Alliance of Valiant Arms (AVA online)

[esr911]

I am just posting this again for informational purposes.
Another unreal 3 mmo AVA online.
http://www.avaonline.jp/
download page http://www.avaonline.jp/download/
and a sample of the needed files.


http://www.MegaShare.com/1322378

Yeah unfortunately umodel does not support it yet. Nothing works.

..:: ESR911 ::..

[chrrox]

Is this exe really protected?
Normally I can not scan protected exe's with htis program.

D:\offzip>d:\signsrch\signsrch.exe I:\AVA.exe

Signsrch 0.1.5a
by Luigi Auriemma
e-mail: aluigi@autistici.org
web:    aluigi.org
  optimized search function from Andrew http://www.team5150.com/~andrew/

- open file "I:\AVA.exe"
- 11351368 bytes allocated
- load signatures
- open file d:\signsrch\signsrch.sig
- 1772170 bytes allocated for the signatures
- 2263 signatures in the database
- WARNING:
  the file loaded in memory is very big so the scanning could take many time
- start signatures scanning:

  offset   num  description [bits.endian.size]
  --------------------------------------------
  009d1790 83   CRC-32-IEEE 802.3 poly 0x04C11DB7 [32.le rev.1024]
  00ac9f42 188  SSH RSA id-sha1 OBJ.ID. oiw(14) secsig(3) algorithms(2) 26 [..15
]
  009adf74 289  MD5 digest [32.le.272&]
  005c45f0 307  SHA1 / SHA0 / RIPEMD-160 initialization [32.le.20&]
  00862888 309  padding used in hashing algorithms (0x80 0 ... 0) [..64]
  00aaad00 568  classical random incrementer 0x343FD 0x269EC3 [32.le.8&]
  001e28c9 1483 TEA1_DS [32.le.4]
  000224ae 1767 anti-debug: Dongle protection [..3]
  0087ace4 2254 PADDINGXXPADDING [..16]

- 9 signatures found in the file

[Gildor]

Is this exe really protected?
Normally I can not scan protected exe's with htis program.

This file has a few sections named "nsn" - this is non-standard executable section names.
Also, it does not contains any texts (for example, there is no "SkeletalMesh" string in a file).
So, it is really protected

ASPack 2.12 -> Alexey Solodovnikov
according to PEID
edit: Tried with aspackdie 1.41 and it got some error but in the end said "probably worked"
I have a new exe that is 18,9mb instead of 11mb

New file is larger, but only because of lots of zeros inside it. It is not succesfully decompressed

[Gildor]

This program does not looks like aspack/asprotect packed.

[chrrox]

Did someone say they need a dumped exe?
http://www.mediafire.com/?yezuwyrmlot

[Gildor]

I've made AVA Online package and Skeletal Mesh support.
Textures are working too (standard format).
Cannot test animations - they are missing in packages posted above.

[chrrox]

They seemed to have changed there package format a little.
http://www.sendspace.com/file/pn36pz
If you need any other files just let me know.
Thanks for looking into this game.