Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
Delutto
Posts: 561 Joined: Tue Oct 13, 2015 1:26 pm
Post
by Delutto » Thu Oct 12, 2017 8:35 am
The game uses a *.pak packpage which I already figured out your GRAF:
Code: Select all
4 bytes Magic #10E1A44A 4 bytes FileCount 4 bytes HeaderSize for each file n bytes FileName (null terminator) 4 bytes FileSize 4 bytes FileOffset
The extracted files seens to be compresses, I guess is a zlib becouse game have a zlib1.dll in his folder, but his magic is not 789C, I alread try XOR by 17D6 but I get a invalid zlib data.
I uploaded the pak file with the extracted files, plus exe game and zlib1.dll.
World Of One.7z
MerlinSVK
Posts: 165 Joined: Wed Aug 13, 2014 10:00 am
Post
by MerlinSVK » Thu Oct 12, 2017 3:47 pm
They are not compressed because: 1) you can compress them (unpacked sounds.xml => 61KB, zip compressed => 14KB) 2) you can see a repetitive strings there, like mxahl or ndpm. So I guess they are some sort of compiled (binary) XMLs. EDIT: Or they are obfuscated somehow, because JSON files are also non-readable.
Zolodei
Posts: 36 Joined: Sat Sep 16, 2017 6:34 pm
Post
by Zolodei » Thu Oct 12, 2017 9:12 pm
Delutto correct a typo.
Code: Select all
4 bytes HeaderSize 4 bytes FileCount
encryption XOR:
KEY: "SukaPizda" ; .xml, .atlas, .json, .plist, .fsh, .pex
KEY: "*SPAM*" ?
Last edited by
Zolodei on Thu Oct 12, 2017 11:03 pm, edited 2 times in total.
Delutto
Posts: 561 Joined: Tue Oct 13, 2015 1:26 pm
Post
by Delutto » Fri Oct 13, 2017 5:21 pm
Zolodei wrote: Delutto correct a typo.
Code: Select all
4 bytes HeaderSize 4 bytes FileCount
encryption XOR:
KEY: "SukaPizda" ; .xml, .atlas, .json, .plist, .fsh, .pex
KEY: "*SPAM*" ?
Oops, my bad... I was in a hurry and I ended up changing the order...
Thanks for the key! XOR always cheat me...
aluigi wrote: http://aluigi.org/bms/worldofone.bms
Please let me know if ALL the files of ALL the archives are correctly decrypted.
Interesting bad words in the exe
All kind of data in all pak files of the game correctly decrypted.
Someone doesn't like the Suka...
Thanks guys!