Page 1 of 1

[Request] 9 Dragons

Posted: Fri Feb 17, 2012 4:51 pm
by CriticalError
Hello guys!!! well a game called 9 Dragons have format .XP, the exe's are protected so maybe somebody can take a look into files and unpack it.

C:\9Dragons\binkw32.dll :: Nothing found *
C:\9Dragons\dbghelp.dll :: Microsoft Visual C++ 7.0 DLL Method 3
C:\9Dragons\fmod.dll :: UPX 0.80 - 1.24 DLL -> Markus & Laszlo
C:\9Dragons\GameGuard.des :: UPX 0.89.6 - 1.02 / 1.05 - 2.90 -> Markus & Laszlo [Overlay]
C:\9Dragons\msvcp60.dll :: Nothing found *
C:\9Dragons\MSVCP60D.DLL :: Microsoft Visual C++ 5.0 [Debug]
C:\9Dragons\MSVCRTD.DLL :: Microsoft Visual C++ 5.0 [Debug]
C:\9Dragons\NDLAUNCHER.EXE :: Microsoft Visual C++ 6.0
C:\9Dragons\NDLauncher2.exe :: Microsoft Visual C++ 6.0
C:\9Dragons\NINEDRAGONS.EXE :: yoda's cryptor 1.x / modified
C:\9Dragons\ogg.dll :: Microsoft Visual C++ 6.0 DLL
C:\9Dragons\QHTM.dll :: Microsoft Visual C++ 6.0 DLL
C:\9Dragons\SpeedTreeRT.dll :: Microsoft Visual C++ 6.0 DLL
C:\9Dragons\unicows.dll :: Nothing found [Overlay] *
C:\9Dragons\vorbis.dll :: Microsoft Visual C++ 6.0 DLL
C:\9Dragons\vorbisfile.dll :: Microsoft Visual C++ 6.0 DLL
C:\9Dragons\XEraser.exe :: Microsoft Visual C++ 6.0
C:\9Dragons\XFCONTROL.DLL :: Microsoft Visual C++ 6.0 DLL
C:\9Dragons\XFileTransfer.exe :: yoda's cryptor 1.x / modified
C:\9Dragons\XWebPage.dll :: Microsoft Visual C++ 6.0 DLL

Image

9 Dragons XP Archive Research
9Dragons Exe's yoda's cryptor 1.x

Re: [Request] 9 Dragons

Posted: Fri Feb 17, 2012 5:10 pm
by Ekey
Another request here
Unpacked executable here

For coders :P

Code: Select all

#define _HEADERINDICATOR_PACKAGEFILE            0xFEFA
#define _HEADERINDICATOR_PACKAGEFILEVERSION      0xA001

typedef struct 
{

   WORD HeaderIndicator;
   WORD FileVersion;   
   int  PackedFileCount;

} _PACKAGEFILE_HEADER;


#define _ENCODEKEY      0xEF

void _EncodeData( LPSTR string, BYTE key )
{
   if( !string ) return;
   ASSERT( string );

   int length = strlen( string );

   LPSTR tptr = string;

   for( int i = 0; i < length; i++ )
   {
      *tptr ^= key;
      tptr++;
   }
}

Re: [Request] 9 Dragons

Posted: Fri Feb 17, 2012 5:14 pm
by CriticalError
Ekey wrote:Another request here
Unpacked executable here

For coders :P

Code: Select all

#define _HEADERINDICATOR_PACKAGEFILE            0xFEFA
#define _HEADERINDICATOR_PACKAGEFILEVERSION      0xA001

typedef struct 
{

   WORD HeaderIndicator;
   WORD FileVersion;   
   int  PackedFileCount;

} _PACKAGEFILE_HEADER;


#define _ENCODEKEY      0xEF

void _EncodeData( LPSTR string, BYTE key )
{
   if( !string ) return;
   ASSERT( string );

   int length = strlen( string );

   LPSTR tptr = string;

   for( int i = 0; i < length; i++ )
   {
      *tptr ^= key;
      tptr++;
   }
}
ummm thanks a lot Ekey, any chance for learn how unpack EXE? can you give me a small tutorial via private message? grateful for your support.

Re: [Request] 9 Dragons

Posted: Fri Feb 17, 2012 5:51 pm
by Ekey
For make tut need again download full client :bleh: ... You can upload only all binary's?

Re: [Request] 9 Dragons

Posted: Fri Feb 17, 2012 6:27 pm
by CriticalError
I upload all binary there!!!! check first page.

9Dragons Exe's yoda's cryptor 1.x

Re: [Request] 9 Dragons

Posted: Fri Feb 17, 2012 6:48 pm
by chrrox

Code: Select all

#quickbms script for 9 Dragons
#by chrrox
get idstring long
get files long
for i = 0 < files
get nsize short
filexor "0xEF"
getdstring NAME nsize
filexor ""
putarray 0 i NAME
next i
for i = 0 < files
get id1 long
putarray 1 i id1
next i
get SIZE asize
putarray 1 files SIZE
for i = 0 < files
set j i
math j + 1
getarray NAME 0 i
getarray OFFSET 1 i
getarray SIZE 1 j
math SIZE - OFFSET
log NAME OFFSET SIZE
next i

Re: [Request] 9 Dragons

Posted: Fri Feb 17, 2012 6:53 pm
by Ekey
Hehe nice job :P

Re: [Request] 9 Dragons

Posted: Fri Feb 17, 2012 7:19 pm
by CriticalError
thanks a lot for script chrrox, grateful.