Compressed dds?

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
sigroon365
Posts: 330
Joined: Fri Nov 21, 2014 4:03 am

Compressed dds?

Post by sigroon365 »

Although I wonder that I have to move it to Graphic file formats, this is abnormal file. It is weird.
It seems that this file has multiple compressed dds files. Can someone unpacked it?
https://www.sendspace.com/file/havjw1
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Compressed dds?

Post by aluigi »

imho the DXT* information have been stripped out and the data is just encrypted.

Something weird is that the first sequence of encrypted bytes (CB 41 C5 F3 74 80 44 1B 1E 50 1D BC AF 30 AB AB ... for 0x1051 bytes) is available at both offset 0x80 and 0x6508ef, this is strange because that would never happen in a block cipher encryption (like aes, blowfish) and so it may be a custom algorithm.

Just curious, name of the game?
sigroon365
Posts: 330
Joined: Fri Nov 21, 2014 4:03 am

Re: Compressed dds?

Post by sigroon365 »

aluigi wrote:Just curious, name of the game?

What I uploaded is from Tales of Berseria Demo.
This format is widely used hooking method when 3DM(Chinese group) made translation patch for their own language.

Here is the original patch files. https://www.sendspace.com/file/qpkjze
chrrox
Posts: 388
Joined: Thu Aug 07, 2014 10:28 pm

Re: Compressed dds?

Post by chrrox »

Based on the header this should be 1 dds file.
08 05 00 00 = 1288
06 05 00 00 = 1286
0x508 * 0x506 = 0x194630
0x194630 * 8 (bits per pixel)= 0x6518C0
and that is the size of the texture data.