[TUTORIAL] Run PangYa SEA without the update client.

[Disciple]

Tool(s) used to Discover this:
OllyDBG
PangYa SEA Client 3.02

Tool(s) required to Assemble -OR- HEX edit:
OllyDBG -OR- any hex editor
PangYa SEA Client 3.02

Method used to Discover this:
-Available upon request.-

Method(s) to Edit:
1.
a. Using OllyDBG, open "ProjectG.exe".
b. Press Ctrl+G and follow expression: "00654E9B".
c. The assembly should be: "JE ProjectG.00654F59".
d. Change the "JE" to "JNZ".
e. Right-click; click on "Copy to Executable" > "All modifications".
f. Click on the "Copy all" button; right-click and choose, "Save file".
g. You can now run ProjectG.exe, by itself.

2.
a. Using any Hex editior, open ProjectG.exe.
b. Search for Hex, "0F 84 B8 00 00".
c. Assuming that you find an address around, "00654E9B", change the "84" to "85".
d. Save the modifications.
e. You can now run "ProjectG.exe", by itself.

Alternate Method(s):
1.
a. Create a shortcut to "ProjectG.exe"
b. Go to the properties of the shortcut, and add at the end of the target, "-babo"
c. Apply and run.

2.
a. Create a batch file called "PangYa.bat"
b. Put this code in there: "ProjectG.exe -babo"
c. Save and run.

Disclaimer:
This is a proof-of-concept alteration of the update command, "-babo"; we make it so that it is never called, and thus, you do not have to worry about any updates that PangYa SEA does, up until they change the ProjectG.exe login server authorization key (similar to what happened in 3.02).
Do NOT place this on other websites without proper credit.
~Disciple

Leave thanks if you enjoyed the tutorial.

[Shu]

u can also use a hex editor to search -babo and change to nothing

they change the encryption key every patch so u will have to download the new patch

[Disciple]

I checked out the region around the "-babo" text in the .exe and also discovered that... even though I had "disabled '-babo'," if I ran the client with the command "-rhemddj", it would ask me to update again.. although, I barely have noticed SEA execute files with that line.

[TenKun]

I would like to know the method.

[Disciple]

Originally Posted by TenKun

I would like to know the method.

Search for all text references and then traceback the call to the JMP..

[TenKun]

"then traceback the call to the JMP"

Don't understand that bit.

I can figure out that you searched -babo. But I don't understand where you got the trace back function in olly from. My version of olly doesn't trace what jumps to an address.

Nevermind figured out what you did. Though I didn't learn anything off this, thanks for the info.

I was hoping to find out how to launch an application without the textstring even been shown -.-

Also a thing not so good about the way you did it. If you wanted to launch the game using launcher. It wouldn't load up because you used JNZ. It would be wise to just use a JMP.

Any ideas what sse2 and nosse2 do?

[Disciple]

Originally Posted by TenKun

Also a thing not so good about the way you did it. If you wanted to launch the game using launcher. It wouldn't load up because you used JNZ. It would be wise to just use a JMP.

Any ideas what sse2 and nosse2 do?

what??.. wouldn't that be the point of this whole thing, in the first place? We DON'T want to ever go to that code.. And btw, I did test it out with the code patch.. it runs with the launcher, too..

Btw, if you want the launcher to NOT execute the "-babo" thing, for some weird reason, just look at:

00402325 . 68 94434D00 PUSH update_s.004D4394 ; ASCII "%s -babo"

with Olly

OR

0x004D4394

with a memory/hex editor

..in the update_sg.exe

[TenKun]

I actually have more fun tampering with stuff like this rather than actual game code for some reason XD

[Rawr2006]

the -babo method also works for alba18 on the current patch :)

- make shortcut
- add -babo at the end

and you can run projectg.exe without having to run update program.

unfortunatly this still has gameguard enabled :<

not sure if this is usefull. just a fun fact :)

[heaver]

ok, now how do i open the f*cking pangya japan without the updater??? it deletes all the paks...im getting really pissed off...^^