Unpacked Clients for pRO with ways of finding hex codes

[aghart]

its working fine before but after the patch theres a game guard now and i cant find ways to remove it.. i search every forum .. plz help me..

[noobotter]

its working fine before but after the patch theres a game guard now and i cant find ways to remove it.. i search every forum .. plz help me..

try this.

search:
85 c0 74 07 c6 05 e7 a2 98 00 01 33 db
replace:
85 c0 eb 07 c6 05 e7 a2 98 00 01 33 db

search:
85 c0 0f 85 d1 00 00 00 0f be 05 19 fe 89 00
replace:
85 c0 90 90 90 90 90 90 0f be 05 19 fe 89 00

search:
e8 42 27 dd ff 3b c6 74 75
replace:
90 90 90 90 90 90 90 90 90


EDIT: btw, as far as I know, clients are packed again so you need to unpack it using stripper(if you don't know how to manual unpack).

[aghart]

its working fine before but after the patch theres a game guard now and i cant find ways to remove it.. i search every forum .. plz help me..

try this.

search:
85 c0 74 07 c6 05 e7 a2 98 00 01 33 db
replace:
85 c0 eb 07 c6 05 e7 a2 98 00 01 33 db

search:
85 c0 0f 85 d1 00 00 00 0f be 05 19 fe 89 00
replace:
85 c0 90 90 90 90 90 90 0f be 05 19 fe 89 00

search:
e8 42 27 dd ff 3b c6 74 75
replace:
90 90 90 90 90 90 90 90 90


EDIT: btw, as far as I know, clients are packed again so you need to unpack it using stripper(if you don't know how to manual unpack).

THANKS ! it works mr noobotter.

[imelmo25]

stripper is not working for me. do you have unpacked rag.exe? please help thank you!

[BlaQ_iCe]

this only works for those who had the values replaced as given by heero
if you still have the copy of the hexed valexe or ragexe simply copy it again where the ragnarok folder is located. still works !

but for those who haven't made the change simply follow whats given in the instruction-

[imelmo25]

is there any other unpacker program aside from stripper?

[noobotter]

is there any other unpacker program aside from stripper?

You can manually unpack using ollydbg but if you're just a beginner in reversing, it'll be hard.
Stripper is your only choice if you have no idea how to use ollydbg.

[Raider]

is there any other unpacker program aside from stripper?

You can manually unpack using ollydbg but if you're just a beginner in reversing, it'll be hard.
Stripper is your only choice if you have no idea how to use ollydbg.

Noobotter, I would like to ask if you would recommend a reverse tutorial.

[noobotter]

is there any other unpacker program aside from stripper?

You can manually unpack using ollydbg but if you're just a beginner in reversing, it'll be hard.
Stripper is your only choice if you have no idea how to use ollydbg.

Noobotter, I would like to ask if you would recommend a reverse tutorial.

"lena's reversing tutorials" is a very good start. You can google it.

[bilyakosta]

i have unpacked the recently patched Ragexe but i can't trace the codes using the tut on the first page.

maybe i did something wrong during the unpacking?

i can't find the WINMM.timeBeginPeriod. these are the only ones that shows up.

Code: Select all

advapi32.CryptAcquireContextA
advapi32.CryptCreateHash
advapi32.CryptDecrypt
advapi32.CryptDeriveKey
advapi32.CryptDestroyHash
advapi32.CryptDestroyKey
advapi32.CryptEncrypt
advapi32.CryptGetHashParam
advapi32.CryptHashData
advapi32.CryptImportKey
advapi32.CryptReleaseContext
advapi32.CryptVerifySignatureA
advapi32.GetUserNameA
advapi32.InitializeSecurityDescriptor
advapi32.RegCloseKey
advapi32.RegCreateKeyA
advapi32.RegCreateKeyExA
advapi32.RegDeleteValueA
advapi32.RegEnumValueA
advapi32.RegOpenKeyExA
advapi32.RegQueryValueExA
advapi32.RegSetValueExA
advapi32.SetSecurityDescriptorDacl
ddraw.DirectDrawCreateEx
dinput.DirectInputCreateA
gdi32.CreateCompatibleDC
gdi32.CreateDIBSection
gdi32.CreateFontA
gdi32.CreateFontIndirectA
gdi32.CreatePolygonRgn
gdi32.CreateSolidBrush
gdi32.DeleteDC
gdi32.DeleteObject
gdi32.EnumFontFamiliesExA
gdi32.FillRgn
gdi32.GetCurrentObject
gdi32.GetStockObject
gdi32.GetTextExtentPoint32W
gdi32.SelectObject
gdi32.SetBkMode
gdi32.SetTextColor
gdi32.TextOutA
gdi32.TextOutW
imm32.ImmGetCandidateListW
imm32.ImmGetCompositionStringA
imm32.ImmGetCompositionStringW
imm32.ImmGetContext
imm32.ImmGetVirtualKey
imm32.ImmNotifyIME
imm32.ImmReleaseContext
kernel32.CloseHandle
kernel32.CopyFileA
kernel32.CreateDirectoryA
kernel32.CreateEventA
kernel32.CreateFileA
kernel32.CreateFileMappingA
kernel32.CreateMutexA
kernel32.CreatePipe
kernel32.CreateProcessA
kernel32.CreateThread
kernel32.DeleteCriticalSection
kernel32.DeleteFileA
kernel32.DuplicateHandle
kernel32.EnterCriticalSection
kernel32.ExitProcess
kernel32.FindClose
kernel32.FindFirstFileA
kernel32.FindNextFileA
kernel32.FormatMessageA
kernel32.FreeLibrary
kernel32.GetComputerNameA
kernel32.GetCurrentDirectoryA
kernel32.GetCurrentProcess
kernel32.GetCurrentProcessId
kernel32.GetCurrentThread
kernel32.GetCurrentThreadId
kernel32.GetExitCodeProcess
kernel32.GetFileInformationByHandle
kernel32.GetFileSize
kernel32.GetLastError
kernel32.GetLocalTime
kernel32.GetModuleFileNameA
kernel32.GetModuleFileNameW
kernel32.GetModuleHandleA
kernel32.GetProcAddress
kernel32.GetProcessHeap
kernel32.GetStartupInfoA
kernel32.GetStdHandle
kernel32.GetSystemDirectoryA
kernel32.GetSystemInfo
kernel32.GetSystemTime
kernel32.GetSystemTimeAsFileTime
kernel32.GetTempFileNameA
kernel32.GetTempPathA
kernel32.GetTickCount
kernel32.GetUserDefaultLangID
kernel32.GetVersionExA
kernel32.GlobalAlloc
kernel32.GlobalFree
kernel32.GlobalLock
kernel32.GlobalMemoryStatus
kernel32.GlobalUnlock
kernel32.HeapAlloc
kernel32.HeapCompact
kernel32.HeapFree
kernel32.InitializeCriticalSection
kernel32.InterlockedCompareExchange
kernel32.InterlockedDecrement
kernel32.InterlockedExchange
kernel32.InterlockedIncrement
kernel32.IsBadReadPtr
kernel32.IsDBCSLeadByte
kernel32.IsDebuggerPresent
kernel32.LeaveCriticalSection
kernel32.LoadLibraryA
kernel32.LoadLibraryExA
kernel32.LocalFree
kernel32.LocalLock
kernel32.lstrcatA
kernel32.lstrcmpA
kernel32.lstrcmpiA
kernel32.lstrcpyA
kernel32.lstrlenA
kernel32.MapViewOfFile
kernel32.MoveFileExA
kernel32.MulDiv
kernel32.MultiByteToWideChar
kernel32.OpenEventA
kernel32.OpenFileMappingA
kernel32.OpenMutexA
kernel32.OpenProcess
kernel32.OutputDebugStringA
kernel32.PeekNamedPipe
kernel32.QueryPerformanceCounter
kernel32.QueryPerformanceFrequency
kernel32.ReadFile
kernel32.ReleaseMutex
kernel32.ResetEvent
kernel32.ResumeThread
kernel32.SetEndOfFile
kernel32.SetEvent
kernel32.SetFilePointer
kernel32.SetPriorityClass
kernel32.SetStdHandle
kernel32.SetThreadPriority
kernel32.SetUnhandledExceptionFilter
kernel32.Sleep
kernel32.TerminateProcess
kernel32.TerminateThread
kernel32.UnhandledExceptionFilter
kernel32.UnmapViewOfFile
kernel32.VirtualAlloc
kernel32.VirtualFree
kernel32.VirtualProtect
kernel32.VirtualQuery
kernel32.WaitForMultipleObjects
kernel32.WaitForSingleObject
kernel32.WideCharToMultiByte
kernel32.WriteFile

please help..