Hitman (2016) *.RPKG files [REQUEST]

[Godxon 1]

Thank you very much, Aluigi

[AnonBaiter]

Wow aluigi. It's very unusual of you to post the script in its entirety instead of posting a link of the .bms file. I'll appreciate it either way,

[MemeGang]

Just wanted to say huge thanks to Aluigi and Ekey for working on this!

How long could we be waiting for a hash list to be implemented in the script?

Obviously we don't have a plain text hash file to work from anymore. But it's probably still there somewhere obviously.

[id-daemon]

Can anyone at least CONFIRM that the key that I've found is working for all game files?

[MemeGang]

Yeah, id-deamon, it works for all the archives.

Not sure if it works for the thumbs.dat and packagedefinitions.txt

[id-daemon]

Ok, good. Yet I have a feeling that files are still compressed by some simple algorithm. Because most of the text is readable, but it breaks with some strange bytes from time to time. Maybe it was the same in previous hitman games, I never worked with hitman before.

Also it seems the resource table files are not xored (as I can see by the final 16MB part provided), and Luigi's script xores them all for the moment.

[aluigi]

Script 0.2 with everything implemented
http://aluigi.org/bms/hitman_2016.bms

[id-daemon]

aha! So it was lz4 indeed.

[Ekey]

Here script for unpack with names. Lots of duplicates of files.

[MemeGang]

Man, I don't even know what to say.
Huge thanks to anyone working on this.

Ekey's script removed a whole bunch of PNG's and files. Script still may need work yet.

[id-daemon]

Script 0.2 with everything implemented
http://aluigi.org/bms/hitman_2016.bms

I think these "type" names must be reversed. Like DXET = TEXD

Also some files that supposed to be not xored are xored now. Must be some flag for that.
Namely the types of:

TEXD (textures), WWEM (wwise), GFXV (video?)

[aluigi]

@MemeGang
remember to use quickbms_4gb_files.exe for the extraction because the hashes are 64bit (quickbms.exe is limited to 32bit integers).

@id-daemon2
Apparently those non-compressed (ZSIZE 0) may be non obfuscated, any confirmation?

[aluigi]

I have updated the script with the reversed TYPE and the obfuscation applied only to the compressed files.

[id-daemon]

Apparently those non-compressed (ZSIZE 0) may be non obfuscated, any confirmation?

No.

It seems now TEXD & WWEM files are OK, but WWEV are not. WWEV were OK last time.

[aluigi]

Just to recap, "TEXD" and "WWEM" are the only non obfuscated types of files. Right?

[id-daemon]

I'm not sure now. I didn't check them all.

[id-daemon]

Ok, it seems that 0x80000000 flag in size is an obfuscation flag.

All WWEV files are obfuscated, but only some of them are compressed.

[aluigi]

Script 0.2.2

[id-daemon]

Looks all OK now

[MemeGang]

Here script for unpack with names. Lots of duplicates of files.

Where did you get the hash list from? would it be possible to get the rest of the hashes?

Also Aluigi
All the WWEM files are Exporting as .wav, they should be .wem.
All the GFXV files are Exporting as .cri, they should be .usm.
Hopefully we can get the other hashes and that will fix the above.


Also, when using the 4gb executable & ekey's hash list, the script doesn't folder explore Unknown correctly or something because it misses the PNG files, and everything is not sorted by folders.

Script 0.3 when?