Gildor's Forums

Author Topic: Alliance of Valiant Arms (AVA online)  (Read 30799 times)
chrrox
Silver Sponsor
Full Member
**
Posts: 187


View Profile
Alliance of Valiant Arms (AVA online)
« on: August 11, 2009, 07:04 »

I am just posting this again for informational purposes.
Another unreal 3 mmo AVA online.
http://www.avaonline.jp/
download page http://www.avaonline.jp/download/
and a sample of the needed files.


http://www.MegaShare.com/1322378
Logged
esr911
Silver Sponsor
Full Member
**
Posts: 189


View Profile
Re: AVA online
« Reply #1 on: August 11, 2009, 21:00 »

I am just posting this again for informational purposes.
Another unreal 3 mmo AVA online.
http://www.avaonline.jp/
download page http://www.avaonline.jp/download/
and a sample of the needed files.


http://www.MegaShare.com/1322378

Yeah unfortunately umodel does not support it yet. Nothing works.

..:: ESR911 ::..
Logged
Gildor
Administrator
Hero Member
*****
Posts: 7971



View Profile WWW
Re: AVA online
« Reply #2 on: August 11, 2009, 21:08 »

...
and a sample of the needed files.
...
I have looked at these files. Executable is packed with unknown protector. Also, script files are encrypted.
Sad
Logged
chrrox
Silver Sponsor
Full Member
**
Posts: 187


View Profile
Re: AVA online
« Reply #3 on: August 12, 2009, 01:54 »

Is this exe really protected?
Normally I can not scan protected exe's with htis program.

Quote
D:\offzip>d:\signsrch\signsrch.exe I:\AVA.exe

Signsrch 0.1.5a
by Luigi Auriemma
e-mail: aluigi@autistici.org
web:    aluigi.org
  optimized search function from Andrew http://www.team5150.com/~andrew/

- open file "I:\AVA.exe"
- 11351368 bytes allocated
- load signatures
- open file d:\signsrch\signsrch.sig
- 1772170 bytes allocated for the signatures
- 2263 signatures in the database
- WARNING:
  the file loaded in memory is very big so the scanning could take many time
- start signatures scanning:

  offset   num  description [bits.endian.size]
  --------------------------------------------
  009d1790 83   CRC-32-IEEE 802.3 poly 0x04C11DB7 [32.le rev.1024]
  00ac9f42 188  SSH RSA id-sha1 OBJ.ID. oiw(14) secsig(3) algorithms(2) 26 [..15
]
  009adf74 289  MD5 digest [32.le.272&]
  005c45f0 307  SHA1 / SHA0 / RIPEMD-160 initialization [32.le.20&]
  00862888 309  padding used in hashing algorithms (0x80 0 ... 0) [..64]
  00aaad00 568  classical random incrementer 0x343FD 0x269EC3 [32.le.8&]
  001e28c9 1483 TEA1_DS [32.le.4]
  000224ae 1767 anti-debug: Dongle protection [..3]
  0087ace4 2254 PADDINGXXPADDING [..16]

- 9 signatures found in the file
Logged
pixellegolas
Sponsor
Sr. Member
*
Posts: 347


View Profile
Re: AVA online
« Reply #4 on: August 12, 2009, 02:15 »

ASPack 2.12 -> Alexey Solodovnikov

according to PEID

edit: Tried with aspackdie 1.41 and it got some error but in the end said "probably worked"

I have a new exe that is 18,9mb instead of 11mb

http://www.filefront.com/14261245/unpacked.rar
« Last Edit: August 12, 2009, 02:20 by pixellegolas » Logged
Gildor
Administrator
Hero Member
*****
Posts: 7971



View Profile WWW
Re: AVA online
« Reply #5 on: August 12, 2009, 11:54 »

Is this exe really protected?
Normally I can not scan protected exe's with htis program.
This file has a few sections named "nsn" - this is non-standard executable section names.
Also, it does not contains any texts (for example, there is no "SkeletalMesh" string in a file).
So, it is really protected Smiley

ASPack 2.12 -> Alexey Solodovnikov
according to PEID
edit: Tried with aspackdie 1.41 and it got some error but in the end said "probably worked"
I have a new exe that is 18,9mb instead of 11mb
New file is larger, but only because of lots of zeros inside it. It is not succesfully decompressed Sad
Logged
pixellegolas
Sponsor
Sr. Member
*
Posts: 347


View Profile
Re: AVA online
« Reply #6 on: August 12, 2009, 14:42 »

ok, I have some more aspack unpackers but non work in vista. I hope chrrox can help out here. Just search for aspack unpacker and you will find some quickly

good luck!
Logged
Gildor
Administrator
Hero Member
*****
Posts: 7971



View Profile WWW
Re: AVA online
« Reply #7 on: August 12, 2009, 15:00 »

This program does not looks like aspack/asprotect packed.
Logged
pixellegolas
Sponsor
Sr. Member
*
Posts: 347


View Profile
Re: AVA online
« Reply #8 on: August 12, 2009, 17:30 »

oh, this is strange Smiley i will test some more exe scanners when I get home from work
Logged
chrrox
Silver Sponsor
Full Member
**
Posts: 187


View Profile
Re: AVA online
« Reply #9 on: August 26, 2009, 08:56 »

Did someone say they need a dumped exe?
http://www.mediafire.com/?yezuwyrmlot
Logged
Gildor
Administrator
Hero Member
*****
Posts: 7971



View Profile WWW
Re: AVA online
« Reply #10 on: August 26, 2009, 13:18 »

Did someone say they need a dumped exe?
Thanks. File is successfully loaded into IDA Smiley
It looks like unprotected.
Logged
Gildor
Administrator
Hero Member
*****
Posts: 7971



View Profile WWW
Re: AVA online
« Reply #11 on: November 21, 2009, 00:53 »

I've made AVA Online package and Skeletal Mesh support.
Textures are working too (standard format).
Cannot test animations - they are missing in packages posted above.
Logged
esr911
Silver Sponsor
Full Member
**
Posts: 189


View Profile
Re: AVA online
« Reply #12 on: November 21, 2009, 02:23 »

I've made AVA Online package and Skeletal Mesh support.
Textures are working too (standard format).
Cannot test animations - they are missing in packages posted above.

Awesome, I will test them for you, and send you animations if not working.

...:: ESR911 ::..
Logged
chrrox
Silver Sponsor
Full Member
**
Posts: 187


View Profile
Re: AVA online
« Reply #13 on: November 21, 2009, 19:21 »

They seemed to have changed there package format a little.
http://www.sendspace.com/file/pn36pz
If you need any other files just let me know.
Thanks for looking into this game.
Logged
Gildor
Administrator
Hero Member
*****
Posts: 7971



View Profile WWW
Re: AVA online
« Reply #14 on: November 21, 2009, 23:08 »

They seemed to have changed there package format a little.
...
I've updated umodel for these files (updated game detection, there is no changes in package/mesh/texture formats).
Logged
Jump to:  

Powered by SMF | SMF © 2006-2009, Simple Machines LLC
Leviathan design by Bloc | XHTML | CSS