Remove file check for cabalmain ver 374.

This tut is only compatible with the main I released.

The xdata file check can be removed by nop-ing two jumps at these addresses

To do that you will need OllyDbg, you can find it on google.

Open the cabalmain.exe in ollydbg, press CTRL+G and type in 004A0C84, then you will see the code below, press space on it and type in NOP at the points I show u under.

Quote:

---

004A0C84 . 74 0D JE SHORT cabalmai.004A0C93 -------> NOP
004A0C86 . 85C0 TEST EAX,EAX
004A0C88 . 74 09 JE SHORT cabalmai.004A0C93 -------> NOP

---

Then press right click> save changes to executable> close window > save all.

I'll post the .EXE with the check removed shortly.

Quote:

---

Originally Posted by Keith

I'll post the .EXE with the check removed shortly.

---

No you won't, people can do this themselves -.-

Quote:

---

Originally Posted by PunkS7yle

No you won't, people can do this themselves -.-

---

Bad idea bro... Why not releasing the .EXE with no xdata file check that we all know majority of this community don't even know how to do that. If you don't let Keith to share his edited .exe meaning only those people knows how to edit it can use your .exe release. Please release it at 100% ready to use. This is not a place for a knowledgeable people only.

Quote:

---

Originally Posted by cabalboyz

Bad idea bro... Why not releasing the .EXE with no xdata file check that we all know majority of this community don't even know how to do that. If you don't let Keith to share his edited .exe meaning only those people knows how to edit it can use your .exe release. Please release it at 100% ready to use. This is not a place for a knowledgeable people only.

---

This section uses ollydbg since forever, you will need to download it eventually if you want to do stuff for your server, I suggest you start now, I already gave you everything you need to know, stop being freaking lazy please.

blah blah blah, wheres the love? edited or not, dont ever let some1 tell you what you can and cant do.

PunkS7yle is right, he has done so much.
Respect his wish to learn some basics and what you will eventually need anyhow.
I am newbie aswell but Its possible, they are not trolling you.

Some of my notes I find usefull,

Use OllyDbg,
- To find Offset in Ollydbg (0x00,..)
Right click and go to expression

- To find Text and HeX in Ollydbg
Right click > folow in dump > selection
In new window right click > search for binary string > Asci(text) or hex

Right click > search for > constant > hexidecimal

<<--------------------------------->>
-------OllyDbg how to save-------

1. Ok, now we have changed the value to 7F! How to save ?
2. Right click CPU window -> Copy to executable -> All modifications -> Copy All
3. Now a new window openened -> Right click on it -> Save file -> Browser for location (don't save it on same folder as the original first)
4. Now you need to close OllyDBG and copy the Conquer.exe to Conquer folder!

Quote:

---

Originally Posted by toast2250

PunkS7yle is right, he has done so much.
Respect his wish to learn some basics and what you will eventually need anyhow.
I am newbie aswell but Its possible, they are not trolling you.

Some of my notes I find usefull,


Use OllyDbg,
- To find Offset in Ollydbg (0x00,..)
Right click and go to expression

- To find Text and HeX in Ollydbg
Right click > folow in dump > selection
In new window right click > search for binary string > Asci(text) or hex

Right click > search for > constant > hexidecimal

<<--------------------------------->>
-------OllyDbg how to save-------

1. Ok, now we have changed the value to 7F! How to save ?
2. Right click CPU window -> Copy to executable -> All modifications -> Copy All
3. Now a new window openened -> Right click on it -> Save file -> Browser for location (don't save it on same folder as the original first)
4. Now you need to close OllyDBG and copy the Conquer.exe to Conquer folder!

---

And...after all this you might as well as done it for them..it would of been much less work..much much less...

Well dont expect everything server on silver plate. Try learn something, this is not rocket science and it really takes no effort to do such a changes + even hes posted an offset. Just take some time and figure it out.

Quote:

---

Originally Posted by codehavok

And...after all this you might as well as done it for them..it would of been much less work..much much less...

---

The answer is still no, good God, stop trying to push people and do it yourself.

i push noone. if something is necessary i am more then capable of doing for my own. But one thing i am not is greedy or a hoarder. Especially to a "community that i belong to". This is how the world is, you would think if much more people were friendly ALOT more would get accomplished.. That is fact. Period. "Good god", you say? Greed is a sin,n so is gluttony. Lecture me this.....

and PS. Ragezone is sponsored by: http://forum.ragezone.com/images/Hostkey-button.gif

Quote:

---

Originally Posted by codehavok

i push noone. if something is necessary i am more then capable of doing for my own. But one thing i am not is greedy or a hoarder. Especially to a "community that i belong to". This is how the world is, you would think if much more people were friendly ALOT more would get accomplished.. That is fact. Period. "Good god", you say? Greed is a sin,n so is gluttony. Lecture me this.....

and PS. Ragezone is sponsored by: http://forum.ragezone.com/images/Hostkey-button.gif

---

What is the point you're trying to get to here ? I don't get it, you call me greedy even though I gave you a working unpacked main and a way to remove the file check... ? This forum is fucking weird man.

Quote:

---

Originally Posted by PunkS7yle

What is the point you're trying to get to here ? I don't get it, you call me greedy even though I gave you a working unpacked main and a way to remove the file check... ? This forum is fucking weird man.

---

No one is calling you greedy.. calm down bro.. We appreciate your release, and hope to see more in the future.

@Punk, our point here is not urging you to release your modified .EXE but if someone would release it is also much appreciated to all those who can't make his own as what you want people tend to do. All people here are very much thankful with your Cabalmain.exe release. But anyways since toast2250 give us a guide on how to do it, we will try by our own to make it.

Quote:

---

Originally Posted by cabalboyz

@Punk, our point here is not urging you to release your modified .EXE but if someone would release it is also much appreciated to all those who can't make his own as what you want people tend to do. All people here are very much thankful with your Cabalmain.exe release. But anyways since toast2250 give us a guide on how to do it, we will try by our own to make it.

---

Edited first post to make it easier..

Since in the ep2 days the question "how to save the edits" in ollydbg still exist till now.. :D
Spoon-feeding is bad, people will stay dumb. Its enough to release just the working unpacked cabalmain.

ermm i don't understand how to put this NOP it say that i cant add in

Quote:

---

Originally Posted by noelcjf1994

ermm i don't understand how to put this NOP it say that i cant add in

---

double click the address you want to edit

How to make this .EXE compatible to windows7 64bit? The game didn't start due to incompatibility issue with 64bit?

http://i48.tinypic.com/dc3mup.png

i got this error when i using ollydbg .......

Working without any problems :)

Good and now the problem is where is the xtrap key for the server side check :D whit this main at this point we can't use server side xtrap check ;/ if we take xtrap key from 369 and put it in 374 maybe check will work.

Quote:

---

Originally Posted by noelcjf1994

http://i48.tinypic.com/dc3mup.png

i got this error when i using ollydbg .......

---

Open it in a cabal folder, youre missing libraries.

Quote:

---

Originally Posted by y0cata

Good and now the problem is where is the xtrap key for the server side check :D whit this main at this point we can't use server side xtrap check ;/ if we take xtrap key from 369 and put it in 374 maybe check will work.

---

Server side xtrap is already enabled, look in logs, xtrap v7 enabled, the worldsvr sends a packet when xtrap is gone to kill the client, xtrap cant be removed from client only.

br_369_0404.CS3 and etc this files check the key in the main if the key in the main is different xtrap will kick u when server side check is on ;) i find where the key is stored in main but after i edit it to be the same like in br_369_0404.CS3 xtrap load but main don't start. 369 key = fa0b55ac90e5c729b7d514697d716f98, 374 key = 39345AEA0DEF4D7969CB2FD62997E31B we have 2 options learn how the .CS3 files work and put in them 374 key or learn how the main check the keys and put 369 key in 374 main.

edit: worldsvr can load max 5 cs3 files so the original config in released files is totally fail.

Quote:

---

Originally Posted by y0cata

br_369_0404.CS3 and etc this files check the key in the main if the key in the main is different xtrap will kick u when server side check is on ;) i find where the key is stored in main but after i edit it to be the same like in br_369_0404.CS3 xtrap load but main don't start. 369 key = fa0b55ac90e5c729b7d514697d716f98, 374 key = 39345AEA0DEF4D7969CB2FD62997E31B we have 2 options learn how the .CS3 files work and put in them 374 key or learn how the main check the keys and put 369 key in 374 main.

edit: worldsvr can load max 5 cs3 files so the original config in released files is totally fail.

---

Dude I'm telling you, we checked.

The packet IS SENT ! the packet holds usernum and charidx and we already have found it in worldsvr.elf, but lets just say the xtrap_start is a tough nut to crack.

how about putting this key in cabalmain

fa0b55ac90e5c729
b7d514697d716f98

replace

39345AEA0DEF4D79
69CB2FD62997E31B

???

Quote:

---

Originally Posted by PX2000

how about putting this key in cabalmain

fa0b55ac90e5c729
b7d514697d716f98

replace

39345AEA0DEF4D79
69CB2FD62997E31B

???

---

Xtrap is working fine ._.

Quote:

---

Originally Posted by PunkS7yle

Xtrap is working fine ._.

---

I mean if I want to be unique...

change md5 hash of br_369_0404.cs3 and put the md5 hash in cabalmain.. possible?

Quote:

---

Originally Posted by PX2000

I mean if I want to be unique...

change md5 hash of br_369_0404.cs3 and put the md5 hash in cabalmain.. possible?

---

doubt it.

if u replace the key in main the main will not work there is something else. yes the xtrap check work but i m talking about if u use a main whit another version and xtrap to kick u :)

i edit to CabalMain any bit ，error！！！

do u have kill xtrap? because to misjudge virtualBox

No. .

cry.........

is not hard at all, try again.

Quote:

---

Originally Posted by cadena

is not hard at all, try again.

---

He's crying because I said he cant remove x-trap. Filthy hackers eh :D

004A82FA 83F0 57 XOR EAX,57 - 4th xor
004A830C 83F0 67 XOR EAX,67 - 3rd xor
004A831E 83F0 65 XOR EAX,65 - 2nd xor
004A832F 35 92000000 XOR EAX,92 - 1st xor

XOR KEY ADRESS ;)!

Quote:

---

Originally Posted by oOSpikeOo

004A82FA 83F0 57 XOR EAX,57 - 4th xor
004A830C 83F0 67 XOR EAX,67 - 3rd xor
004A831E 83F0 65 XOR EAX,65 - 2nd xor
004A832F 35 92000000 XOR EAX,92 - 1st xor

XOR KEY ADRESS ;)!

---

Who did you beg for them after Acnathon said he can't help you :D ?

i find them alone ;) you mad !~

Sure I am xD

Can we make the client's Xtrap connect to the local server and receive updates, authenticate instead of connecting to a remote Xtrap server?

Quote:

---

Originally Posted by toast2250

Can we make the client's Xtrap connect to the local server and receive updates, authenticate instead of connecting to a remote Xtrap server?

---

Nope. It's also best to keep it to a remote one for updates. Since I started using this over 6 months ago it has updated a lot !

do we need to off XTrap check in WorldSvr?

Quote:

---

Originally Posted by PX2000

do we need to off XTrap check in WorldSvr?

---

yes, has to be done in the bin file.

atm did somebody find the 2 adress to load more ech ? :D

Quote:

---

Originally Posted by oOSpikeOo

atm did somebody find the 2 adress to load more ech ? :D

---

Yes, and it's very easy. You want me to post them ?

why not.. you get the credits ;) :) and about xor , think what you wannt but i find them alone... !

@Punk you have the offset to enable mcl check (but disable xdata)? i want to avoid like you said about mcl injection for map hack, ty.

sadly no , mcl check with other files on 374

Removed the file check and changed version+magic key server-side.

Client starts wonderful. I can login and enter the world.
But after 40-60sec the game closes without any error-msg.

There is no error on server-side.... only the DC flag:

Code:

---

[Sat Feb  9 2013 16:02:04.296268 3077760720]: success accept 17(127.0.0.1:49605)
[Sat Feb  9 2013 16:02:46.630870 3077483376]: Leave(): charIdx(10), guildNo(1), (SirFartalot)

---

No idea.

Quote:

---

Originally Posted by PunkS7yle

Yes, and it's very easy. You want me to post them ?

---

why not? :thumbup1:

Already posted by someone else

How to change the language to make it china?

How to change the language to make it china?

Quote:

---

Originally Posted by toast2250

Can we make the client's Xtrap connect to the local server and receive updates, authenticate instead of connecting to a remote Xtrap server?

---

Quote:

---

Originally Posted by PunkS7yle

Nope. It's also best to keep it to a remote one for updates. Since I started using this over 6 months ago it has updated a lot !

---

Yes we can. :D:
Check your PM.

I am having issues with removing the enc check and running the cabalmain with husky parameter.

I did follow PunkS7yle:

Code:

---

004A0C84  . 74 0D          JE SHORT cabalmai.004A0C93      -------> NOP
004A0C86  . 85C0          TEST EAX,EAX
004A0C88  . 74 09          JE SHORT cabalmai.004A0C93      -------> NOP

---

changed JE SHORT cabalmai.004A0C93 on 004A0C84 and JE SHORT cabalmai.004A0C93 004A0C88 to NOP with the Fill with NOP's checkbox checked and also tried it unchecked then clicked on assemble on both then right clicked on CPU window -> copy to executable -> all modifications -> copy all then a new window will appear. then save file.

launched cabalmain with husky parameter and I get an error the game will close to receive an update.

Attachment 124621

you have to change your client version in your account database. it has nothing to do with the modification. it works fine

after removing the file check on the main, the MCL check will be disable too?

Quote:

---

Originally Posted by Drav3n

after removing the file check on the main, the MCL check will be disable too?

---

Yes it will.

So ... this will protect your client by enc corruption (xor) but mcl still can be edited

Yes .

Quote:

---

Originally Posted by soultransit

I am having issues with removing the enc check and running the cabalmain with husky parameter.

I did follow PunkS7yle:

Code:

---

004A0C84  . 74 0D          JE SHORT cabalmai.004A0C93      -------> NOP
004A0C86  . 85C0          TEST EAX,EAX
004A0C88  . 74 09          JE SHORT cabalmai.004A0C93      -------> NOP

---

changed JE SHORT cabalmai.004A0C93 on 004A0C84 and JE SHORT cabalmai.004A0C93 004A0C88 to NOP with the Fill with NOP's checkbox checked and also tried it unchecked then clicked on assemble on both then right clicked on CPU window -> copy to executable -> all modifications -> copy all then a new window will appear. then save file.

launched cabalmain with husky parameter and I get an error the game will close to receive an update.

---

like 100 times posted change ur version in server+db ... -_-

CabalMain -> "Check xdata.enc"
CabalMain -> "Check Xor Keys"
CabalMain -> "Check MagicKey"
xdata.enc -> "Check MD5 MCL files"

Punk,
Can you tell us if have more step on this model or have any wrong step?
just for knowleadge

ex:
CabalMain -> "All Checks"
xdata -> "All Checks"

Quote:

---

Originally Posted by Extornia

Yes it will.

---

so, no other option to protect against mcl patcher for wallhack? if i used punks7yle cabalmain and removed check, everyone are free to use the wallhack

Quote:

---

Originally Posted by Drav3n

so, no other option to protect against mcl patcher for wallhack? if i used punks7yle cabalmain and removed check, everyone are free to use the wallhack

---

Write a small dll to get hash of current map file and compare against a list of hashes, shit's easy.

Quote:

---

Originally Posted by PunkS7yle

Write a small dll to get hash of current map file and compare against a list of hashes, shit's easy.

---

Sorry punk, we are not on same level. i know its easy on you.

Only google can help on what you said. Thanks for the tip punk.

Punk,

Can u tell us if we can pack cabalmain like EP2 (With themida, Winlicense.. or other), to prevent dll injections?
In cabalmain 369 i can't use dll injection, but in 374 i can.

i'm trying pack 374 with themida and WinLicense... but keep able to inject dll

thanks

Uhm .. Question: When you hit space on the expression, it pops up with a window..

Would you replace: JE SHORT 004A0C93 with NOP?

or tick the "Fill with NOP's" box and press assemble?

or add NOP to comments?

I don't even see copy to executable .. this is all so confusing. Please someone help me.

Replace with NOP and ignore the tick box. How to save is already described.

Quote:

---

Originally Posted by toast2250

Replace with NOP and ignore the tick box. How to save is already described.

---

I read your instructions on how to save, but I can't find where the "Copy to executable" is ..

Quote:

---

Just press right mouse button on code window, choose "copy to executable" -> "All modifications", press copy all, when a new window has opened, just press right mouse button and press "save file" =) It should help u =)

---

Saving the edited file in Ollydbg

Can't find this Option.. even with Ollydbg Advanced Plugin and bugfix.

Help!! remove file check for cabalmain ver 369 :(

Post the main.

I use this client TGCABAL Ep8 (v369)
I want to remove file check for cabalmain (TGCabalEp8)
I can not find the offset you can help me?
Because it item.enc error: (, non understood at sao item.enc, cabalmain.exe is not found.
Sorry I do not speak good english

Read again slowly

Quote:

---

Originally Posted by kelly2009

I use this client TGCABAL Ep8 (v369)
I want to remove file check for cabalmain (TGCabalEp8)
I can not find the offset you can help me?
Because it item.enc error: (, non understood at sao item.enc, cabalmain.exe is not found.
Sorry I do not speak good english

---

You didn't do it right.

im having a problem my cabal client closes automatically after 10sec of being open :/

sir punk can you give the right link of the program to use?? i have error when i try to open cabalmain on the one i downloaded.

Quote:

---

Originally Posted by EliteOP

Uhm .. Question: When you hit space on the expression, it pops up with a window..

Would you replace: JE SHORT 004A0C93 with NOP?

or tick the "Fill with NOP's" box and press assemble?

or add NOP to comments?

I don't even see copy to executable .. this is all so confusing. Please someone help me.

---

Use OllyDbg Shadow, there you will find 'Copy to executable' for sure.
Just sayin..

what is problem ? i remove file check cabalmain how is this item ? before i install patch Darkstealmain Put item.enc i cannot start cabalmain corrupted i use original tg client ep8 it show ?

http://image.ohozaa.com/view2/xo401yWanZ2ZFgAT

helpme ? TT

Hey guys im having trouble with errors opening CabalMain.exe with OllyDbg2 or with 1 or with the Shadow one. the error says I dont have fmodex.dll (picture attached). Attachment 145192

I tried opening the original cabalmain.exe from TGclient (just to check comparison in terms of errors) and didnt have any errors and i can do "copy to executable" which was not there when i opened the CabalMain.exe from here. Attachment 145193



What do i do?????

I downloaded "cabalmain-brazuka.rar" and it works with TheftGamesCabal8ep.
It has working x-trap, so you need internet connection to play.
Exe file is probably from brasilian Cabal, some words are not in english in game like names of the maps, but it works and you can play in english version of Cabal with this file.
https://www.dropbox.com/s/8j9qdej6ga...in-brazuka.rar

PS. If somebody can upload working english exe for TGCabalep8 without x-trap i would be happy if i could play offline (I do not have internet connection).

Hey all,
someone got Idear where i can disable file cheak in ver 391 ? or any tip where i can find it ?

I don't understand the guide, perhaps some screen shots would make it better, anyway, here's my cabalmain.exe, maybe different from yours, please check it out
https://www.mediafire.com/?0ssb94j9xvgtyas

still works with ep14 cabalmain (eu) but cabal dead after click login (unpacked_main) ;p one more security function, anyway thank you :) I'm trying to make this cabalmain working :D

Does some1 know what I need to nop to avoid cabal close at login?

Hello, do not tell me how to remove or circumvent the check files in Cabalmain on the current version?

Quote:

---

Originally Posted by Koury27

Hello, do not tell me how to remove or circumvent the check files in Cabalmain on the current version?

---

The current version is 374, follow this guide.

Quote:

---

Originally Posted by HariSeldon

текущая версия-374, следуйте этому руководству.

---

Then can you help me ? I just don't know what I'm doing wrong. I need this to translate Cabal Online for my language.