Web Unpacking??

[jadeling]

Can anyone help me to get a mem dump or teach me how to get a mem dump for v149 Msea?? I want to use it for IDA...


Sorry for my bad English.
Thank you.

 

[Hilia]

a way would be to use process-hacker, and pause the MapleStory.exe , then attach ollydbg or some other debugger and use a dump plugin.

 

[jadeling]

can I know which dump plugin??

 

[Hilia]

You must be registered to see links

Ollydump should do it. When maplestory is "loaded" into ollydbg, right click and select dump etc.

 

[jadeling]

erm...but whenver I try to suspend it,it show me this

You must be registered to see links

 

[Hilia]

I have never had this, did you launch process hacker as admin? (also the error is a STATUS_INFO_LENGTH_MISMATCH error.)

 

[jadeling]

yeap...I did launch it with admin...



erm...I managed to load the MapleStory.exe into olly...but I don't get what you mean by right click it and dump??

 

[souravipc53]

your best bet is to 1. run and let it go to the big play button screen (game launcher screen). Then add CE to it. and do a memory dump . Search google how to dump memory using CE. make a full dump of lets say 400000~2500000

 

[jadeling]

@Souravipc54
but...it's msea.... :O

 

[souravipc53]

Souravipc54
but...it's msea.... :O

Install something called Process Explorer or Process Hacker. Run as admin. Start Maple, Before hshield pop ups, freeze the threads. Dump using CE. Google how to suspend process using Process Explorer or Process Hacker

 

[jadeling]

I've googled on how to dump memory using CE but I don't really get it...

 

[sunnyboy]

@jadeling

Enjoy making your IDB. Made it for a friend a few days ago

You must be registered to see links

 

[jadeling]

jadeling

Enjoy making your IDB. Made it for a friend a few days ago

You must be registered to see links

Thanks! but mind teaching me on how to unpack?? cause I want to unpack it also if there is a new version....

 

[Hilia]

Thanks! but mind teaching me on how to unpack?? cause I want to unpack it also if there is a new version....

There is a differents between unpacking and a memory dump.

 

[jadeling]

There is a differents between unpacking and a memory dump.

ah...sorry...i mean memory dump...lol