Aika SEA ASProtect manual unpacking

Printable View

Show 40 post(s) from this thread on one page

2012-01-14, 06:23 AM
fennes

Quote:

Originally Posted by emoisback [Only registered and activated users can see links. Click Here To Register...]

Dont used old client if u used it, when you chose aeris, calpar or other they will say if your client version is wrong.

just do what fennes say..

for 16x or 18x its doesnt metter just press shift + f9 until you find a similiar code..

what fennes post is a half way to unpack the client..

just say thanks to him if its help you..

Yupz, Because The Guide On Page One Explain very Clear, and I Allready Share Stolen Byte For Aikain, A Few Pages Before...

@Justwentz , I Cann't Reply Your PM, Because I Dont Have Enough Posting....
If You Get "Debugger Detected" Error Make Sure aadp4olly Plugin Same on Page One.
Or Just Google Another Olly That Include With HideDebugger Plugin.

Tx
2012-01-14, 06:37 AM
emoisback

@justwentz

fennes has share stolen byte...you just need to find code cave to write the stolen byte from fennes to the client...
and following s4r4h tuts from using import REC.
2012-01-14, 08:04 AM
wellllleh

Quote:

Originally Posted by fennes [Only registered and activated users can see links. Click Here To Register...]

ont Unpack The Old Client, If You Succeed Unpacking It Wont Work On Latest Patch 3.3.1

For Latest AIKAIN,

Do Shift + F9 ; 18 Times

Until You Find This Sequence Code :

03C439EC 3100 XOR [EAX],EAX
03C439EE 64:8F05 00000000 POP DWORD PTR FS:[0]
03C439F5 58 POP EAX
03C439F6 833D B07EC403 00 CMP DWORD PTR [3C47EB0],0
03C439FD 74 14 JE SHORT 03C43A13
03C439FF 6A 0C PUSH 0C
03C43A01 B9 B07EC403 MOV ECX,3C47EB0
03C43A06 8D45 F8 LEA EAX,[EBP-8]
03C43A09 BA 04000000 MOV EDX,4
03C43A0E E8 2DD1FFFF CALL 03C40B40
03C43A13 FF75 FC PUSH DWORD PTR [EBP-4]
03C43A16 FF75 F8 PUSH DWORD PTR [EBP-8]
03C43A19 8B45 F4 MOV EAX,[EBP-C]
03C43A1C 8338 00 CMP DWORD PTR [EAX],0
03C43A1F 74 02 JE SHORT 03C43A23
03C43A21 FF30 PUSH DWORD PTR [EAX]
03C43A23 FF75 F0 PUSH DWORD PTR [EBP-10]
03C43A26 FF75 EC PUSH DWORD PTR [EBP-14]
03C43A29 C3 RET <<<<< Put BreakpOINT Here....

Shift + F9 1 Time

And Olly Will Stop on BreakPoint,
Just Push ALT + M ;
Look at Pop Up Windows

00400000 00001000 AIKAIN 00400000 (itself) PE header Imag 01001002 R RWE
00401000 0020E000 AIKAIN 00400000 code Imag 01001002 R RWE <<<<< Put BreakpOINT on access Here

0060F000 0001D000 AIKAIN 00400000 Imag 01001002 R RWE
0062C000 02178000 AIKAIN 00400000 Imag 01001002 R RWE
027A4000 0001A000 AIKAIN 00400000 .rsrc resources Imag 01001002 R RWE
027BE000 00013000 AIKAIN 00400000 .data data,imports,relocations Imag 01001002 R RWE
027D1000 00002000 AIKAIN 00400000 .adata Imag 01001002 R RWE

Push CTRL + T, thick box "Command is one of" put this in the right box "REP STOS BYTE PTR ES:[EDI]
"
Press OK and Then CTRL + F11.

Wait Until olly Stop Tracing...

iha ve some quetion .i do all that fenees tuts but when i com to the step that i must CTRL + F11
ido but the result for tracing doent come what i mistake or maybe someone can help
2012-01-14, 08:36 AM
shemgwapo

i think sea and in got similar stolen code. are you using the same stolen code on your previous post fennes?
2012-01-14, 10:01 AM
fennes

Quote:

Originally Posted by wellllleh [Only registered and activated users can see links. Click Here To Register...]

iha ve some quetion .i do all that fenees tuts but when i com to the step that i must CTRL + F11
ido but the result for tracing doent come what i mistake or maybe someone can help

You Must Follow The Instruction Exactly With The Guide, When You Press CTRL + F11, Just Look At Left Upper On Olly, You Will See "TRACING" Text, IF Still "TRACING" Just Wait. Sometimes I Must Wait Long Enough, Maybe 5 to 8 Minute Eventually Olly Will Stop Tracing.

Quote:

Originally Posted by shemgwapo [Only registered and activated users can see links. Click Here To Register...]

i think sea and in got similar stolen code. are you using the same stolen code on your previous post fennes?

No After Patch 3.3.0 IN AIKAIN, I Dont Unpack The Exe.
I Use Different Method To Bypass.
I Just Try To Help.....

Tx
2012-01-14, 11:26 AM
wellllleh

Quote:

Originally Posted by fennes [Only registered and activated users can see links. Click Here To Register...]

You Must Follow The Instruction Exactly With The Guide, When You Press CTRL + F11, Just Look At Left Upper On Olly, You Will See "TRACING" Text, IF Still "TRACING" Just Wait. Sometimes I Must Wait Long Enough, Maybe 5 to 8 Minute Eventually Olly Will Stop Tracing.

No After Patch 3.3.0 IN AIKAIN, I Dont Unpack The Exe.
I Use Different Method To Bypass.
I Just Try To Help.....

Tx

ok thanks i'll try now .
why you use diffrent method in patch 3.3.0 method unpacked cannot bypass or something?
diffrent method to bypass can you give a clue
2012-01-14, 12:13 PM
fennes

Quote:

Originally Posted by wellllleh [Only registered and activated users can see links. Click Here To Register...]

ok thanks i'll try now .
why you use diffrent method in patch 3.3.0 method unpacked cannot bypass or something?
diffrent method to bypass can you give a clue

Hmmm, When I Disable GameGuard, Unpacked Exe Version Before and Patch 3.3.0,
I Always Have Time limit 10 Minute Disconnecting [DC], But Now I Don't Have That Time limit Again.

A Clue, This Forum Already Have The Step by Step Guide.

Do Search and Learn, and You Will Find The Way You Looking For....

Tx
2012-01-14, 06:27 PM
justwenz

hm... i confused... in win xp i cant shift f9 more than 4 times... but in win 7 at my notebook almost complete the tutor, now i try use win xp coz my brother borrow my notebook this moring.. >.< damn i almost complete this.. i stil stuk shift f9 in wind XP sp2. can somebody help me?

-solved- i use another plugin for Win XP aways detected debugger
2012-01-15, 07:02 AM
freza13

helloo all.. please help me..
i follow your command, but when i push shift +f9, and when 4 times, show protection error debug.. why that?
please help me.. thank you..

aikain.exe
2012-01-15, 10:56 AM
wellllleh

Quote:

Originally Posted by fennes [Only registered and activated users can see links. Click Here To Register...]

Hmmm, When I Disable GameGuard, Unpacked Exe Version Before and Patch 3.3.0,
I Always Have Time limit 10 Minute Disconnecting [DC], But Now I Don't Have That Time limit Again.

A Clue, This Forum Already Have The Step by Step Guide.

Do Search and Learn, and You Will Find The Way You Looking For....

Tx

ok thanks before for the information

shift+f9 is always more than 4? or until we find the adress couse when i try to unpack in my first shift + f9 i find but the adress it not same with you find that is okay?

Show 40 post(s) from this thread on one page