If you're setting up an Episode 35 server, you may want to change the default XOR encryption value used in your files. Below is the related function and address so you can modify it as needed.
v275 - ep 35 (x64)
0x14023C688
Code:
000000014023C688 | 4C:6349 14 | movsxd r9,dword ptr ds:[rcx+14] | rcx+14:ZwOpenProcess+8
000000014023C68C | 48:8BD1 | mov rdx,rcx | rcx:ZwQueryInformationThread+14
000000014023C68F | 44:3B49 10 | cmp r9d,dword ptr ds:[rcx+10] | rcx+10:ZwOpenProcess+4
000000014023C693 | 7F 69 | jg cabalmain.14023C6FE |
000000014023C695 | 4C:8B41 08 | mov r8,qword ptr ds:[rcx+8] | rcx+08:ZwQueryInformationThread+1C
000000014023C699 | 41:8BC9 | mov ecx,r9d |
000000014023C69C | 45:85C9 | test r9d,r9d |
000000014023C69F | 74 4C | je cabalmain.14023C6ED |
000000014023C6A1 | 83E9 01 | sub ecx,1 |
000000014023C6A4 | 74 37 | je cabalmain.14023C6DD |
000000014023C6A6 | 83E9 01 | sub ecx,1 |
000000014023C6A9 | 74 22 | je cabalmain.14023C6CD |
000000014023C6AB | 83F9 01 | cmp ecx,1 |
000000014023C6AE | 74 0D | je cabalmain.14023C6BD |
000000014023C6B0 | 43:0FB60401 | movzx eax,byte ptr ds:[r9+r8] |
000000014023C6B5 | 41:8D49 01 | lea ecx,qword ptr ds:[r9+1] |
000000014023C6B9 | 894A 14 | mov dword ptr ds:[rdx+14],ecx |
000000014023C6BC | C3 | ret |
000000014023C6BD | 41:0FB640 03 | movzx eax,byte ptr ds:[r8+3] |
000000014023C6C2 | 83F0 57 | xor eax,57 <<<<<<<<<<<<<<<<<<<<---------------- |
000000014023C6C5 | C742 14 04000000 | mov dword ptr ds:[rdx+14],4 |
000000014023C6CC | C3 | ret |
000000014023C6CD | 41:0FB640 02 | movzx eax,byte ptr ds:[r8+2] |
000000014023C6D2 | 83F0 67 | xor eax,67 <<<<<<<<<<<<<<<<<<<<---------------- |
000000014023C6D5 | C742 14 03000000 | mov dword ptr ds:[rdx+14],3 |
000000014023C6DC | C3 | ret |
000000014023C6DD | 41:0FB640 01 | movzx eax,byte ptr ds:[r8+1] |
000000014023C6E2 | 83F0 65 | xor eax,65 <<<<<<<<<<<<<<<<<<<<------------------ |
000000014023C6E5 | C742 14 02000000 | mov dword ptr ds:[rdx+14],2 |
000000014023C6EC | C3 | ret |
000000014023C6ED | 41:0FB600 | movzx eax,byte ptr ds:[r8] |
000000014023C6F1 | 35 92000000 | xor eax,92 <<<<<<<<<<<<<<<<<<<<-------------- |
000000014023C6F6 | C742 14 01000000 | mov dword ptr ds:[rdx+14],1 |
000000014023C6FD | C3 | ret |
000000014023C6FE | 83C8 FF | or eax,FFFFFFFF |
000000014023C701 | C3 | ret |Last edited: Saturday at 3:52 AM
— AeroSecurity
Advanced Cabal Infrastructure & Exploit Defense
[Onion AntiCheat • Network Hardening • Session & Rollback Protection • Web Security Stack]
Advanced Cabal Infrastructure & Exploit Defense
[Onion AntiCheat • Network Hardening • Session & Rollback Protection • Web Security Stack]
'게임에 대한 이래저래 > 카발온라인' 카테고리의 다른 글
| EP 35 Address - XOR Function .ENC (0) | 2025.12.03 |
|---|---|
| EP 35 Address - Limit how many cabal instances will be allowed in your server. (0) | 2025.12.03 |
| ECH Extension CabalMain v263; v275 (0) | 2025.10.09 |
| Cabal Client Episode 38 (0) | 2025.09.30 |
| Tutorial: 30000 alz drop limit finally broken (0) | 2025.09.12 |