Cabal II (*.PAK)

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
Ekey
Posts: 1383
Joined: Sat Aug 09, 2014 2:34 pm

Cabal II (*.PAK)

Post by Ekey »

Code: Select all

# Cabal II (1.0.33.3976) (PAK format)
#
# Original script by aluigi, modified by Ekey (h4x0r)
#
# script for QuickBMS http://quickbms.aluigi.org

comtype deflate

goto -0x16
get PK_sign long
get DUMMY long
get FILES short
goto 0

for i = 0 < FILES
    get SIGN long

    if SIGN != 0x04034b50
        cleanexit
    endif

    get VER short
    get FLAG short
    get METHOD short
    get TIME short
    get DATE short
    get CRC32 long
    get ZSIZE long
    get SIZE long
    get NSIZE long
    getdstring NAME NSIZE
    savepos OFFSET
   
    if METHOD == 0
        log NAME OFFSET SIZE
    else
        clog NAME OFFSET ZSIZE SIZE
    endif

    math OFFSET += ZSIZE
    goto OFFSET
next i


Notes:
METHOD = 11 (Files encrypted by XXTea and compressed)
METHOD = 12 (Files encrypted by xor + mod and compressed)
Dezert
Posts: 3
Joined: Sat Apr 02, 2016 1:46 pm

Re: Cabal II (*.PAK)

Post by Dezert »

Ekey wrote:

Code: Select all

# Cabal II (1.0.33.3976) (PAK format)
#
# Original script by aluigi, modified by Ekey (h4x0r)
#
# script for QuickBMS http://quickbms.aluigi.org

comtype deflate

goto -0x16
get PK_sign long
get DUMMY long
get FILES short
goto 0

for i = 0 < FILES
    get SIGN long

    if SIGN != 0x04034b50
        cleanexit
    endif

    get VER short
    get FLAG short
    get METHOD short
    get TIME short
    get DATE short
    get CRC32 long
    get ZSIZE long
    get SIZE long
    get NSIZE long
    getdstring NAME NSIZE
    savepos OFFSET
   
    if METHOD == 0
        log NAME OFFSET SIZE
    else
        clog NAME OFFSET ZSIZE SIZE
    endif

    math OFFSET += ZSIZE
    goto OFFSET
next i


Notes:
METHOD = 11 (Files encrypted by XXTea and compressed)
METHOD = 12 (Files encrypted by xor + mod and compressed)


the new client does not work. you have the script on a new client? or old client?
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Cabal II (*.PAK)

Post by aluigi »

Have you tried also this script?
http://aluigi.altervista.org/bms/cabal2.bms

I'm sure it will not work (the script says that the key is incomplete) but it's worth to try.
Another important thing: provide some sample files.