[ Devcore Hack ] Client Devirtualizer

[Unc3nZureD]

Sziasztok, egy egyszerű tool-t hoztam nektek.
A lényeg, hogy ha injectelitek ezt a dll-t (előny: thread hijack) akkor az exe teljes mappáját, (beleértve a virtualizált fájlokat is) átmásolja egy kliensneve_dumped mappába.
Például ha a kliensed itt van:
C:\Metin2\asdmetin2
akkor ide fogja másolni a dump-ot:
C:\Metin2\asdmetin2_dumped
Ha a metin2 lefagy, nem válaszol vagy akármi ilyesmi van, akkor HAGYJÁTOK békén pár percig (akár 5-10 percet is igénybe vehet a dump).

[charparodar]

First, thanks for sharing.
Second, it's not working with the client I'm trying.
I'm trying with a client of a Portuguese Metin2 server that already closed, but the program stops working right after I inject the dll, it copies all the files up to miles folder, the pack folder is created by a simple file with 0 bytes called pack and the client crashes.
The client was packed either using molebox or with themida.
Any help?

[Jahy-sama]

First, thanks for sharing.
Second, it's not working with the client I'm trying.
I'm trying with a client of a Portuguese Metin2 server that already closed, but the program stops working right after I inject the dll, it copies all the files up to miles folder, the pack folder is created by a simple file with 0 bytes called pack and the client crashes.
The client was packed either using molebox or with themida.
Any help?

Which server on try this, maybe can you give me a link?

[charparodar]

First, thanks for sharing.
Second, it's not working with the client I'm trying.
I'm trying with a client of a Portuguese Metin2 server that already closed, but the program stops working right after I inject the dll, it copies all the files up to miles folder, the pack folder is created by a simple file with 0 bytes called pack and the client crashes.
The client was packed either using molebox or with themida.
Any help?

Which server on try this, maybe can you give me a link?

The server is EliteMT2 PT, it closed for about 1 year ago.

I'll try to reupload it...

I also tried to use EterWizard with this client, but I only got this:


The keys I already know, are the default, but I wanted to try the program anyway.

The client is only missing the eix, I already tried a couple of tools to get them, but without success, and since my knowledge about this matter is limited I can't try anything else...

The client is only missing .eix files (either packed with molebox or The Enigma Protector, but it's probably molebox since The Enigma Protector 4.20 was not public at the time)...

[troacari]

Can you help me for keys of one client?
I have the packs dumped but i cant unpack them they have changed the lzo keys.

[Jahy-sama]

If somebody reupload the client then I can try

[troacari]

If somebody reupload the client then I can try

[Csak regisztrált felhasználók láthatják ezt a tartalmat.]

[charparodar]

If somebody reupload the client then I can try

EliteMt2 last client with the last update dated February 27th of 2017: 

[Csak regisztrált felhasználók láthatják ezt a tartalmat.]

[Jahy-sama]

If somebody reupload the client then I can try

EliteMt2 last client with the last update dated February 27th of 2017: 

[Csak regisztrált felhasználók láthatják ezt a tartalmat.]

Later if I will have time I upload the unpacked client
---

[Csak regisztrált felhasználók láthatják ezt a tartalmat.]

[Holty]

Failed  
Can anyone help? Unpack this customer? Or get the keys? 

[Csak regisztrált felhasználók láthatják ezt a tartalmat.]