[Discussion]How to unpack cabalmain.exe

[howcow95]

idk if this helps anyone since i'm not really getting much help anymore but heres wut i did to get my OEP I open cabalmain.exe using olly with phantOm plugin and i get the ollydbgscript plugin and I hav a script i found (its made for unpacking themida becuz im from cabalNA so u might need a dif script) so this script unpacks and then it stops on the OEP... after that i just right click and get all the referenced text strings and BAM! im looking at the asm codes. sooo yea i'd appreciate it if dltnq or Noob or Nova or someone or anyone cud help me with my problems >.>

[NoobWant2Learn]

dump it first then fix iat using imperc

[jigzul]

howcow, where'd you get your script? can share mine uses themida too themida 2.0.3...

[oren_studio]

Originally Posted by howcow95

idk if this helps anyone since i'm not really getting much help anymore but heres wut i did to get my OEP I open cabalmain.exe using olly with phantOm plugin and i get the ollydbgscript plugin and I hav a script i found (its made for unpacking themida becuz im from cabalNA so u might need a dif script) so this script unpacks and then it stops on the OEP... after that i just right click and get all the referenced text strings and BAM! im looking at the asm codes. sooo yea i'd appreciate it if dltnq or Noob or Nova or someone or anyone cud help me with my problems >.>

ya can u share the script that u are using?

[DH4PH]

Hmmmmmm... It seems you all fail. Anyway Im giving an opportunity for those

who really want the cracked exe.. Im from Cebu City and I'm selling my cracked

exe.. For Cebu Area buyers we can meet.. Just leave your msg here..

For those Outside Cebu interested buyers leave your [B]OFFER AND SERVER[B]

I will only sell to limited numbers of people for this hack to last long...

If you pm me be sure to leave your OFFER (php of course) and Server (I'm not

selling this if were on the same server)

EDIT: No In-Game proofs to prevent impostors(E-games staffs, GM's,EST Soft

staffs for finding or even patching this valuable hack of ours)



PLS REPLY WITH AN OFFER AND UR SERVER THANKS.. NO OFFER NO REPLY

[pssye]

Originally Posted by DH4PH

Hmmmmmm... It seems you all fail. Anyway Im giving an opportunity for those

who really want the cracked exe.. Im from Cebu City and I'm selling my cracked

exe.. For Cebu Area buyers we can meet.. Just leave your msg here..

For those Outside Cebu interested buyers leave your [B]OFFER AND SERVER[B]

I will only sell to limited numbers of people for this hack to last long...

If you pm me be sure to leave your OFFER (php of course) and Server (I'm not

selling this if were on the same server)

EDIT: No In-Game proofs to prevent impostors(E-games staffs, GM's,EST Soft

staffs for finding or even patching this valuable hack of ours)



PLS REPLY WITH AN OFFER AND UR SERVER THANKS.. NO OFFER NO REPLY

Nice SS. but its missing a time stamp for the SS. you could try to make a new SS again with a timestamp at the lower right corner after you just SS it.. =)

[howcow95]

Originally Posted by NoobWant2Learn

dump it first then fix iat using imperc

will this help me in my problem ?.... I can't use Ollydbg to debug atm because if I try to use TwinR to use as a bypass TwinR detects Olly as a debugger and therefore it doesn't work... I've tried HideOD and PhantOm with dif settings to try to be undetected by TwinR but it doesn't work... so anyone have another plugin/idea/setting I could use to hide Olly from TwinR? Also I'll be willing to share my script as soon as I have this problem sorted out.


K well I think I got it dumped and fixed via importrec I can post pic or PM sumone pics if noob nova dlntq want to help me further... the dump_.exe is 11708 kb big but doesn;t do anything if i try to run it ?... also I still need help on the TwinR detecting Olly thing >.>