I haven't checked the files, but anyone can download the files from official site
All links are in these XMLs:
Client
Sprites
You have to tell the client the session id and account information, but it uses the Cip's RSA. It's impossible to decompile and recompile again.