[HELP] Decrypt a new type of pf8 (*pfs) file

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
amVspR
Posts: 40
Joined: Mon Aug 14, 2017 2:45 am

[HELP] Decrypt a new type of pf8 (*pfs) file

Post by amVspR »

Hi there,
I need help in extracting *.pfs file. I tried the script Norn9 and Amnesia Memories.
- The Norn9 script successfully extracted the files, but the output was not viewable [all the extracted image (PNG), sound (OGG) files are all unable to be viewed or played].
- The Amnesia script cannot extract the file. ["Error: Unknown key for this file", "615710695 Offset 000000000"]
I used the latest QuickBMS 0.8.
The string from Offset (h) 01 -> 04 is: pf8|ƒ [Image attached]

Does anyone know how to extract it? Thanks!
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: [HELP] Decrypt a new type of pf8 (*pfs) file

Post by aluigi »

Usually every single pfs file has a different key so it's necessary to have all the keys (maybe we are lucky and there are no keys for this game?)
Start uploading a small pfs file, if they are all big use http://aluigi.org/bms/filecutter.bms to cut them.
amVspR
Posts: 40
Joined: Mon Aug 14, 2017 2:45 am

Re: [HELP] Decrypt a new type of pf8 (*pfs) file

Post by amVspR »

aluigi wrote:Usually every single pfs file has a different key so it's necessary to have all the keys (maybe we are lucky and there are no keys for this game?)
Start uploading a small pfs file, if they are all big use http://aluigi.org/bms/filecutter.bms to cut them.

Thanks for your quick reply! I sent you the files via email.
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: [HELP] Decrypt a new type of pf8 (*pfs) file

Post by aluigi »

Name of the game?

Can you upload also the game executable?

*edit* also the GALTIA.pfs.* cuts?
amVspR
Posts: 40
Joined: Mon Aug 14, 2017 2:45 am

Re: [HELP] Decrypt a new type of pf8 (*pfs) file

Post by amVspR »

aluigi wrote:Name of the game?

Can you upload also the game executable?

*edit* also the GALTIA.pfs.* cuts?

Just sent via email!
*edit*GALTIA is able to be extracted by Extract Data 1.2, so I didn't send it to you.*
amVspR
Posts: 40
Joined: Mon Aug 14, 2017 2:45 am

Re: [HELP] Decrypt a new type of pf8 (*pfs) file

Post by amVspR »

Just send the galtia cuts anyway
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: [HELP] Decrypt a new type of pf8 (*pfs) file

Post by aluigi »

Yeah galtia.pfs can be extracted with the existent norn9.bms script (I have no idea what you mean with extractdata 1.2).
I have updated the same script to extract also the kintouka.pfs.000 and 001 archives, no luck with 002 and the very small one.
http://aluigi.org/bms/norn9.bms
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: [HELP] Decrypt a new type of pf8 (*pfs) file

Post by aluigi »

Added also the key for kintouka.pfs.002
amVspR
Posts: 40
Joined: Mon Aug 14, 2017 2:45 am

Re: [HELP] Decrypt a new type of pf8 (*pfs) file

Post by amVspR »

OK, this time it works like a charm! Thank you very much! Btw, this is the extractdata I mentioned.