[Discussion] Removing DC Flag

[dlnqt]

change 1A to 1B?

[brian86]

oops! im sorry!! im not in there yet! im really confuse on how to atach olly cause it is detected evertym i try to atach it! T_T. im finish unpacking cabal.exe..

[ibonehj15]

Originally Posted by brian86

oops! im sorry!! im not in there yet! im really confuse on how to atach olly cause it is detected evertym i try to atach it! T_T. im finish unpacking cabal.exe..

question
kwes-chun
howd you unpack cabalmain.exe?
wanna ask

then
COULD SOMEBODY POST HERE THE OTHER STEPS
hehe ^^
kidding aside though im serious enough to start w/ this
cheers people
i cant leech exact infos here though at least
ure all here to answer my lil questions???

[logan432]

Originally Posted by ibonehj15

question
kwes-chun
howd you unpack cabalmain.exe?
wanna ask

then
COULD SOMEBODY POST HERE THE OTHER STEPS
hehe ^^
kidding aside though im serious enough to start w/ this
cheers people
i cant leech exact infos here though at least
ure all here to answer my lil questions???

it is said in page 3 of this thread

btw thanks to you all

[xDemonBane]

it does work.... ^_^ thanks for all the tips...

[jaypee02]

nice topic.. tnx for those giving some tips

[kenlyn26]

Originally Posted by juandelacruz1103

nova , dlnqt , 168atomica after i unpack cabal using OllyDbg and it stop at the Entry Point, how can i know/find the OEP ? thanks hope i can learn wat u guys have learn..

[juandelacruz1103]

after i unpack cabalmain.exe den run it manually i got detected. ive DL hidedebugger and phantom but i cant find hideolly. i tried searching the net. cud u give me the link pls. thanks.

[dlnqt]

@Nova

Is Ollydbg + OllyDMP compatible with the packer of cabal? Don't you need the exact type of unpacker (Yoda + ASP AFAIK)?

[NovaCygni]

Originally Posted by dlnqt

@Nova

Is Ollydbg + OllyDMP compatible with the packer of cabal? Don't you need the exact type of unpacker (Yoda + ASP AFAIK)?

Yup... I think ive got Y0da's Aspack Depax for that job as one of the plugins for PEiD

[ibonehj15]

Originally Posted by logan432

it is said in page 3 of this thread

btw thanks to you all

thanx for this
i only got yoda cryptor and asprotect
well gonna try this things...i think
cheers again ^^

[dlnqt]

Originally Posted by NovaCygni

Yup... I think ive got Y0da's Aspack Depax for that job as one of the plugins for PEiD

Can't find the ASPackDie plugin for PEiD as it has not made public since the maker said it had a lot of bugs :| Getting the program would mean getting the program from him directly, I found the original ASPackDie 1.41 but it's not a plugin for PEiD..

[logan432]

do you need to repack the cabalmain.exe after you unpack it?

[gr13ver]

hi! im new to this thing but i'm willing to learn i just downloaded ollydbg 1.10 and phantom but can't seem to find hideolly plugin. i kept on changing settings of phantom but can't seem to make the right settings can any1 help?

[bboyecko]

****. I copied cabalmain.exe to another folder ( as not to **** up he real one by accident) and i kept wondering why it just terminate with no way to get it to work...meh <.<

now on to finding the flag and done

thnx qoe and all the others