|
You last visited: Today at 10:04
Advertisement
[Discussion]How to unpack cabalmain.exe
Discussion on [Discussion]How to unpack cabalmain.exe within the Cabal Online forum part of the MMORPGs category.
08/31/2009, 09:16
|
#1
|
elite*gold: 0
Join Date: Aug 2009
Posts: 137
Received Thanks: 26
|
[Discussion]How to unpack cabalmain.exe
at the other thread started by dlnqt it stated the process on how to remove the dc flags.. but for us noobs we stuck on unpacking the exe.... i admit im a noob in olly but im determined to learn.. pls give me hints on how to unpack cabal.exe
|
|
|
08/31/2009, 12:47
|
#2
|
elite*gold: 0
Join Date: Jun 2008
Posts: 17
Received Thanks: 3
|
good one! this is the thread for us noobs. we just hope some pro hackers/crackers pass by and give us ideas on how to start with this thingy.
|
|
|
08/31/2009, 14:47
|
#3
|
elite*gold: 0
Join Date: Aug 2009
Posts: 137
Received Thanks: 26
|
^
^
^
lets hope they would clear out our troubled minds
|
|
|
08/31/2009, 15:35
|
#4
|
elite*gold: 0
Join Date: Dec 2008
Posts: 7
Received Thanks: 0
|
plzzzz... help me easy tips to get @_@...
|
|
|
08/31/2009, 15:55
|
#5
|
elite*gold: 0
Join Date: Aug 2009
Posts: 137
Received Thanks: 26
|
we cant find oep by just tracing coz the protector uses anti-dumping,anti tracing,pe header erasing and etc etc...im stuck
|
|
|
08/31/2009, 16:11
|
#6
|
elite*gold: 0
Join Date: Oct 2007
Posts: 364
Received Thanks: 74
|
use PEiD to identify the packer..
|
|
|
08/31/2009, 17:10
|
#7
|
elite*gold: 0
Join Date: Aug 2009
Posts: 137
Received Thanks: 26
|
the packer of cabalmain.exe is yoda 1.x / modified as what Peid shown to me.. but it doesnt seem to match w/ yoda tutorials
|
|
|
09/01/2009, 00:58
|
#8
|
elite*gold: 0
Join Date: Dec 2008
Posts: 174
Received Thanks: 9
|
post the tutorial step by sped for all , PLEASE
|
|
|
09/01/2009, 06:30
|
#9
|
elite*gold: 0
Join Date: Jan 2009
Posts: 33
Received Thanks: 2
|
why do you need to unpack the exe file?.was it to bypass GG?can't we use CR to bypass GG?
I tried attaching olly directly to the cabal process but it always end up terminating the process, then I have to restart again.. if I attach the olly to the cabalmain.exe file It shows those addresses,calls,functions, etc...I think it shows how the program executes itself..
Can someone give us a hint on where do we start...??
|
|
|
09/01/2009, 06:38
|
#10
|
elite*gold: 0
Join Date: May 2009
Posts: 18
Received Thanks: 0
|
help
|
|
|
09/01/2009, 16:51
|
#11
|
elite*gold: 0
Join Date: Jun 2008
Posts: 17
Received Thanks: 3
|
we need to unpack cabalmain to begin removing the DC flags as explained in the other thread "Removing DC flag". you can't do that if you do not unpack cabalmain because it is protected for reversing/cracking. they do not mean to give this just easily so we need to make our way out. this is to prevent unwanted proliferation of the exploit just like before. if you happen to get it the hard way, i don't think you'll give that the easy way don't you? that i think is their point. i myself haven't gone that far yet. hehehe... but i'm willing to learn...
and mind you. if you go through all the tutorials available on the net on reversing, you can apply it in other apps/software not just cabal. its your own benefit anyway going through all those hardships.
i tried reading unpacking tuts but to no avail, i can't seem to understand all of it so i decided to make it through step 1 of the reversing tuts. its feels better...
|
|
|
09/01/2009, 17:14
|
#12
|
elite*gold: 0
Join Date: Oct 2007
Posts: 364
Received Thanks: 74
|
Unpacker for cabalmain.exe..
Antivirus will detect it as a virus, mine deletes it.. open it then point to your cabalmain.exe, it will successfully unpack cabal.. you will see a dump.exe in you cabal folder. But there is another protection for it.. aspack/asprotect..
|
|
|
09/01/2009, 17:56
|
#13
|
elite*gold: 0
Join Date: Aug 2009
Posts: 54
Received Thanks: 1
|
Quote:
Originally Posted by dlnqt
Unpacker for cabalmain.exe..
Antivirus will detect it as a virus, mine deletes it.. open it then point to your cabalmain.exe, it will successfully unpack cabal.. you will see a dump.exe in you cabal folder. But there is another protection for it.. asprotect..
|
i did find the oep but cant repack it again.. did you repack you unpack exe?
|
|
|
09/01/2009, 18:48
|
#14
|
elite*gold: 0
Join Date: Oct 2007
Posts: 364
Received Thanks: 74
|
there is another unpacker needed.. not just unexestealth. look for RL!dePacker.exe
I will be posting soon how to unpack cabalmain.exe step by step. but there is another problem, I don't know how to pack cabalmain.exe back again. AFAIK, they said that cabalmain.exe will still run even if it's not the same size, so unpacked cabalmain.exe SHOULD work normally. But maybe my OEP is wrong or some asm codes were destroyed during unpacking..
btw, after you unpack it again with RL!dePacker.exe, look at the unpacked.exe. you will now see all the asm of cabal, str skill commands etc. unlike in a packed cabalmain.exe that's full of garbage asm or whatever
btw for those people that would encounter this specific error (ollydbg will completely hang when you open unpacked.exe), try a fresh installation of ollydbg without any plugins, it should work.
|
|
|
09/01/2009, 19:14
|
#15
|
elite*gold: 0
Join Date: Aug 2009
Posts: 54
Received Thanks: 1
|
Quote:
Originally Posted by dlnqt
there is another unpacker needed.. not just unexestealth. look for RL!dePacker.exe
I will be posting soon how to unpack cabalmain.exe step by step. but there is another problem, I don't know how to pack cabalmain.exe back again. AFAIK, they said that you cabalmain.exe will still run even if it's not the same size, so unpacked cabalmain.exe SHOULD work normally. But maybe my OEP is wrong or some asm codes were destroyed during unpacking..
btw, after you unpack it again with RL!dePacker.exe, look at the unpacked.exe. you will now see all the asm of cabal, str skill commands etc. unlike in an unpacked cabalmain.exe that's full of garbage asm or whatever
btw for those people that would encounter this specific error (ollydbg will completely hang when you open unpacked.exe), try a fresh installation of ollydbg without any plugins, it should work.
|
maybe we need to join force lol
|
|
|
|
|
Similar Threads
|
[RELEASE+DISCUSSION] Unpacked CABALMAIN.EXE
06/25/2013 - Cabal Online - 135 Replies
Update: September 7, 2009 1:03PM (+8 GMT) - VERY IMPORTANT PLEASE READ: You don't need an unpacked cabalmain.exe in removing the DC flag, live debugging will already suffice. The benefit for an unpacked cabalmain.exe is that you will be able to apply the removal of the dc flag PERMANENTLY. Meaning you don't need to open up ollydbg anymore.
But if you want to skip the unpacking of cabalmain.exe and skip to the removal of dc flag, you may do so.. Although if you found the dc flag but you...
|
[Request]Unpack CabalMain.exe
09/01/2010 - Cabal Online - 4 Replies
Hello,i need little help,
Who can unpack this cabalmain.exe and remove the xtrap ?But remove only the xtrap dont activate the GM commands,i have an special cheat engine for gm commands.
Thanks.
Download Link:
http://www.sendspace.com/file/fndini
Sorry for double post,some one can help me? please !
Up?????
|
Help me unpack cabalmain [cabal99]
03/10/2010 - Cabal Private Server - 2 Replies
Help me pro !
this patch: http://cabal99.no-ip.biz/ManualPatch-11022002V666. exe
and cabalmain:
cabalmain.rar
http://cabal99.no-ip.biz/
thanks !
|
All times are GMT +2. The time now is 10:04.
|
|