[Discussion]How to unpack cabalmain.exe

Page 2 of 3

09/02/2009 04:43 NoobWant2Learn#16

got same error with logan.. we got the same entry pt.. and thanks to him for the idea... unpacking is the hardest part...

09/02/2009 06:36 HumanaOne#17

Quote:

Originally Posted by NoobWant2Learn

got same error with logan.. we got the same entry pt.. and thanks to him for the idea... unpacking is the hardest part...

i got past the unpacking stage thanks to a Newbie ^_^ loz >> i am currently on the live debugging phase - i see a thread that when i try to suspend, Cabal stops, and when i re-activate, Cabal resumes the process - i think me and Mr Newb are getting closer by the second - it does make it better if you're working with someone who works hard and never complain. :rtfm:

09/02/2009 07:22 dlnqt#18

Quote:

Originally Posted by HumanaOne

i got past the unpacking stage thanks to a Newbie ^_^ loz >> i am currently on the live debugging phase - i see a thread that when i try to suspend, Cabal stops, and when i re-activate, Cabal resumes the process - i think me and Mr Newb are getting closer by the second - it does make it better if you're working with someone who works hard and never complain. :rtfm:

so you managed to live debug an unpacked cabalmain.exe and run it normally?

09/02/2009 08:12 Leech-King#19

Quote:

Originally Posted by dlnqt

so you managed to live debug an unpacked cabalmain.exe and run it normally?

Naaaaah!! dlnqt, cabalexpose, gopotato are all the same person.

nova had helped u a lot and now ur insulting him wtf. Then created a baby account named gopotato to lead ppl to nowhere.

stfu!

09/02/2009 08:46 dlnqt#20

Quote:

Originally Posted by Leech-King

Naaaaah!! dlnqt, cabalexpose, gopotato are all the same person.

nova had helped u a lot and now ur insulting him wtf. Then created a baby account named gopotato to lead ppl to nowhere.

stfu!

LOL.. it's you again, chrome, can you please ban Leech-King? Ask chrome if our Ips are the same.. :|

09/02/2009 08:54 ashgamer#21

tnx dlnqt...

09/02/2009 10:56 NoobWant2Learn#22

yes manage to run and live debug it, but stucked on that part... i need assistance on this matter.. hope someone couldanser my question....do we need to bp everytime got dc??, then trace step backward, then find that dc us?? or any other solution on doing this??

09/02/2009 11:02 dlnqt#23

What did you do to make an unpacked.exe run normally? What unpacking method did you use? Just imprec only?

09/02/2009 14:29 trevsky#24

Noob wants to learn and when already learned "NoobyPRO dont wanna tell" ^,^

09/02/2009 15:25 NoobWant2Learn#25

lol dlnqt posted already the solution... follow every page of this thread and dlqnt's thread...

09/02/2009 15:27 spankwirenation#26

LOL @ leech-king, cant help it...

09/02/2009 18:01 trevsky#27

Quote:

Originally Posted by dlnqt

What did you do to make an unpacked.exe run normally? What unpacking method did you use? Just imprec only?

Quote:

Originally Posted by NoobWant2Learn

lol dlnqt posted already the solution... follow every page of this thread and dlqnt's thread...

^^ just kidding, it would lessen headaches ^_^

09/11/2009 03:23 brian86#28

@dlnq

Share me your oEP and we call it even .. HEhehehe....after almost 3 weeks of reading ..I can't get the right OEP....

09/11/2009 04:16 shir0810#29

IDA PRO for packing the edited unpacked cabal main

09/12/2009 02:35 quintinvelasquez#30

Quote:

Originally Posted by NoobWant2Learn

yes manage to run and live debug it, but stucked on that part... i need assistance on this matter.. hope someone couldanser my question....do we need to bp everytime got dc??, then trace step backward, then find that dc us?? or any other solution on doing this??

question#1: did you use unpacked cabalmain for this or just gg bypass?
question#2: how to run livedebug? is it a plugin for olly?

thanks a lot

Page 2 of 3