World Of One

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
Delutto
Posts: 561
Joined: Tue Oct 13, 2015 1:26 pm

World Of One

Post by Delutto »

The game uses a *.pak packpage which I already figured out your GRAF:

Code: Select all

4 bytes Magic #10E1A44A
4 bytes FileCount
4 bytes HeaderSize
for each file
n bytes FileName (null terminator)
4 bytes FileSize
4 bytes FileOffset

The extracted files seens to be compresses, I guess is a zlib becouse game have a zlib1.dll in his folder, but his magic is not 789C, I alread try XOR by 17D6 but I get a invalid zlib data.
I uploaded the pak file with the extracted files, plus exe game and zlib1.dll.
World Of One.7z
MerlinSVK
Posts: 165
Joined: Wed Aug 13, 2014 10:00 am

Re: World Of One

Post by MerlinSVK »

They are not compressed because:

1) you can compress them (unpacked sounds.xml => 61KB, zip compressed => 14KB)
2) you can see a repetitive strings there, like mxahl or ndpm.

So I guess they are some sort of compiled (binary) XMLs.

EDIT: Or they are obfuscated somehow, because JSON files are also non-readable.
Zolodei
Posts: 36
Joined: Sat Sep 16, 2017 6:34 pm

Re: World Of One

Post by Zolodei »

Delutto correct a typo.

Code: Select all

4 bytes HeaderSize
4 bytes FileCount
encryption XOR:
KEY: "SukaPizda" ; .xml, .atlas, .json, .plist, .fsh, .pex
KEY: "*SPAM*" ?
Last edited by Zolodei on Thu Oct 12, 2017 11:03 pm, edited 2 times in total.
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: World Of One

Post by aluigi »

http://aluigi.org/bms/worldofone.bms

Please let me know if ALL the files of ALL the archives are correctly decrypted.

Interesting bad words in the exe :D
Delutto
Posts: 561
Joined: Tue Oct 13, 2015 1:26 pm

Re: World Of One

Post by Delutto »

Zolodei wrote:Delutto correct a typo.

Code: Select all

4 bytes HeaderSize
4 bytes FileCount
encryption XOR:
KEY: "SukaPizda" ; .xml, .atlas, .json, .plist, .fsh, .pex
KEY: "*SPAM*" ?
Oops, my bad... I was in a hurry and I ended up changing the order...
Thanks for the key! XOR always cheat me...
aluigi wrote:http://aluigi.org/bms/worldofone.bms

Please let me know if ALL the files of ALL the archives are correctly decrypted.

Interesting bad words in the exe :D
All kind of data in all pak files of the game correctly decrypted.
Someone doesn't like the Suka... :lol:
Thanks guys!