[release for testing] unpacked dragonica.exe

ruddyhell · 09/30/2009, 05:21

this is the previous to the now new exe vers(gpotato). just finished (i think lol) unpacking and then there is a fookin update gawd (which i accidently replaced with the unpacked .exe lol. So a upload of the new gpotato .exe would be kindly welcomed ppl (need it!!!! cant be fooked with a redownload/install)).

THIS NOT A HACK PPL. BUT CAN HELP.
This is for testing i.e. bugs/cockups/idiota mistakes to be pointed out
I hate asprotect 1.23 rc4 so there better not be lol
olly hangs @ 97%..use space before it reaches this point (trying to fix that) some ppl say a clean install of olly will fix this, though no luck for me
also cant get by server selection (trying to fix)
IAT might be fooked lol
Im only okay @ unpacking(if ppl with no knoweldge of "how" are bad,.. im okay lmao)
more mistakes/bugs? tell me!!!!

furthermore, uploads of the other versions(thq, IAH) .exe's would be welcomed to see what they are packed with, then mabye unpack(if i can be bothered downlading more installers gawd lol) etc

that5life · 09/30/2009, 07:33

Any chance of unpacking one for thqice?

ruddyhell · 09/30/2009, 13:44

right no need for a new .exe deleted patch id and it pulled a new one from the server.
to q, yes mabye when i have completed doin gpatato ver

freddi98 · 09/30/2009, 13:56

it says missing bugtrap_mdo.dll is missing

LemoniscooL · 09/30/2009, 15:42

nice one as fas as i can see it is completely unpacked ^^
would be nice if you could release the newer unpacked executable

ruddyhell · 09/30/2009, 15:49

yeah it looks unpacked lol but the iat isnt rebuilt properly

right after trying to unpack for a few hours this buggy unfinished unpack is as good as i can make atm.

this now looks like wishful thinking again. unless solutions can be found for

1.how to skip launcher through ollydbg(should be easyish but i cnt be fecked lol)
2. how to hide the debugger from themida (phantom plugin is not working...isdubugpresent.dll has nothing to do with themida obv)
3. how to hide imprec from themida

until solutions are found for these problems. it shall be impossible to make a fully unpacked exe, well for me anyways.

until then ill be lookin at other things to do with dragonica.

I'll leave the buggy exe up for refrence thats all!!!!!!!!!!!

ill do a "unfinished" unpack of the new exe but thats all i can do.

Kuma123 · 09/30/2009, 16:26

Some hints on how to get the rest done:

1. BP on CreateProcessA() see which parameters are used to start the client, use this parameters in olly. (Arguments in the Open dialog)

2. hiding olly when gg is using a kmd is not that easy, best would be a solution like

3. same as in 2. but you could try to disable GG (noping the CreateProcess call) let the client load and then attach imprec to restore the IAT

Btw there may be CRC checks on the file, to test if it was tampered/unpacked

ruddyhell · 09/30/2009, 16:33

woot hints :P
I mean................oh no hints...............back to trying to finish unpacking.
thanks for the hints i geuss lol
nah really ty

foxracer32765 · 10/01/2009, 23:59

It doesn't work. lol

shay_3100 · 10/02/2009, 23:40

what we can do with this?

LemoniscooL · 10/02/2009, 23:51

nothing suz its not complete
close please ..

ruddyhell · 10/03/2009, 01:17

yeah close..........i suck and am done with unpacking this lol. Im never gonna do it on this one lol.

so much time wasted

lol