Packed ArcheAge files & Network question

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
terrorhomer
Posts: 1
Joined: Sun Mar 06, 2016 12:25 am

Packed ArcheAge files & Network question

Post by terrorhomer »

Hello,

I have been trying to unpack the ArcheAge files, specifically x2game, crynetwork and cryaction. The packer is not recognized by PEiD, but from looking into the file I believe it is Arxan as I've seen "arxan_debug", and the protection type would in that case be GuardIT because of this string "activated arxan handler, guardId = %d". I was wondering whetever anyone knows how to unpack the three files? I've tried to follow normal ways to unpack (such as with UPX), but even when I reach what should be OEP, there seems to be yet another layer.

My reason to unpack the files is to find out what encryption type ArcheAge is using for its packets, as well as its address. I have tried to follow the callstack from WSASend and WSARecv, but without luck, since I stumble into the garbage code.