unpack themida client

[Yommy]

since many will know, gravity started to protect the ragnarok client with Themida since 2012-07-24aRagexeRE

if anyone is able to unpack the clients back to normal, it would help alot

Thank you

Yom

[Rytech]

k3dt, do athena a favour, and dont make the RE clients, these are for the sakray server.

instead you should force athena to use the main server client, ragexe.exe

 

<3

 

Doesen't the main server client have additional security and is it really worth switching over to?

 

@k3dtT

Dude this is amazing. We are very thankful for what your doing here. So VS 10 huh? Guess I shouldn't be surprised.

[lekkereten]

Is this helpful?
Packets I could extract from

2013-03-13cRagexeRE: http://pastebin.com/6cbSuCba

2012-07-24aRagexeRE: http://pastebin.com/xYhVZL8f

Also, k3dt and giv:

[Judas]

thanks! although the skip packet obfuscation seemed to stop working on > 2013-01

[Rytech]

They added EP 14.3 Part 2 to the main kRO server this week with the skills looking finalized. I think focusing things on the 2013-03-20 client would be a good idea for now until the next big thing comes to the game like a new major system or a new job release. This is getting me excited.

[k3dT]

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

[Dinox]

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

Hi,k3dT,

Thanks for your amazing work..I'm following u these days,Bigfan.

if possible,could u do me a favour?

https://docs.google.com/file/d/0B1k-Z7DOattDQUdJTl80bFU0Yms/edit

 

It's another "ragexe.exe" with themida, I've failded about it for a long time. Drive me crazy

so  I would be very much obliged if  u could unpack it

[Judas]

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

great news!

[k3dT]

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

Hi,k3dT,

Thanks for your amazing work..I'm following u these days,Bigfan.

if possible,could u do me a favour?

https://docs.google.com/file/d/0B1k-Z7DOattDQUdJTl80bFU0Yms/edit

 

It's another "ragexe.exe" with themida, I've failded about it for a long time. Drive me crazy

so  I would be very much obliged if  u could unpack it

 

long time? it's exe from 18.3.2013 o_O 

 

Here is latest unpacked Ragexe: 2013-03-20eRagexe.exe

Edited March 21, 2013 by k3dT

[Judas]

thank you soo much, time to get new skills =)

 

so I guess this is a +1 for ragexe?

[Neo-Mind]

20-03-2013 

damn that's recent!!! too cool k3dt

[qq1937312935]

 

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

Hi,k3dT,

Thanks for your amazing work..I'm following u these days,Bigfan.

if possible,could u do me a favour?

https://docs.google.com/file/d/0B1k-Z7DOattDQUdJTl80bFU0Yms/edit

 

It's another "ragexe.exe" with themida, I've failded about it for a long time. Drive me crazy

so  I would be very much obliged if  u could unpack it

 

long time? it's exe from 18.3.2013 o_O 

 

Here is latest unpacked Ragexe: 2013-03-20eRagexe.exe

Perfect job,K3DT!

Edited March 22, 2013 by qq1937312935

[Ai4rei]

Randoms:

The section table is messed up, will render most WDG plugins unusable.

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

It's MSVC 10.

[k3dT]

Randoms:

The section table is messed up, will render most WDG plugins unusable.

All RagExe's are compiled with MSVC 9 (!!)... Last unpacked RagExe is here: 2013-03-13aRagexe.exe

It's MSVC 10.

 

Are you sure? Linker info is 9.0 and imports msvcp90.dll and msvcr90.dll are runtine files for Visual Studio 2008. And yes, sections are merged, because of Themida. I can't help.

[Ai4rei]

Used 2013-03-13cRagexeRE as reference, which imports msvcp100.dll and msvcr100.dll, so apparently only RE clients do for now. I guess I'll have to figure out how to split the first section into .text and .rdata .

[Beret]

Think it should be worked now ragexe instead of ragexeRE.

Reason: with less bugs, and supported the cash button.

[Rytech]

I can confirm seeing 2013-03-20eRagexe has msvcp90.dll and msvcr90.dll while the 2013-03-13cRagexeRE has smsvcp100.dll and msvcr100.dll. Kinda weird that one is using a newer compiler then the other. I guess this means working on the Ragexe clients would be easier right now?