Jump to content
  • 0

unpack themida client


Yommy

Question


  • Group:  Members
  • Topic Count:  4
  • Topics Per Day:  0.00
  • Content Count:  81
  • Reputation:   69
  • Joined:  11/08/11
  • Last Seen:  

since many will know, gravity started to protect the ragnarok client with Themida since 2012-07-24aRagexeRE

if anyone is able to unpack the clients back to normal, it would help alot

Thank you

Yom

  • Upvote 4
Link to comment
Share on other sites

Recommended Posts


  • Group:  Members
  • Topic Count:  27
  • Topics Per Day:  0.01
  • Content Count:  319
  • Reputation:   198
  • Joined:  11/14/11
  • Last Seen:  

k3dt, do athena a favour, and dont make the RE clients, these are for the sakray server.

instead you should force athena to use the main server client, ragexe.exe :)

 

<3

 

Doesen't the main server client have additional security and is it really worth switching over to?

 

@k3dtT

Dude this is amazing. We are very thankful for what your doing here. So VS 10 huh? Guess I shouldn't be surprised.

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  8
  • Topics Per Day:  0.00
  • Content Count:  148
  • Reputation:   46
  • Joined:  11/02/11
  • Last Seen:  

Is this helpful?
Packets I could extract from

2013-03-13cRagexeRE: http://pastebin.com/6cbSuCba

2012-07-24aRagexeRE: http://pastebin.com/xYhVZL8f

Also, k3dt and giv:

The+Rock+Clapping.gif

  • Upvote 1
Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  26
  • Topics Per Day:  0.01
  • Content Count:  2244
  • Reputation:   182
  • Joined:  11/19/11
  • Last Seen:  

thanks! although the skip packet obfuscation seemed to stop working on > 2013-01

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  27
  • Topics Per Day:  0.01
  • Content Count:  319
  • Reputation:   198
  • Joined:  11/14/11
  • Last Seen:  

They added EP 14.3 Part 2 to the main kRO server this week with the skills looking finalized. I think focusing things on the 2013-03-20 client would be a good idea for now until the next big thing comes to the game like a new major system or a new job release. This is getting me excited. /heh

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  0
  • Topics Per Day:  0
  • Content Count:  14
  • Reputation:   16
  • Joined:  03/07/13
  • Last Seen:  

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  0
  • Topics Per Day:  0
  • Content Count:  1
  • Reputation:   0
  • Joined:  03/21/13
  • Last Seen:  

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

Hi,k3dT,

Thanks for your amazing work..I'm following u these days,Bigfan.

if possible,could u do me a favour?

https://docs.google.com/file/d/0B1k-Z7DOattDQUdJTl80bFU0Yms/edit

 

It's another "ragexe.exe" with themida, I've failded about it for a long time. Drive me crazy /oops

so  I would be very much obliged if  u could unpack it /thx

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  26
  • Topics Per Day:  0.01
  • Content Count:  2244
  • Reputation:   182
  • Joined:  11/19/11
  • Last Seen:  

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

great news!

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  0
  • Topics Per Day:  0
  • Content Count:  14
  • Reputation:   16
  • Joined:  03/07/13
  • Last Seen:  

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

Hi,k3dT,

Thanks for your amazing work..I'm following u these days,Bigfan.

if possible,could u do me a favour?

https://docs.google.com/file/d/0B1k-Z7DOattDQUdJTl80bFU0Yms/edit

 

It's another "ragexe.exe" with themida, I've failded about it for a long time. Drive me crazy /oops

so  I would be very much obliged if  u could unpack it /thx

 

long time? it's exe from 18.3.2013 o_O 

 

Here is latest unpacked Ragexe: 2013-03-20eRagexe.exe

Edited by k3dT
  • Upvote 2
Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  26
  • Topics Per Day:  0.01
  • Content Count:  2244
  • Reputation:   182
  • Joined:  11/19/11
  • Last Seen:  

thank you soo much, time to get new skills =)

 

so I guess this is a +1 for ragexe?

  • Upvote 1
Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  22
  • Topics Per Day:  0.00
  • Content Count:  806
  • Reputation:   220
  • Joined:  03/13/12
  • Last Seen:  

20-03-2013  /omg

damn that's recent!!! too cool k3dt

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  0
  • Topics Per Day:  0
  • Content Count:  1
  • Reputation:   0
  • Joined:  03/22/13
  • Last Seen:  

 

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

Hi,k3dT,

Thanks for your amazing work..I'm following u these days,Bigfan.

if possible,could u do me a favour?

https://docs.google.com/file/d/0B1k-Z7DOattDQUdJTl80bFU0Yms/edit

 

It's another "ragexe.exe" with themida, I've failded about it for a long time. Drive me crazy /oops

so  I would be very much obliged if  u could unpack it /thx

 

long time? it's exe from 18.3.2013 o_O 

 

Here is latest unpacked Ragexe: 2013-03-20eRagexe.exe

Perfect job,K3DT!

Edited by qq1937312935
Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  8
  • Topics Per Day:  0.00
  • Content Count:  417
  • Reputation:   354
  • Joined:  11/11/11
  • Last Seen:  

Randoms:

The section table is messed up, will render most WDG plugins unusable.

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

It's MSVC 10.
Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  0
  • Topics Per Day:  0
  • Content Count:  14
  • Reputation:   16
  • Joined:  03/07/13
  • Last Seen:  

Randoms:

The section table is messed up, will render most WDG plugins unusable.

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

It's MSVC 10.

 

Are you sure? Linker info is 9.0 and imports msvcp90.dll and msvcr90.dll are runtine files for Visual Studio 2008. And yes, sections are merged, because of Themida. I can't help.

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  8
  • Topics Per Day:  0.00
  • Content Count:  417
  • Reputation:   354
  • Joined:  11/11/11
  • Last Seen:  

Used 2013-03-13cRagexeRE as reference, which imports msvcp100.dll and msvcr100.dll, so apparently only RE clients do for now. I guess I'll have to figure out how to split the first section into .text and .rdata .

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  60
  • Topics Per Day:  0.01
  • Content Count:  174
  • Reputation:   3
  • Joined:  06/19/12
  • Last Seen:  

Think it should be worked now ragexe instead of ragexeRE.

Reason: with less bugs, and supported the cash button.

  • Upvote 1
Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  27
  • Topics Per Day:  0.01
  • Content Count:  319
  • Reputation:   198
  • Joined:  11/14/11
  • Last Seen:  

I can confirm seeing 2013-03-20eRagexe has msvcp90.dll and msvcr90.dll while the 2013-03-13cRagexeRE has smsvcp100.dll and msvcr100.dll. Kinda weird that one is using a newer compiler then the other. I guess this means working on the Ragexe clients would be easier right now?

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...