Bypass MXCustomDB Check !!

Printable View

01-01-06
FeN$x

Bypass MXCustomDB Check !!

Ok people, some guys say that they can run his server without CustomDB hehehe, well let them think and do whatever, for me its more secure use MXCustomDB, but some reports say that the only reason why GS Fall its caused CustomDB...

So here i was checking and i made a bypass how??

lol here we go:

Target: Mydll
Protection: None
Objetive: Make Bypass of CustomDB ^^

1.- Open a beer and hear metallica: "The call of Ktulu or The Unforgiven" (optional)

2.- Open Ollydbg and open MYDLL on it...

3.- We are here:

Code:

150153E2 > $ E9 4AD10000 JMP Bypassed.15022531 150153E7 . D1E7 SHL EDI,1 150153E9 . 47 INC EDI 150153EA . 51 PUSH ECX 150153EB . 46 INC ESI 150153EC . 3369 59 XOR EBP,DWORD PTR DS:[ECX+59] 150153EF . 42 INC EDX 150153F0 . C2 71BE RETN 0BE71

lol wtf that is like packed one... but lets press F7 for watch where JMP lead us..

4.- We press F7 one time and we are here:

Code:

15022531 >-E9 62FEFFFA JMP Bypassed.10022398

again another JMP, lets pass it with F7 one time...

5.- We pass it and now we are here:

Code:

10022398 55 PUSH EBP //This is unpacked point

Well now we can search, but for what??

mmm remember that fucking string that say that you dont got MXCustomDB On?

yep lets find that but we cant search for string, we need to look with our own eyes...

6.- We look well on code and we found it:

Code:

10018D47 68 30300510 PUSH Bypassed.10053030 ; ASCII "Set ExDb Socket Error !" 10018D4C E8 28320200 CALL Bypassed.1003BF79 10018D51 6A 10 PUSH 10 10018D53 8B55 EC MOV EDX,DWORD PTR SS:[EBP-14] 10018D56 81C2 A0040000 ADD EDX,4A0 10018D5C 52 PUSH EDX 10018D5D 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14] 10018D60 8B88 9C040000 MOV ECX,DWORD PTR DS:[EAX+49C] 10018D66 51 PUSH ECX 10018D67 E8 7C750000 CALL <JMP.&WS2_32.#4> 10018D6C 8945 F8 MOV DWORD PTR SS:[EBP-8],EAX 10018D6F 837D F8 FF CMP DWORD PTR SS:[EBP-8],-1 10018D73 74 0E JNZ SHORT Bypassed.10018D83 10018D75 6A 00 PUSH 0 10018D77 6A 00 PUSH 0 10018D79 68 48300510 PUSH Bypassed.10053048 ; ASCII "Connect MxExDB Error! Please Confirm MxExDB Lanched!" 10018D7E E8 F6310200 CALL Bypassed.1003BF79 10018D83 8B55 EC MOV EDX,DWORD PTR SS:[EBP-14]

7.- Cool we got MXExDB error now lets saw a little up and whats that 2 opcodes:

Code:

10018D6F 837D F8 FF CMP DWORD PTR SS:[EBP-8],-1 // IF 1 means MXExDB its on, if is 0 means that is not 10018D73 74 0E JNZ SHORT Bypassed.10018D83 //Jump only if is 1

Voila now you know about jumps so we gonna change JNZ to JE and we gonna save our changes made in a backup file but with the name MYDLL.

now we open GS and voila MXExDB bypass ^^.

Enjoy...

Credits: FeN$x
Teams: Diamond & crackermuteam. :eek:
01-01-06
keepitlive

Hehe good job, now all you need to do is to share the bypassed mydll hehehehe
Less work for others ;)

But good job ;) Its a dumbass error hehe
01-01-06
navossoc

Ok, we can bypass the mxexdb, btw... the game don't will have more bugs ? or something like that ?

[]'s
01-01-06
navossoc

I have tested works, btw some questions if we can bypass he we don't create more bugs in game ? and... what the mxexdb make ?

[]'s
02-01-06
Frijol777

Whats the difference between cracking it and just leaving it how it is.?

I would int try this because theres no % of this making any know bugs,(FIX)
02-01-06
siliconshadow

The gamesevrer fails because of poor programming and the server running out of nonpageable memory.

Everything that requires a driver takes 4kb of nonpageable memory you only have 256kb of this each socket that opens takes up part, each driver you have running takes up part.

But if you have a non signed driver on your system you may find that it uses pageable memory isntead of non pageable (Signed drivers are checked for this) the most common culprit is the graphics card. Installing signed drivers and sticking in as much RAM as you can afford is the real and only way of fixing this problem.
02-01-06
FeN$x

Here is file bypassed for lazy one:

http://www.megaupload.com/?d=EWUTFKDO

Enjoy it and rename it to Mydll.dll :3dflagsdo
02-01-06
RX.Rix

could you upload the GS somewhere.. it's not that i'm lazy.. it's just that i couldn't understand it ... ollydbg sayd something that it couldn't open mydll.dll .. so i got olly's shadow (Shadow olly ) that opend it.. but i don't know how to use it ( more into hex ^^ ) so jeah.. i'd be glad if you would ... cos i can't run my gs . it has the mxexdb error
02-01-06
RX.Rix

could you upload the gs.. i don't have the olly skill yet ;) ( more into hex ^^ )
02-01-06
RX.Rix

Could you upload the GS cos i can't figure the olly out :ohmy:
03-01-06
RX.Rix

could you upload the gs.. i can't figure the olly out :ohmy:
03-01-06
RX.Rix

could you upload the gs.. i can't figure olly out
05-01-06
RX.Rix

could you plz upload the gs..
10-01-06
darranthegreat

i dont get step 7. do we delete all the other lines except those 2?
10-01-06
darranthegreat

How do we save the file? I cant seem to save it as a .dll
10-01-06
darranthegreat

How to save as a backup file?
10-01-06
darranthegreat

how to save as backup? i dont get that part//
10-01-06
darranthegreat

Quote:

Voila now you know about jumps so we gonna change JNZ to JE and we gonna save our changes made in a backup file but with the name MYDLL.

i dont get that line, how do we save the file?
10-01-06
darranthegreat

Quote:

Voila now you know about jumps so we gonna change JNZ to JE and we gonna save our changes made in a backup file but with the name MYDLL.

I dont get that line, how do we save the file?
10-01-06
darranthegreat

Quote:

Voila now you know about jumps so we gonna change JNZ to JE and we gonna save our changes made in a backup file but with the name MYDLL.

I dont get that line, how do we save the file?
11-01-06
sjc85

how to u save using that program? and we just need ot change JNZ to JE?
20-01-06
ctrmu

can you put the obllydgb script here?
02-02-06
X-Team

:P good
02-02-06
X-Team

very good :P can u make a guide for bypass the exDB
06-03-06
goldenix

This Guide is really bad i must say I can only understand until point 6.

1-"6.- We look well on code and we found it:"..How you found it? you used search what you searched for?
Can i just Press CRTL+F & search for MxExDB ?(I tried this & i get "unrecognized command")

Ok lets suppose I found:
10018D6F 837D F8 FF CMP DWORD PTR SS:[EBP-8],-1
HOW i change it to?:
10018D6F 837D F8 FF CMP DWORD PTR SS:[EBP-8],1
19-04-06
bet0x

if you bypass that vaults dont work :), so people dont bypass that ;)
13-05-06
EnergyDW

dude that makes no sense at all
03-08-06
champz

good:smileysex
19-03-08
orlei

Re: [Guide] Bypass MXCustomDB Check !!

how, disable full trade iten?
19-03-08
iBimbo

Re: [Guide] Bypass MXCustomDB Check !!

Quote:

Originally Posted by orlei

how, disable full trade iten?

Dude, look at the last post.
Fenix isnt active anymore.