Page 1 of 1

Ragnarok Online 2 .utx encrypted

Posted: Wed Jun 20, 2007 9:39 pm
by godmode
So, RO2 is in Korean beta right now. The engine is a modified Unreal2 engine.
The texture files in it are encrypted .utx files. Is there any way to make these readable with UnrealEd or UTPT?

Example: http://www.zshare.net/download/2357465298990d/

Posted: Thu Jun 28, 2007 1:21 pm
by Rheini
It seems that they also changed the package format.

Posted: Thu Jun 28, 2007 9:59 pm
by fatduck
I think they just encrypted the header info.
So you have to locate where the import table and export tables are.

Say like the files sample about, tables location of system_t.utx @ 0x1D018D and tables location of Rag2_shipzone_t.utx @ 0x200E8F.
(Just Export table, no import table?)
Note also the table format maybe extened since the UE2 verision is 129!
But I can't found any different on a quick peek.


That's what I know ATM!

Posted: Thu Jun 28, 2007 11:22 pm
by fatduck
Here is a quick hacked file if anyone interested to see!
You can open it in UTPT but no image will be displayed since the import table is missing so UTPT didn't know which one is texture image!

http://www.zshare.net/download/24758055297fbe/

Posted: Thu Jun 28, 2007 11:45 pm
by Rheini
If it really is encrypted, debugging the exe would help.
But I don't have the beta files.

Posted: Tue Jul 03, 2007 11:31 am
by fatduck
I'm bored today so I have another look at the files. I'm sure to tell you that ONLY Header is encrypted!
I hacked the header manually and get all standard UE2 infos.

Image

Here is the hacked utx

Posted: Tue Jul 03, 2007 2:04 pm
by Rheini
fatduck wrote:I'm sure to tell you that ONLY Header is encrypted!
Quiet common approach.
Would need the exe and dll files to have a closer look.

Posted: Wed Jul 04, 2007 10:25 am
by godmode

Posted: Wed Jul 04, 2007 3:46 pm
by Rheini
As I already said, I also need the dll files.

Posted: Thu Jul 05, 2007 11:01 pm
by godmode
ok, here is the system directory with the .exe and all the .dll files
http://zenixstudios.com/f.php?f=uhkxnjs

Posted: Fri Jul 06, 2007 9:16 am
by Rheini
ProtectionID tells that it is protected with XProtector (now called Themida afaik). XProtStripper doesn't work.