31 31 31 31 31 00 00 78 84 01   <- pin packet (could have hash 2 bytes at end)
Type: [13]: 33 00 0D 20 6F B3 AA 13 B4 BE 8B 75 98 52 DE D2 1E DF 1A 45 7C 68 C9 B1 4E B1 26 D2 99 DC 06 82 23 50 AE 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
If anyone wants to take it over from here be my guest figure it out please so i can make a spoofer for the hash in the zip file
10/02/2018 10:36 Wittytou#10
Code:
Type: [13]: 33 00 0D 20 6F B3 AA 13 B4 BE 8B 75 98 52 DE D2 1E DF 1A 45 7C 68 C9 B1 4E B1 26 D2 99 DC 06 82 23 50 AE 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Thats your md5 packet.

byte[3-18] is config.pk md5 (16 bytes)
byte[19-34] is script.pk md5 (16 bytes)

Just replace the 16 bytes for config.pk with original md5. It changes with every maintenance.
10/02/2018 20:16 HighGamer.#11
Quote:
Originally Posted by Wittytou View Post
Code:
Type: [13]: 33 00 0D 20 6F B3 AA 13 B4 BE 8B 75 98 52 DE D2 1E DF 1A 45 7C 68 C9 B1 4E B1 26 D2 99 DC 06 82 23 50 AE 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Thats your md5 packet.

byte[3-18] is config.pk md5 (16 bytes)
byte[19-34] is script.pk md5 (16 bytes)

Just replace the 16 bytes for config.pk with original md5. It changes with every maintenance.
Wow thank you now I see what this box means, are you the coder of Flashbot - Dragon Heads?

[Only registered and activated users can see links. Click Here To Register...]

Good config.pk
33 00 0D
config.pk [20 6F B3 AA 13 B4 BE 8B 75 98 52 DE D2 1E DF 1A]
script.pk [45 7C 68 C9 B1 4E B1 26 D2 99 DC 06 82 23 50 AE]
Bad config.pk
33 00 0D
config.pk [BF C6 CB E5 0D BF 9B F0 2E AC 45 18 EF E3 28 71]
script.pk [45 7C 68 C9 B1 4E B1 26 D2 99 DC 06 82 23 50 AE]
10/06/2018 20:59 RevEngKal#12
You could most likely proxy and edit packets to solve that issue.

Edit:
Well, I should've read more than the first 2 posts. My bad.
03/23/2019 05:07 HighGamer.#13
Releasing my MD5 Spoofer for free!
Contact me on discord: HighGamer.com#8990
if you have any problems or want to show your support I take donations.

My Paypal: [Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]

Download link
[Only registered and activated users can see links. Click Here To Register...]
04/06/2019 21:31 empty57#14
working with newest update ?
@[Only registered and activated users can see links. Click Here To Register...]
problem with MSWINSCK.OCX if you have win10 x64 must copy this into c/windows/syswow64

@[Only registered and activated users can see links. Click Here To Register...]2
spoofer dont work for me,detecting md5 change please pm me or discord hajs96#7407
@[Only registered and activated users can see links. Click Here To Register...]3
How to connect with md5 spoofer ? for mine dont work
@[Only registered and activated users can see links. Click Here To Register...]4
solved mine problem but dont see any skills and names in logging screen
script.pk cant be open with EV)O8@BL$3O2E only chinese fonts see
if i change jobsystem.dat everything is broken i dont see skills and anything
if i change xlate.dat everything is good :F help please
04/07/2019 23:31 HighGamer.#15
Quote:
Originally Posted by empty57 View Post
working with newest update ?
@[Only registered and activated users can see links. Click Here To Register...]
problem with MSWINSCK.OCX if you have win10 x64 must copy this into c/windows/syswow64

@[Only registered and activated users can see links. Click Here To Register...]2
spoofer dont work for me,detecting md5 change please pm me or discord hajs96#7407
@[Only registered and activated users can see links. Click Here To Register...]3
How to connect with md5 spoofer ? for mine dont work
@[Only registered and activated users can see links. Click Here To Register...]4
solved mine problem but dont see any skills and names in logging screen
script.pk cant be open with EV)O8@BL$3O2E only chinese fonts see
if i change jobsystem.dat everything is broken i dont see skills and anything
if i change xlate.dat everything is good :F help please
for script.pk you need to change it to e.pk when loading the pk file up in PKED editor