Unpacked Vindictus Files

Vindictus.exe and FileSystem_Stdio.dll
-----------------------------------------
Nonfunctional dumps with imports fixed to be used for static analysis.

Download - VirusTotal

MD5: 1c4509065dd9f631d0e82335137f4ce3
SHA1: e4aeaf8e7967f0c435af1c0b9544c0f906582e8d
SHA256: f3de2f60e35a808f83b49c10ddd06a138cf13897f147a108f6 2ab424cb39c9af

References to VM

Vindictus
- 00402440
- 00402620
- 00402800
- 004029A0
- 004043C9
- 0040481E
- 00405B6E
- 00409DCF
- 00409F0F
- 0040A056

FileSystem_Stdio
- ImageBase + E36F
- ImageBase + 237D7
- ImageBase + 23910

Vindictus.zipattachment deleted · 362 downloads before removal

good question

Thank you for this. ^__^ A lot actually.

Unpacked .exe o_o can modify, sort of like a localhost.

And it's good to see what stuff is accessed.

Can someone elaborate on this please? I don't quite understand this.

... why would anyone do a tutorial on how to use this? It's up to you on how to use it.

If you don't get it, unpacking means you can modify the program, whereas before it was packed, usually with something that doesn't allow you to modify code.

Once unpacked, you can see what addresses are accessed. That's about it. You can also modify strings like the IP of the server it's connecting to, etc.

Originally Posted by darkwar4ever

... why would anyone do a tutorial on how to use this? It's up to you on how to use it.

If you don't get it, unpacking means you can modify the program, whereas before it was packed, usually with something that doesn't allow you to modify code.

Once unpacked, you can see what addresses are accessed. That's about it. You can also modify strings like the IP of the server it's connecting to, etc.

Once again, this is a non-functioning dump. It is completely useless to modify this client. Furthermore, even if it were functioning, HackShield has a check on the integrity of the file itself. This is only useful for those who understand assembly, and consequently static code analysis. If you're honestly looking for interesting information, you won't even need to worry about these two modules. Packet generation is executed in unprotected modules. Ex: Many calls forwarded through nmcogame.dll!NMCO_CallNMFunc().

Originally Posted by wescooldude3

Lol, It's hard to unpack nexons shit for the first time. It took me a day to unpack combat arms. But all you need is an hack shield disabler and the the right unpacker, none of which I am going to reveal. The codes above are the access points used to hack the game. None of which can be used without the knowledge of c++ and d3d -_-

Learning how to unpack Themida takes more than a day. Using a script takes less than a minute. The virtual addresses that I have posted are not used to hack the game. They are simply the locations of the jumps into Themida's virtual machine (which explains the useless code following, which has all been virtualized). Neither prior knowledge in C++ nor D3D is necessary to hack Vindictus or any other game for that matter.

What does this actually do is it some type of actual hack non command based?

Lol, It's hard to unpack nexons shit for the first time. It took me a day to unpack combat arms. But all you need is an hack shield disabler and the the right unpacker, none of which I am going to reveal. The codes above are the access points used to hack the game. None of which can be used without the knowledge of c++ and d3d -_-

No idea what this means, but I'll Paypal anyone $500 if they can figure out how to use it to get me every title in the game ^^

Wait, can't you use this client for a private server source? o_o That's what I meant by modifying it.

Obviously, the source doesn't exist, but theoretically.

Originally Posted by darkwar4ever

Wait, can't you use this client for a private server source? o_o That's what I meant by modifying it.

Obviously, the source doesn't exist, but theoretically.

actually yeah it could be good beginning for private server but still making reverse engineering on all item data skill,exp tables a lot of work. And this game is kinda old (at least in Korea) so u could of imagine some1 cold came out with private server but there still is non out other

I'm pretty sure all the data is just sitting in the client as text files. At least, the monster data is, and I saw the equipment stuff somewhere just the other day.

In any case, it'd be nice to unlock internal cvar access. You need those to use the debug commands like give yousrelf items, spawn enemies and execute the set level & give skill scripts that come with the client.

LOL UNPACKED ALREADY? Do you has a repacker for us? I shall love you if you do? But even if he/she doesn't we can still find the offsets and addresses. None of YOU guys can do anything with this... With no coding knowledge or prior experience you might as well play with a napkin. THANK YOU SO MUCH!

Packers are used to hide and protect an executable from modification.

Virtually all packers and obfuscators can be reversed.

Unpacked Vindictus Files

Tags for this Thread