Unpacking Hbusa

Talk about helbreath here.
Post Reply
Scale
Member
Posts: 178
Joined: Thu Nov 20, 2003 4:04 pm

Post by Scale »

Has anyone ever tryed?

I have been trying for fun lately the OEP is at *004AF8A6* doh it moves every restart :) just move the helgame.exe outside the folder and run it then go there and analyse there will be a jump to the stolen bytes (quite a few lol).

It also uses API redirection so u will have to remove that to (just 1 JE i just forgot to note down where) Its just 1 api doh GetProcAddress. (atleast i think its just one >D)
And during run theres a ton of code added just watch your memory map and press f9 lol

Import table at 000BE000 size 2C4

So if your bored lol have a crack at it :)
Well its out of my leage and i have no idea what the use of unpacking it is buteh have fun ^^
snoopy81
Loyal fan
Posts: 338
Joined: Mon Jul 12, 2004 7:13 pm

Post by snoopy81 »

I tryed using generic unpackers, but my skill fails me after that.

Even the unpacked 351 have traces of former Aspacking...

But the main interrest of un unpacked 372+ client, is currentlly to help people coding the freshlly 351 compatible sources to code 372+ functions in a compatible way.
ie: Keeping same msg IDs and contents.
_\_ _<br> / , \__/ . \ Admin of Equilibrium Project<br> II\ \___ . O<br> III \_/ \ _ / <a href='http://www.equiprojet.com' target='_blank'>http://www.equiprojet.com</a><br> II I¯I
KLKS
Loyal fan
Posts: 218
Joined: Sun Feb 22, 2004 2:32 pm

Post by KLKS »

i'm managed to unpack 3.82 up till 80%, never managed the stolen bytes but i did manage to get imports back. the thing abt this implementation is that aspr is compiled with the source and not after the exe is generated. so u have a whole slew of stolen bytes. this is verified by comparing unpacked exe's :). you wont notice 50-100 stolen bytes but a few kb worth of mangled code
Drajwer
&lt;3 bd long time
Posts: 841
Joined: Fri Dec 10, 2004 3:24 pm

Post by Drajwer »

that mean we can use 3.81 exe to debug it and stole some functions and msgs to make own c++ src? :huh:
<img src='http://img440.imageshack.us/img440/2627/15pt.jpg' border='0' alt='user posted image' /><br><br>HBPolska characters:<br><br>Hellios 150+ Aresden Hero Mage<br>TheBill 120 Aresden plrider<br>Kill_Me 100 Full-Hero plrider<br>Rockeater 110+ Aresden Plate Mage<br><br><a href='http://www.helbreath.org' target='_blank'>http://www.helbreath.org</a> come and play (250 ppl online)
KLKS
Loyal fan
Posts: 218
Joined: Sun Feb 22, 2004 2:32 pm

Post by KLKS »

if u know how, then yes!
Scale
Member
Posts: 178
Joined: Thu Nov 20, 2003 4:04 pm

Post by Scale »

Haha ye the stole bytes are insane doh i have never done this before what if we just added the sections with the stolen bytes 90% of the code would be readable and the client should run in theorie
binarydata
DBfiller
Posts: 3816
Joined: Fri Oct 31, 2003 5:30 am
Location: San Diego CA, USA
Contact:

Post by binarydata »

KLKS wrote: if u know how, then yes!
hypno started doing it to the 3.51 client way back when
<img src='http://img88.exs.cx/img88/2290/7666.jpg' border='0' alt='user posted image' />
Drajwer
&lt;3 bd long time
Posts: 841
Joined: Fri Dec 10, 2004 3:24 pm

Post by Drajwer »

sounds cool. cant wait for full heldenian code in client :P
<img src='http://img440.imageshack.us/img440/2627/15pt.jpg' border='0' alt='user posted image' /><br><br>HBPolska characters:<br><br>Hellios 150+ Aresden Hero Mage<br>TheBill 120 Aresden plrider<br>Kill_Me 100 Full-Hero plrider<br>Rockeater 110+ Aresden Plate Mage<br><br><a href='http://www.helbreath.org' target='_blank'>http://www.helbreath.org</a> come and play (250 ppl online)
snoopy81
Loyal fan
Posts: 338
Joined: Mon Jul 12, 2004 7:13 pm

Post by snoopy81 »

sounds cool. cant wait for full heldenian code in client
<a href='index.php?showtopic=6576&hl=' target='_blank'>here</a>
_\_ _<br> / , \__/ . \ Admin of Equilibrium Project<br> II\ \___ . O<br> III \_/ \ _ / <a href='http://www.equiprojet.com' target='_blank'>http://www.equiprojet.com</a><br> II I¯I
juggalo2
Spamtastic
Posts: 1144
Joined: Sun Jul 17, 2005 5:28 pm

Post by juggalo2 »

Drajwer wrote: sounds cool. cant wait for full heldenian code in client :P
lol its alrdy in 3.51 client orginal no client source need i have full heldenian type 1 working and type 2 97% done tp fixed all msg fixed towers fixed save resualt fixed evrything done in 2.24b source with orgianl cleint 3.51 its fearly complacted to code but ounce u build ur main core its faily easy to do
<img src='http://lifeplaysu420.com/unknow/nightsign.png' border='0' alt='user posted image' /><br>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br>Wanna make money for surfing the net sing up at <br><a href='http://www.cashfiesta.com/php/join.php? ... yprivitera' target='_blank'>cash fiesta</a><br>its all free hey why ntot make money while fucking around on the computer<br><br><br>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
snoopy81
Loyal fan
Posts: 338
Joined: Mon Jul 12, 2004 7:13 pm

Post by snoopy81 »

I released Heldenian sources on this forum, and they work 100% with original 351, as with 351 sources posted here.
Off course THIS Heldenian, is not suposed to be exactelly the same than HBusa, who is not exactelly the same than HBint.

As I never played Heldenian event on those servers I needed to invent things. And I also adapted some things to my ideas & to fit fewer players.
_\_ _<br> / , \__/ . \ Admin of Equilibrium Project<br> II\ \___ . O<br> III \_/ \ _ / <a href='http://www.equiprojet.com' target='_blank'>http://www.equiprojet.com</a><br> II I¯I
Post Reply