Need help to to unpack this exe

#1 03-07-2004, 09:27

HI i wonder if anyone here can help me i trying to unpack an exe so i can translate it here the link for it so you know what i need todo thanks hxxp://mmorpg-network.com/HH8.exe.rar

#2 03-07-2004, 11:37

That is an easy target to unpack manually. It's ASPACK 2.12
I did it manually as a practice

but i can't upload it since it times out.
If u have this tool http://peid.has.it/ and the plugins than use it to unpack the target. Or if u wanna do it manually then have a look at my signature and u will discover something by member R@dier

#3 03-08-2004, 09:41

could you add me to msn please [email protected]
thanks

#4 03-08-2004, 12:37

i used that PEiD app with plugins but it dont seem to have done it all and the exe size went upto 1.20mb from 324kb

#5 03-08-2004, 16:37

Quote:

went upto 1.20mb from 324kb

That means it has been unpacked.

#6 03-08-2004, 16:47

ok but i still dont understand it does it need anything else doing to it as i want to translate the exe

#7 03-09-2004, 05:19

can anyone help me please with this thanks

#8 03-09-2004, 15:14

What do you exactly mean by translating? You mean to translate strings, dialogs ... to different language? Maybee you could try resourcehacker or alike on the unpacked exe.

#9 03-09-2004, 22:22

well this exe connects to a server and i want to find the ip or something that connecting it so i can change it
oh and also i used reshack and get Stream Read error msg on the TFRMDLG

#10 03-10-2004, 04:02

With Paltalk, I just use a hex editor to find the IP's it connects to, and just replace them with something else, maybe you could do that.

#11 03-10-2004, 08:19

yea i could only see 1 ip i changed it to 127.0.0.1 but it still connects to this chinese server thats y i could use some help :/

#12 03-10-2004, 19:36

Have you tried a text search for the server in question, that is what I did, then just replaced it with a site of my choice.
If it is opening a new internet explorer window, that is a different matter, best way to kill that is with something like APIS32, I used that to trace one of these with Paltalk also, and nopping a call killed it.

#13 03-11-2004, 12:13

The ip address the program is trying to connect to is 61.175.226.38

I haven't unpacked the exe, but an ethereal network capture shows that as the server ip.

Maybe try to search for that...

#14 03-11-2004, 19:56

yea i changed that but it still connects to this chinese server and also when i use reshack on the TFRMDLG bit i get an error in a box that says Stram read error wonder if someone else could have a look for me thanks

#15 03-16-2004, 03:17

oh and yea after i unpack the exe it wont let me edit with ResHack prog when i click TFRMDLG it says Stream read error