[Release] Unpacked cabalmain Executables.

Hi.

I will keep posting unpacked executables of different Cabal servers here. An unpacked game executable adds different new possibilites to edit the executable or understand how the game works, thus making it easier to develop new cheats.

If you are looking for a tutorial on how to unpack the game executable of CabalEU or CabalPH then see this:

[Only registered and activated users can see links. Click Here To Register...]



-------------------- 24.02.2010 --------------------

+ Unpacked cabalmain.exe 1.0.0.1308 for the CabalEU client

-------------------- 10.04.2010 --------------------

+ Unpacked cabalmain.exe 1.0.0.1315 for the CabalEU client
+ Unpacked cabalmain.exe 1.0.0.22 for the CabalVN client

-------------------- 13.04.2010 --------------------

+ Unpacked cabalmain.exe 1.0.0.83 for the CabalPH client
+ Unpacked cabalmain.exe 1.0.0.13 for the CabalIndonesia client

-------------------- 16.04.2010 --------------------

+ Unpacked cabalmain.exe 1.0.0.93 for the CabalSEA client

-------------------- 09.06.2010 --------------------

+ Unpacked cabalmain.exe 1.0.0.19 for the CabalIndonesia client

-------------------- 11.06.2010 --------------------

+ Unpacked cabalmain.exe for the CabalEU client

-------------------- 17.06.2010 --------------------

+ Unpacked cabalmain.exe 1.0.0.283 for the CabalElite client

----------------------------------------------------------

Archive password:
Have fun... :)

so basicly this is bypass or what? :)

Nope, but you can remove game guard from cabalmain.exe(i think)

and how do u do that? :]

Hmmm, cabalmain.exe is still protected by Themida:P

Quote:

Originally Posted by OmegaArma Hmmm, cabalmain.exe is still protected by Themida:P

Still... eh no. It has never even been protected with Themida :).

That will be usefull :devil: I seen some haxed exes with hotkey cheats ^^

Quote:

Originally Posted by InstantDeath Still... eh no. It has never even been protected with Themida :).

Then why when i'm trying attach OllyDbg to cabalmain.exe Themida window pops up?

[Only registered and activated users can see links. Click Here To Register...]

Quote:

Originally Posted by OmegaArma Then why when i'm trying attach OllyDbg to cabalmain.exe Themida window pops up? [Only registered and activated users can see links. Click Here To Register...]

You're not attaching it to my cabalmain.exe. If you open/attach to the unpacked executable I provided you will get no such errors.

The entrypoint of my cabalmain.exe corresponds the Microsoft Visual C++ 7.1 header and the file has not got any encrypted code sections. And the file doesn't show any signs of Themida :).

hmm can u "InstantDeath" remove the gameguard from cabalmain.exe ? or umm make it allow send mouse hooks ino cabal ... ive made bot... [pixel bot]alot ppl would be happy if it would work in eu .. here it is[the bot] >>> [Only registered and activated users can see links. Click Here To Register...] << it dont work with eu tho ..bcuz gameguard... so if u could hex the cabalmain .exe somehow to amke this work and gives us the .exe :] ild thank u all day omg :P

Quote:

Originally Posted by InstantDeath You're not attaching it to my cabalmain.exe. If you open/attach to the unpacked executable I provided you will get no such errors. The entrypoint of my cabalmain.exe corresponds the Microsoft Visual C++ 7.1 header and the file has not got any encrypted code sections. And the file doesn't show any signs of Themida :).

Ahh, i get this window only when i'm trying to attach to enabled cabalmain.exe, when i'm opening file normally in OllyDbg its working perfectly.
Hmmm, window of Themida is only showing, and its doing nothing o_O

Quote:

Originally Posted by OmegaArma Ahh, i get this window only when i'm trying to attach to enabled cabalmain.exe, when i'm opening file normally in OllyDbg its working perfectly. Hmmm, window of Themida is only showing, and its doing nothing o_O

Ah I found out why. It's because of GameGuard :). My debugger is so well hidden so I didn't even think of that.

The GameGuard main module (GameMon.des, it's actually GameMon.exe) is packed with Themida and it detects your debugger.

I cant understand what this makes exactly! Can you explain me please? is it something like bypass or something other? Please explain.

Quote:

Originally Posted by bot4eto I cant understand what this makes exactly! Can you explain me please? is it something like bypass or something other? Please explain.

If you have the knowledge you can disable GameGuard from the executable. An unpacked executable allows you to read the real application code of cabalmain.exe.

However if you do not know anything about reversing etc this is nothing for you :)...

Quote:

Originally Posted by InstantDeath Ah I found out why. It's because of GameGuard :). My debugger is so well hidden so I didn't even think of that. The GameGuard main module (GameMon.des, it's actually GameMon.exe) is packed with Themida and it detects your debugger.

Ahhh, i love your debugger <3