Unpacked Clients for pRO with ways of finding hex codes

[huwad]

sir di ko makita to

Pra dual login
85 C0 0F 85 D1 00 00 00 0F BE 05 79 F0 87 00
85 C0 90 90 90 90 90 90 0F BE 05 79 F0 87 00

not found

gamit ko ung unpacked hexed sa page 1

hindi na puwede yan.

here is the latest package.

4shared.com link for unpacked client
mediafire dload link for unpacked client
mind you guys,
i included three files in it,
the xvi32 <--used to change the hex strings
unpackedclient.exe
hexedclient.exe

reminder
i shared my unpacked client because sir heero haven't updated his previous.

i intentionally included the hexed for the sake of those who can't do the hexing.
but as what other mods/admins reminds us is we should hex our own clients. to prevent getting hacked.

just follow the procedure of "heero"

credits goes to those who inspired me

virustotal scan report: https://www.virustotal.com/file/00cf986 ... 359258391/

Detection ratio: 3 / 44

Code: Select all

Agnitum 	- 	20130126
AhnLab-V3 	- 	20130126
AntiVir 	- 	20130126
Antiy-AVL 	- 	20130126
Avast 	- 	20130127
AVG 	- 	20130127
BitDefender 	- 	20130127
ByteHero 	- 	20130123
CAT-QuickHeal 	- 	20130125
ClamAV 	- 	20130127
Commtouch 	- 	20130126
Comodo 	- 	20130127
DrWeb 	- 	20130127
Emsisoft 	- 	20130124
ESET-NOD32 	- 	20130126
F-Prot 	- 	20130126
Fortinet 	- 	20130127
GData 	- 	20130127
Ikarus 	- 	20130126
Jiangmin 	- 	20121221
K7AntiVirus 	- 	20130125
Kaspersky 	- 	20130127
Kingsoft 	- 	20130121
Malwarebytes 	- 	20130126
McAfee 	- 	20130127
McAfee-GW-Edition 	Heuristic.LooksLike.Win32.Suspicious.N 	20130127
Microsoft 	- 	20130127
MicroWorld-eScan 	- 	20130127
NANO-Antivirus 	- 	20130127
Norman 	- 	20130126
nProtect 	- 	20130125
Panda 	- 	20130126
PCTools 	- 	20130127
Rising 	- 	20130125
Sophos 	- 	20130126
SUPERAntiSpyware 	- 	20130126
Symantec 	- 	20130127
TheHacker 	- 	20130125
TotalDefense 	- 	20130125
TrendMicro 	PAK_Generic.009 	20130127
TrendMicro-HouseCall 	PAK_Generic.009 	20130127
VBA32 	- 	20130125
VIPRE 	- 	20130127
ViRobot 	- 	20130127

sana nga malinis intention mo duda lng aq sa PAK_Generic na yn.. madami kz way pra maihide an trojan/spyware/etc, tama ung isang user, unang nkkpg duda ung filesize..

[heero]

sana nga malinis intention mo duda lng aq sa PAK_Generic na yn.. madami kz way pra maihide an trojan/spyware/etc, tama ung isang user, unang nkkpg duda ung filesize..

Like I told users before use caution when using files posted by users or anyone in the forum. Its your choice to use them.

Why so defensive???? LOL!!! this is Openkore forums and not BAPT!!!

Don't you have any respect to the admins on this forum? Bragging your forums here and being an admin there, you should be ashamed of yourself. You think your forum is better than this forum? what would you feel if someone promoting their forums on your forum? Common dude you know DELICADESA mean do you???!!!!

Ow and before I forgot I joined as member a few months earlier than you so we are both newbie so don't put yourself in the front sit, it doesn't make you a better man.

vhonn, I know you mean well but lets not start a flame war here the issues you have said has already been address so can you please drop this already. All this does is increase the page count without much info being added.

Be civil guys we may not be here 24/7 but we try to keep things in order so just drop this and move on. If you or anyone else disregards this message I will have to take drastic measures. OK?

[anzei]

sana nga malinis intention mo duda lng aq sa PAK_Generic na yn.. madami kz way pra maihide an trojan/spyware/etc, tama ung isang user, unang nkkpg duda ung filesize..

bro, wala po reason pra mang hack aq. maayos po ang profession q irl. anyway opo kya iba iba po file size based kung pano inunpack ng stripper. try nyo po.
at opo mdami tlga av na nag dedetect. ahehe.



and thanks po ulit sir heero for clearing out the matters for us.

[noobotter]

Im just curious about your unpacked exe file being bigger than what heero posted here. We all know that the packed exe file is just 1.3mb.

Your file is about 5.0mb size while heero file is just about 4.52mb.... can you explain why???



See the comparison??? your unpacked file[left image] is bigger than heeros unpacked file [right image]

Just to answer this issue, anzei used stripper 2.11 and heero used stripper 2.07.
Both programs unpacked the client with no errors but because of different versions, it only varies with how much "junk codes" is removed from the exe itself.

Again, you're not obliged to download other users' shared files and even our(mods) own shared files that's why we encourage you to Do-It-Yourself.
heero already provided the guide and it's up to you to exert some effort in understanding what's written on it.

[boytawad]

thanks for the update heero:)

[heero]

I was informed there was another update. Currently looking into it so just wait for updates for now. I will edit the post on the first page if there are any changes. For now just be patient and wait.

[mychem2003]

thanks heero, and for the bot.. i have character in my account, but the openkore bot i use cant detect my character in this newly patch

[Sithis]

Anyway know a way to track the IP of the new server? New Loki transferred, and I have come to say this because I tried logging on to Valhalla and my bot was successful, albeit my account there no longer had characters. In any case, I do hope the update comes the soonest, and if I can help you heero, please let me know.

[rpacx]

Just like anzei, i just only follow heero procedure. And me, i'm not a programmer, i dunno the meaning of these codes. I'm only helping you guys. So this is the hexing procedure for our new Patch Jan 29. Same as anzei said, we only follow heero procedure.

1.Unpack your client using StripperX 2.07(or any version) (Client means valexe,Ragexe,etc.)
2.Open unpacked client on xvi32 then search these codes and replace it

*If you doubt about these codes. You can follow heero procedure at page 1, on how to search for the codes for multiple client and disable GG. The application for that is W32Dasm for Windows.

Search 85 C0 74 07 C6 05 97 71 98 00 01
Replace 85 C0 EB 07 C6 05 97 71 98 00 01

Search 85 C0 0F 85 D1 00 00 00 0F BE 05 A9 CD 89 00
Replace 85 C0 90 90 90 90 90 90 0F BE 05 A9 CD 89 00

Search E8 B2 24 DD FF
Replace 90 90 90 90 90

Enjoy it.

[NiTRO106]

since after the patch, after i logged in to the pRO client, everything's fine until a pop up shows a gravity error. i didn't run any programs behind it. [LINK: http://forums.openkore.com/viewtopic.php?f=55&t=18196] in openkore, i also experienced the same error on what mychem2003 said.