[Release] Cabal dlog.dat Decrypter

[HellSpider]

Hi.

This is a small application I wrote today to decrypt the hidden dlog.dat file found in Cabal\Data\UserData folder.

The file includes information on suspicious modules, which Cabal staff uses to determine if your account should be terminated.

The application is coded in MASM.

~Instructions~

1) Move dlog.exe to Cabal\Data\UserData folder
2) Execute dlog.exe
3) Decrypted file decrypted_dlog.txt will be created in the same folder

The error "The file does not have any data!" means the filesize is 0 -> nothing is logged.


_

[bonakid0510]

fixedmain.exe;zsjgpx.dll;AhAScr.dll;aswCmnBS.dll;a swCmnOS.dll;aswCmnIS.dll;Aavm4h.dll;AavmRpch.dll;a shBase.dll;aswEngLdr.dll;ashTask.dll;aswAux.dll;as wProperty.dll;wtsapi32.dll;mikezWH.dll;

that's what i have in my log file. ^^

[inssider]

Originally Posted by bonakid0510

that's what i have in my log file. ^^

Very ugly log.
The fixedmain.exe and mikezWH.dll,i am sure will lead your account to ban soon.
For your safety,transfer all your items to another account.

[babystanley]

this way it will not be tracked the hack that we were using right?

[urosjoj]

so with this i cant get banned??????

[pptJR]

nimdnsNSP.dll;nimdnsResponder.dll;

this is what in my log. dont know what it is though. )

[inssider]

Originally Posted by babystanley

this way it will not be tracked the hack that we were using right?

I don't think that deleting the log will clean your tracks.
Anyway,now whit this tool,we can monitoring and understand better how it works.
This is the meaning of the release.

Originally Posted by pptJR

nimdnsNSP.dll;nimdnsResponder.dll;

this is what in my log. dont know what it is though. )

nimdnsnsp.dll= National Instruments Zeroconf Namespace Service Provider
nimdnsResponder.dll= National Instruments Zeroconf Library

So i think you are safe at the moment.

[beyondmithril]

fixedmain.exe;visicom_antiphishing.dll;mgAdaptersP roxy.dll;MSVCR71.dll; - CABAL PH log files. do know these files?

[alipunga2]

Originally Posted by beyondmithril

fixedmain.exe;visicom_antiphishing.dll;mgAdaptersP roxy.dll;MSVCR71.dll; - CABAL PH log files. do know these files?

fixedmain.exe for the bypass.. others i dont know

[cobyowner09]

avsda.dll; this is mind

[pptJR]

Originally Posted by inssider

nimdnsnsp.dll= National Instruments Zeroconf Namespace Service Provider
nimdnsResponder.dll= National Instruments Zeroconf Library

So i think you are safe at the moment.

okay thanks. i have been wondering because mikez and crckd's dlls are on the dl.enc but not on the decrypted_dl.txt. i hope what you think is right.

[urosjoj]

QUESTION:

if there isnt any hack .dll's written in dlog.dat that means the hack is undetected and won't get me banned?????????????

[ceejay2010]

crckd.dll;xpsp3res.dll

^^

[urosjoj]

pls anyone answer my question above, it is very important!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[inssider]

man,what is so hard?
Open your decrypted dlog.dll and see if you have any of the blacklisted track.

 Spoiler

/B/;
BLHK.dll;
GlobalCbt.dll;
CBJoiner.dll;
Ahm.dll;
QQZip.dll;
cat.dll;
MMGOGO.dll;
TTProject2.dll;
TTViolie.dll;
DLL_CabalOnline_2.dll;
D3DMenu_082412-082512.dll;
Cabal_290812.dll;
CabalMainVersion_081512.dll;
D3DMenu_082712-082812.dll;
MAXCore.dll;
\MaxCabal;
\PunkWH;
ca.dll;
plesedll.dll;
\ByPassGame;
\crckdWH;
wh.dll;
\Cheat Engine;
speedhack-i386.dll;
lol.dll;
cabalhack.dll;
\cabal\;
Cabal.dll;
WriteProcessMemory_Hook_Module.dll;
\yypip\HookGame.dll;
\CabalRider;
Mon Cabal Injector.dll;
VirtualProtectEx_Hook_Module.dll;
XTrapVa.dll;
CabulHack.dll;
Updater_CBL.dll;
Drache.dll;
korakora.dll;
cabah_hackPKL.dll;

If u don't have any of these in your dlog,i think you are safe.

Good luck!