[Discussion] Removing DC Flag

~~NovaCygni~~ · 09/14/2009, 23:13

Quote:

Originally Posted by NoobWant2Learn

its been a while nova... btw, got some questions, what plug-in do we need to use to trace the flags?? thanks

Traceback once from the Code your left at in olly when your Disconnected by the server, itll traceback to the last action that got you disconnected, the rest should be obvious!

tri407tiny · 09/14/2009, 23:46

Hmm, i would like to learn a bit what you know nova, i am currently hacking another game, but i have Quite the experiencee -_- , see, i have a working Rebuilt .exe, and i Debugged it all the way down to the source code -_- which happends to be python o_O i would liek to Learn a bit of how you do your hacks heree etc, so i can work / tranfer the knowledge to another game, *cough* and my soon to come gold site*Cough* -_- well Maybe a gold site, if im not to Occupied Err, well PM me , i guess, or we can tlk here (My pm box is full, i delted 6 just so you could pm me) -_-

wow, that was quick...im bored now, Woot Back to teh AllyDBG FTW (Better and more hidden than Olly)

HumanaOne · 09/15/2009, 05:01

Quote:

Originally Posted by NovaCygni

Traceback once from the Code your left at in olly when your Disconnected by the server, itll traceback to the last action that got you disconnected, the rest should be obvious!

it's been that long since you have fired up this thread Nova

anyways i have already made some tweaks myself on the game using live-debugging on ollydbg, ex; doing the always excellent combo regardless of the hit, tweaking/switching the crit rate/damage % of the in-game character, etc..

but, what i am more focused on right now is to succeed in unpacking the exe file

the thing is, every time i make changes on the ASM codes, and try to save my work, ollydbg still saves/patches the file but whenever i try to open/run the patched file, it shows as corrupted or "it cannot run".. the protection on this file really needs to be reversed in order for our work to remain permanent on the coding area. i know we've gone through all the hardships of olly debugging using a packed exe (original file) and yes, it did help some of us at least in achieving our goal in finding the dc flags (the hard way)

but it would really help us if we can do some further tweaking/research on the game if we are going to use an unpacked exe file. "my tuppence worth"

P.S. it's good to have our Queen of Evil back

definitely, we will learn a lot more if people like you and dlnqt are around

NoobWant2Learn · 09/15/2009, 05:22

Quote:

Originally Posted by NovaCygni

Traceback once from the Code your left at in olly when your Disconnected by the server, itll traceback to the last action that got you disconnected, the rest should be obvious!

Thanks.. So we should "traceback" to where we got an invalid socket??
What command to use? is NOPing successful? Can u give me an idea what line it is??

spankwirenation · 09/15/2009, 06:10

how do someone get promoted anyway? and what are the benefits of this promotion? hmmm intresting....

brian86 · 09/15/2009, 06:44

the difficult part is finding the oep ..and rebuild IAT .. please help me! i was able to rebuild it but it wont run normally! i think my EOP is wrong! any tips on how to find the correct OEP?

Pupix · 09/15/2009, 09:38

Quote:

Originally Posted by spankwirenation

how do someone get promoted anyway? and what are the benefits of this promotion? hmmm intresting....

what you mean?

Junior Member and Senior Member? O.o
All is about posts(e-*****)
Junior Member = 50posts
Senior Member = 100posts

pssye · 09/15/2009, 19:49

SO have anyone found out how to remove the DC flag and get it working??

~~NovaCygni~~ · 09/15/2009, 22:28

Quote:

Originally Posted by pssye

SO have anyone found out how to remove the DC flag and get it working??

Yup! but no-ones going to give u a step by step guide to doing it, for 2 reasons, 1) If we did then everyone and his turk friend would be using DH again thus destroying the economy and weakening its overall benifit to the few at the moment and 2) Est would recieve a copy of the step by step guide, and work on another "Patch" (*

lol *) sooner!.

168Atomica · 09/16/2009, 00:33

Quote:

Originally Posted by NovaCygni

Yup! but no-ones going to give u a step by step guide to doing it, for 2 reasons, 1) If we did then everyone and his turk friend would be using DH again thus destroying the economy and weakening its overall benifit to the few at the moment and 2) Est would recieve a copy of the step by step guide, and work on another "Patch" (* lol *) sooner!.

+1

To some ppl who pm me...
Now I hate ppl pm'ing me promising me everything. Reality check- cabal economy is now getting stable (of course, people have to accept the fact that we now control the moderation of DHs and alz stacking.) I ain't releasing any patch client file. How did I came up with successfully cracking my client? Simple, patience.
Do you guys intend to run before you walk?
To all those learning to find the OEP, it should be obvious. As I have said, they have similarities among apps. (ex. Microsoft Visual C++ apps have the same OEP patterns...)

I shared my cracking procedure to one, desperate, soul. The price tempted me, then leaved me guilty coz I didn't know the person completely. What if he leaked it out? That is why I am so careful to share the info. I will NOT do that again.

The info in this thread should be sufficient to crack it. So, do not waste your time posting how and how and how to do things. It is becoming difficult for the new readers to scan the mid pages of this thread.

tri407tiny · 09/16/2009, 01:35

>_> unpacking i can help with O_O but "Finding code to decryt the packet *rolls eyse* BACK TO TEH GOOGLE WOOOOT

HumanaOne · 09/16/2009, 04:33

Quote:

Originally Posted by Pupix

what you mean?

Junior Member and Senior Member? O.o
All is about posts(e-*****)
Junior Member = 50posts
Senior Member = 100posts

i only have 14 posts so far, i guess i wasn't really that active in posting on threads back then. i just apply what i learn from them, if i get some updates or progress on my work, then that is the time i coordinate or brainstorm w/ intellectual forumers. it's better to work with someone than no one.

NoobWant2Learn · 09/16/2009, 05:02

never say die

dlnqt · 09/16/2009, 06:15

Quote:

Originally Posted by 168Atomica

+1

To some ppl who pm me...
Now I hate ppl pm'ing me promising me everything. Reality check- cabal economy is now getting stable (of course, people have to accept the fact that we now control the moderation of DHs and alz stacking.) I ain't releasing any patch client file. How did I came up with successfully cracking my client? Simple, patience.
Do you guys intend to run before you walk?
To all those learning to find the OEP, it should be obvious. As I have said, they have similarities among apps. (ex. Microsoft Visual C++ apps have the same OEP patterns...)

I shared my cracking procedure to one, desperate, soul. The price tempted me, then leaved me guilty coz I didn't know the person completely. What if he leaked it out? That is why I am so careful to share the info. I will NOT do that again.

The info in this thread should be sufficient to crack it. So, do not waste your time posting how and how and how to do things. It is becoming difficult for the new readers to scan the mid pages of this thread.

Question, how did you manage to patch/pack the client back to its original state along with the removal of the dc flag? And how did you manage to keep the IAT intact along with original PE header, RVA, Size etc?

logan432 · 09/16/2009, 06:46

Quote:

Originally Posted by dlnqt

Question, how did you manage to patch/pack the client back to its original state along with the removal of the dc flag? And how did you manage to keep the IAT intact along with original PE header, RVA, Size etc?

this is what i want to know.. all i know if your oep is incorrect, your IAT will never recover