AutoIt Decompile - GarenaCracker
|
01-28-2015, 04:23 PM
(This post was last modified: 05-15-2017 10:27 AM by cw2k.)
Post: #1
|
|||
|
|||
AutoIt Decompile - GarenaCracker
Hi Guys
Im New In This Site This File Is Protected With Enigma I Unpack That , But I Have Problem On Decompile Any body can help me ? when i decompile that And open that : Code: Line 1776 (File "F:\dumped__.exe_dumped__.au3"): i attachments Protected + Unpacked file Thanks All |
|||
02-01-2015, 07:14 PM
Post: #2
|
|||
|
|||
RE: AutoIt Decompile
How did you unpack Enigma?
Idiots around here. |
|||
05-12-2017, 05:16 PM
(This post was last modified: 05-16-2017 01:52 PM by cw2k.)
Post: #3
|
|||
|
|||
RE: AutoIt Decompile
(01-28-2015 04:23 PM)SilentMan Wrote:AutoIt version of DUmp__AllowExec.exe is: 3.3.13.19 With problems like this first of all get the SCRIPT.a3x from the script. (use 7-zip or some other resouce extract tool to get DUmp_.exe\.rsrc\0\RCDATA\SCRIPT) Well I tested the SCRIPT.a3x with the following autoit3.exe 3.3.12 3.3.13.20 3.3.14.2 and 3.3.15.0 only the green | blue ones worked. Target is Garena Cracker 1.3 compiled byfarid on 19.12.2014 19:31:17 on AutoIT 3.3.13.19 What it does is basically running for example: C:\Program Files (x86)\Garena Plus\bbtalk\BBTalk.exe -login cw2k17 403c0314f89857402b2863e97ed9e3d5 -md5 -ignoreupdate -multiinstance for testing if certain combination of from usernames.txt & password.txt is correct.
furthermore there's some subtile change the au3 code:
And there's already a newer Version Garena Cracker 2.5 compiled byfarid on 08.11.2015 08:00:43 on Autoit 3.3.15.0 beside 2.5 the only link one that is also still working on archive.org is GarenaCracker-2.3-Setup.exe The cool thing about Version 2 is that it uses direct communication via curl with auth.gtalk.garenanow.com (<- url is now different) which is more direct fast and stable. (Well next step would be to make it multithreading so you can slam many checks in parallel - how I don't wanna complain) It has some little strange and stupid check to see if it's compiled or a script.
and this Libraries.dll has 2 important exports
What also is a little weird is the way it load it's picture resources. Normal you do this in autoit via Fileinstall however here it adds the pictures directly into the exe - resources uses and uses _WinAPI_LoadResource(). For script it just performs _GDIPlus_ImageLoadFromFile() to \Resources\*.png Interesting is the way on using and introducing some kind of OOP classes to Autoit that are heavily based on arrays. The whole thing is called AutoItObject in the end you can code things like this: PHP Code: $Main.Status("Ready") Well enough writing soon I'll release here the more (or less) finished script |
|||
10-06-2017, 04:46 PM
Post: #4
|
|||
|
|||
RE: AutoIt Decompile - GarenaCracker
hey thanks for the decompilacion, but he has an error looks https://ibb.co/i2AB6G
|
|||
« Next Oldest | Next Newest »
|
User(s) browsing this thread: 1 Guest(s)