• Unfortunately, we have experienced significant hard drive damage that requires urgent maintenance and rebuilding. The forum will be a state of read only until we install our new drives and rebuild all the configurations needed. Please follow our Facebook page for updates, we will be back up shortly! (The forum could go offline at any given time due to the nature of the failed drives whilst awaiting the upgrades.) When you see an Incapsula error, you know we are in the process of migration.

Lan and Wan connection solution

Status
Not open for further replies.
Moderator
Staff member
Moderator
Joined
Feb 22, 2008
Messages
2,404
Reaction score
724
Inject the dll forced in the cabalmain.exe using Assembly:
Change the Entry Point
LoadLibrary(new dll)
And then return to the old EP.
This way, it would be never detected as a virus.

Easy.
 
Banned
Banned
Joined
Oct 20, 2006
Messages
3,245
Reaction score
1,652
Inject the dll forced in the cabalmain.exe using Assembly:
Change the Entry Point
LoadLibrary(new dll)
And then return to the old EP.
This way, it would be never detected as a virus.

Easy.

Or, do it properly and add the DLL to cabalmain's IAT. Then you can just:
  • Jump to empty code from the OEP
  • CALL DWORD PTR DS:[pointer to DLL function]
  • Add the replace asm commands back (ie. push 60, ...)
  • Jump back to OEP + size of JMP command.
 
Banned
Banned
Joined
Oct 20, 2006
Messages
3,245
Reaction score
1,652
It's how our TDP client loads the language-changing function :p
 
The Dinosaur
Loyal Member
Joined
Jun 29, 2008
Messages
5,028
Reaction score
999
People would only be considered if they had been very active in the community and had something to offer. Mostly by releasing lots of nice stuff here which helps improve the releases or give us new ones. I think people with a lot of knowledge that help the community could be considered as well, though you would probably have to be in competition with me as "unofficial support bot" ;)
 
Newbie Spellweaver
Joined
Jan 26, 2011
Messages
55
Reaction score
0
Can anyone help me? did not work here
I add what IP of my pc or vmware to me connect ?

//

CabalMain is detecting and not injected

//

Please a tuto of how inject the DLL in CabalMain please ?/
 
Last edited:
Status
Not open for further replies.
Back
Top