Thread: [Request] Anyone can help with Unpack Dragon Nest IN

Okey maybe client close because i delete the config..
haha...
will reading using google translate first and, if i have some problem i'll post here..

Btw thanks for support h4x0r

@AikaMaster
yeah, i think gemscool is blocking website from outside indonesia..
this publisher packed all of they game with themida >,<, but still available to be cheated..
btw thanks for want to help..


@H4x0r
i have read and trying to change push 2 -> ret , the error is not showed anymore, but process terminated when call ntdll.ZwQueryPerformanceCounter.. it's because i ret push 2 function or because something else?..

So run vcfixer. Open DragonNest.exe. Push Patch. He show you 3 or more address (offset) where this function. Run Olly. Open DragonNest.exe. CTRL+G , select Offset , enter 1 of 3 adress and do not forget to select DragonNest.exe. You need set breakpoint to all founded offsets. After all breakpoints set -> F9. See what the breakpoint triggered.

Here example use.

Code:

D:\DragonNest_IN\DragonNest.exe

Open file...
Search __fptrap...
--> 00687D70
--> 00687FC2
--> 006A6111
Several offsets was found. Use
disassembler to find valid one
Close file...
Done

00687D70 = 00A88970
00687FC2 = 00A88BC2
006A6111 = 00AA6111

Code:

00A88970    6A 02           PUSH 2
00A88972    E8 C1610000     CALL DragonNe.00A8EB38
00A88977    59              POP ECX
00A88978    C3              RETN

--------------------------------------------------------

00A88BC2    6A 02           PUSH 2
00A88BC4    E8 6F5F0000     CALL DragonNe.00A8EB38
00A88BC9    59              POP ECX
00A88BCA    C3              RETN

--------------------------------------------------------

00AA6D11    6A 02           PUSH 2
00AA6D13    E8 0C76FDFF     CALL DragonNe.00A7E324
00AA6D18    59              POP ECX
00AA6D19    C3              RETN

Breakpoint triggered on 00AA6D11. Follow this address and change PUSH 2 to RETN.

It's easy right ?

In general, this error often occurs when you do not unpack properly and rebuilding sections. I cannot fully test without client sorry.

i have to change all of push 2 to retn..
or just push 2 from 3 of kind addresses i have to change to retn..

i change that push 2 from 3 address to retn, client still terminate..
now i trace another push 2 before terminated..

i'll try to upload the game file so u can test it too, where i have to upload?, mediafire?..
until now just found Signature for HShield, but dont try it, i'll try it when server is OBT..

Nah i no have so much time for look whats wrong. Anyway it's seems CRC checking or check started HS or not. With it I do not want to deal

hahaha...
that's okey...
will try hard to make this one work ..

yeah error show after HS loaded, so i can still search HS init start..
btw thanks for support..




================================================== ===

I have found a solution for my problem :

-set an attribute ( .rdata ) section to 40000040. ( how to do it, how i can change .rdata section to that address).

-and after i patch using vcfixer its make DN Process terminated
someone say its because STATUS_INVALID_CRUNTIME_PARAMETER. then what can i do for fix it.

-and someone can fix it with split section. And move IAT from section mackt to second section. Then uncheck writeable in second section.

i find a tutorial to set attribute .rdata section but didnt found tutorial to change it,
and solution for status invalite cruntime parameter, didnt find the best answer to solved it..
and find how to split section and move IAT to second section then remove writeable from that section, didnt find tutorial...


anyone can help with this problem.. many people say its because .rdata is writeable..

---------- Post added 2012-07-07 at 05:42 AM ---------- Previous post was 2012-07-03 at 01:48 AM ----------

sorry for double post..
i need help again now..

after i fix r6002 floating point error until Now, i just get terminated program ..
and i trace why my program terminated, but didnt find, try to reading many article out there..
didnt know what i have to do with

-set an attribute ( .rdata ) section to 40000040. ( how to do it, how i can change .rdata section to that address).

-and after i patch using vcfixer its make DN Process terminated
someone say its because STATUS_INVALID_CRUNTIME_PARAMETER. then what can i do for fix it.

-and someone can fix it with split section. And move IAT from section mackt to second section. Then uncheck writeable in second section.

Anyone can help me with this, needed for making hack..
i can bypass it but just for 3 - 5 minutes, but its not enough when i try searching AOB of cheat addys..

yeah have work with it 3 days...
but still terminated program when i fix error r6002 floating not found from your reference link..
reading from tuts4you, they said split section and remove writeable from data section..

but i dont know how to do that..hahaha

@_@

I'll unpack it for you later (now not at home), it's not that hard actually go check in dragon nest section.

Edit: I changed my mind XD, pm me your msn or ym. I will share it with you privately + i will give u latest dn ina addy for nocooldown, wallhack, & animation so you dont have to search it again.

PS. Anyone can bypass hshield 4.3.30.0? :p