Removed X-TRAP manually using Ollydbg

[Drav3n]

I will start developing on how to remove the x-trap from the original cabalmain EP8.
The offset below will just a "starting" to remove injecting the x-trap

<!-- REMOVED X-TRAP -->
47595E
JNB SHORT 00475964 = JMP SHORT 0047598F

4759B2
JL SHORT 004759DD = JMP SHORT 004759C3

If you found some offset related on the X-TRAP, please let me know.

Cheers!

[MentaL]

[vodikatm]

You found two but not found the others? wtf?

[Drav3n]

I found everything, I just give them some starting point to completely removed it.

Let them find the others offset

[vodikatm]

I posted a cabalmain without Xtrap was only compare with the memory with Xtrap. I never found it necessary to post, w / e.

0047595E ~> EB 2F
004759B2 ~> EB 0F
00672457 ~> EB
00A0FE90 ~> C3
00A0FE30 ~> C3
00A0FDF0 ~> C3
00A0FE10 ~> C3
00A13E90 ~> C3
00A0CF70 ~> C3

[Drav3n]

I posted a cabalmain without Xtrap was only compare with the memory with Xtrap. I never found it necessary to post, w / e.

0047595E ~> EB 2F
004759B2 ~> EB 0F
00672457 ~> EB
00A0FE90 ~> C3
00A0FE30 ~> C3
00A0FDF0 ~> C3
00A0FE10 ~> C3
00A13E90 ~> C3
00A0CF70 ~> C3

Your cabalmain no xtrap released have a little bug. Try to login in game then pullout your internet. The cabal client will get not responding (White Screen) and other complain is "FREEZING" when they internet is not stable or slow.

[vodikatm]

I never had problems with cabalmain that removed the Xtrap, multiple servers with the x-trap removed in this way that I posted that also has no problem, lol.

[Drav3n]

I never had problems with cabalmain that removed the Xtrap, multiple servers with the x-trap removed in this way that I posted that also has no problem, lol.

Well, for me it's not a big issue. But some players was to much exaggerated when they experienced Client Freezing. They didn't know that on their side was the problem (ISP). You can test it to yourself. I tested your cabalmain and I experienced "Not responding"

[PwrDex]

I'm aggree with Drav3n. I'm using an xtrapless cabalmain and we are experience this every day. Also that whitescreen and autocloes can come from bad cabal.enc filling, unknown values etc.

[Drav3n]

I'm aggree with Drav3n. I'm using an xtrapless cabalmain and we are experience this every day. Also that whitescreen and autocloes can come from bad cabal.enc filling, unknown values etc.

It's not all about cabal.enc, It's on cabalmain issue. See my attachment above. I've run a test 2 client running.

[PwrDex]

It's not all about cabal.enc, It's on cabalmain issue. See my attachment above. I've run a test 2 client running.

Sorry i mean could be...

also another thing: not will be better way to implement a nulled dll instead xtrap somehow? than it not require to remove it completely..

[xyqhao]

You find unwilling to post, you do not love to share, too thanks.

[kolipri]

After I removed the xtrap the cabalmain not working on windows xp? but it works in windows 7 and above. what is other way to remove xtrap that compatble on windows xp and above? thanks!

[bypazs]

I will start developing on how to remove the x-trap from the original cabalmain EP8.
The offset below will just a "starting" to remove injecting the x-trap

<!-- REMOVED X-TRAP -->
47595E
JNB SHORT 00475964 = JMP SHORT 0047598F

4759B2
JL SHORT 004759DD = JMP SHORT 004759C3

If you found some offset related on the X-TRAP, please let me know.

Cheers!

Thank you @Drav3n today i understand how to use Ollydbg edit cabamain

but i don't know how to search in line 0047595E lol

i manual search lol

i found your address and can removed x-trap