About Pack main

[magraopb]

Hi all,
First of all... if any moderator delete this again.... please tell me the reason

so..

i'm looking for cabalmain packer like Themida, Winlisence.. or other, in special "Themida"

I found one server using Themida V2.x, how i can discovery he using Themida? (with a tool to do this)

So..
I'm trying pack my cabalmain (successfully) but Injector still Work.

Can someone tell us how we can do this pack with Themida to prevent these injectors?


Thanks

[MentaL]

[y0cata]

When u run a exe the windows unpack it in ram the inject make a modify in the exe that is unpacked in ram.

[magraopb]

Yes, i know about these, how address memory works.
but i want to know, how this is possible, in another (p. server) injectors don't work, and ours works.
i think him use same our cabalmain

in 369, injectors don't works (breaklee), i can't use husky bcz is packed
in 374, injectors works

[y0cata]

because the address for gm/aoe change if u make a modify from the source code ;) i think is possible to change the address whit ollydb but i don't know how.

[allocen]

You can by making a codecaving. Simple.

[magraopb]

Can you tellme how? or have one to show me?

Thanks

[allocen]

There are on google a lot of tutorials how can you make codecaving using ollydbg.

[PunkS7yle]

Yes, i know about these, how address memory works.
but i want to know, how this is possible, in another (p. server) injectors don't work, and ours works.
i think him use same our cabalmain

in 369, injectors don't works (breaklee), i can't use husky bcz is packed
in 374, injectors works

Injectors work in 369 too, just because the address is different doesn't mean the main is protected, the dll you try themselves are not made for that version, but one can be made in 10 minutes and it will work too.

[magraopb]

yes, it's true... just study the address from memory.. it's so bad :(

Punk,
I'm thinking.. if is possible do a hook on this main with a anti hack dll, ex:.. this dll will check if someone are reading the memory.

[Tmxx Rush]

Yea me too got lazy about any time can make new dll :D better keep bann hackers