Anyone so nice to unpack this... ? Please :D

Falco · Post by **Falco** » Wed Sep 20, 2006 11:23 am

Hello

I tried to eat this with few unpackers, but i'm lame

because i can't unpack that :/
Maybe Someone of U would be so kind and could unpack it for me

Please

Falco · Post by **Falco** » Wed Sep 20, 2006 3:57 pm

Wow, nobody can do this ?

Then maybe i'm not such a big noob i thought i was when i couldn't unpack it

Please try still ...

Scale · Post by **Scale** » Wed Sep 20, 2006 9:31 pm

I can but armadillo is really starting to bore me.

Ill see if im in the mood tomorrow and if i even can fit it in with my internship.
I got quite the work load there write back up application watch some series some movies play some css code some more, more movies more gaming.
important stuff u know.

Falco · Post by **Falco** » Thu Sep 21, 2006 5:40 am

</div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE ("Scale")</td></tr><tr><td id='QUOTE'>Ill see if im in the mood tomorrow and if i even can fit it in with my internship.[/quote]

I really really hope U can do this

<fingers crossed>
Because as U can see, not many ppl can or even want to help me out with this

. For experienced hackers as I think many of U are, this file would be 5-10 mins job. So it isn't so much time... I know U got here many requests like this but this is mine first about unpack

... coz i managed so far alone, now i haave problem and I turned to U for help

...

Hackers of the world join !!!

___________________________
EDIT: OK, thx for info that it was armadillo <b>Scale</b>, i managed to unpack it, but it is like 3 mb, and hack codes doesn't fit :/, maybe some1 got 3,72 unpacked client so i could implement ip and ws name

...

Scale · Post by **Scale** » Thu Sep 21, 2006 6:28 am

Falco wrote: </div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE ("Scale")</td></tr><tr><td id='QUOTE'>Ill see if im in the mood tomorrow and if i even can fit it in with my internship.

I really really hope U can do this

<fingers crossed>
Because as U can see, not many ppl can or even want to help me out with this

. For experienced hackers as I think many of U are, this file would be 5-10 mins job. So it isn't so much time... I know U got here many requests like this but this is mine first about unpack

... coz i managed so far alone, now i haave problem and I turned to U for help

...

Hackers of the world join !!!

___________________________
EDIT: OK, thx for info that it was armadillo <b>Scale</b>, i managed to unpack it, but it is like 3 mb, and hack codes doesn't fit :/, maybe some1 got 3,72 unpacked client so i could implement ip and ws name

... [/quote]
A few things u should know:

a. Its hacker of the world unite not join (watch hackers)
b. U can see what they used to pack (most of the time)

Next to that what hacks do u want in it?
and there an 3.81 in the download section (hb usa client, by me ofc

)

Falco · Post by **Falco** » Thu Sep 21, 2006 6:42 am

Its hacker of the world unite not join (watch hackers)

Ok thx good to know

U can see what they used to pack (most of the time)

no i couldn't in this..

i know there is sth like packed by... bla bla bla, but here it wasn't written

Next to that what hacks do u want in it?

pots in exchange mode !! is the most important

no pot delay would be nice to... but I don't want to waste Your time on others hacks..

.
This client is custom made i think because 3,72 hack addresses won;t fit

, when i tried to implement them on that i've unpacked :/

and there an 3.81 in the download section (hb usa client, by me ofc

but this client is 3,72, will 3,81 do ?

greetz....

Scale · Post by **Scale** » Thu Sep 21, 2006 8:00 am

So u can unpack armadillo but u cant find relocation hacks.

Here are the locations:

potion delay:

00493E50 /75 19 JNZ SHORT dumped_.00493E6B
004940D1 /75 19 JNZ SHORT dumped_.004940EC
0049F523 /75 19 JNZ SHORT dumped_.0049F53E

Potions while exchanging:

00494100 /75 19 JNZ SHORT dumped_.0049411B
00493E7F /75 19 JNZ SHORT dumped_.00493E9A

No delay scrolls:

0049F960 /75 3F JNZ SHORT dumped_.0049F9A1
0049F9B9 /75 59 JNZ SHORT dumped_.0049FA14

F1 hotkey: (not 100% sure dont have hb installed here cant try it)

0049463E 6A 00 PUSH 0
00494640 85C0 TEST EAX,EAX
00494642 E8 0E2D0500 CALL dumped_.004E7355
00494647 E9 4C0A0000 JMP dumped_.00495098

if that doesnt work try

0049463E 6A 00 PUSH 0
00494640 85C0 TEST EAX,EAX
00494642 E8 0E2D0500 CALL dumped_.004E7352
00494647 E9 4C0A0000 JMP dumped_.00495098

and it that doesnt work boehoe

Falco · Post by **Falco** » Thu Sep 21, 2006 8:59 am

potion delay:

works perfectly

Potions while exchanging

crashes i thought the correct address was few lines lower, but it doesn't work too :/

No delay scrolls

works

F1 hotkey

both ways crashes

, tried to mix sth, but still doesn't work

, not crashes but nothing happens after pressing f1.

So u can unpack armadillo but u cant find relocation hacks

Yes I unpacked it.., but don't know how to find those relocations, if it's simple then in Your free moment (not exactly today) plz write me how to do it, if it's complicated try to find pots exchange good address

and that's all

thank You for Your help so far, i hope You manage to find good pots in exchange mode relocation address, if You will have some free moment

...

Scale · Post by **Scale** » Thu Sep 21, 2006 9:42 am

Simpel way to find relocated hacks:

starts 2 olly's in one trow the target in the other trow a default 3.51.

Check charlies 3.51 code goto that code in the default client look for a text string api call or something else that u can use as a waypoint.

Look for that in the other client compare a bit and done.

Falco · Post by **Falco** » Thu Sep 21, 2006 9:58 am

Ok thank You

for Your help

, I'll try that method U mentioned

Is that possible they have server side protecton against using pots while in exchange mode ?

greetz

Falco · Post by **Falco** » Thu Sep 21, 2006 1:38 pm

Ok I know it;s possible now

Thank You For Your help Scale i learned a lot

Greetings