Page 24 of 31

Re: Unpacked Clients for pRO with ways of finding hex codes

Posted: 01 Jan 2014, 22:35
by arlibabycakes
anzei wrote:this may sound dumb...
but.

it seems like they released a new version of .exe's which cannot be unpacked by stripper? hmmm

can anybody please help? :)
I also have the same problem. :(
Do you already have a fix for it, anzei?

Re: Unpacked Clients for pRO with ways of finding hex codes

Posted: 04 Jan 2014, 06:27
by anzei
arlibabycakes wrote:
anzei wrote:this may sound dumb...
but.

it seems like they released a new version of .exe's which cannot be unpacked by stripper? hmmm

can anybody please help? :)
I also have the same problem. :(
Do you already have a fix for it, anzei?

none at the moment. but i'm sure there'll be others who can find a way around this one. :) too bad stripper doesn't work anymore.
:D maybe sir Heero can find a way.


just a few pointers to those readers out there to digest.
-asprotect was once the packing method pRO dev team used
-now they use mpress
-no mpress unpacker is compatible with our existing PE
-tried manually unpacking PE packed with mpress but cannot fix the jmps for whatever reason. i already followed guides out there, tried to explore myself but to no avail.
-so i leave the rest to you guys. :) i gave the details about the new pRO PEs :))

Re: Unpacked Clients for pRO with ways of finding hex codes

Posted: 05 Jan 2014, 08:50
by arlibabycakes
Thanks anzei.

I hope someone with time can find a "cure" for our hex problem.ΓΌ

Edit:
I found an unpacker called packerbreaker ..
It unpacked the client, I just don`t know
if I can find the hex strings.
(currently reading the tracing hex strings guide..)

Edit again:
I got lost trying to look for the game guard part ..
Gonna try again tomorrow ..

Re: Unpacked Clients for pRO with ways of finding hex codes

Posted: 06 Jan 2014, 23:39
by heero
Updated first post with latest unpacked exe files

Tutorial on how to unpack MPRESS can be seen here
https://vimeo.com/54228188

When I have more time I will look into the changes in hex codes if there are any.

Re: Unpacked Clients for pRO with ways of finding hex codes

Posted: 07 Jan 2014, 04:07
by anzei
heero wrote:Updated first post with latest unpacked exe files

Tutorial on how to unpack MPRESS can be seen here
https://vimeo.com/54228188

When I have more time I will look into the changes in hex codes if there are any.

thanks heero! as always! :) you're always one step ahead.

actually i tried using the same method but the jmp doesn't direct me to the right OEP. so whenever i dump the file, imports doesn't show properly...

Re: Unpacked Clients for pRO with ways of finding hex codes

Posted: 09 Jan 2014, 09:49
by ziphynx
Thanks Sir Heero!

I still wasn't able to understand how to unpack mpress... but with your provided unpacked exe's I've been able to get all the codes...

Re: Unpacked Clients for pRO with ways of finding hex codes

Posted: 15 Jan 2014, 10:56
by kurama003
Hello, I was wondering if there's already a hex code for Episode 28.2 Kagerou and Oboro. Thanks in advance :D

Re: Unpacked Clients for pRO with ways of finding hex codes

Posted: 15 Jan 2014, 22:41
by darylcala
Any updates for hex codes Episode 28.2 Kagerou and Oboro? thanks

Re: Unpacked Clients for pRO with ways of finding hex codes

Posted: 16 Jan 2014, 22:33
by heero
Updated the unpacked exe files to the latest version. (Jan 17, 2014)

Re: Unpacked Clients for pRO with ways of finding hex codes

Posted: 16 Jan 2014, 23:35
by bilyakosta
have trouble finding the hex for Multiple Client..
the kernel32.CreateMutexA seems to have changed..
help please, anyone?

Image

TYIA.. :D