ZenHAX

Free Game Research Forum | Official QuickBMS support | twitter @zenhax | SSL HTTPS://zenhax.com
It is currently Wed Jun 19, 2019 9:02 am

All times are UTC




Post new topic  Reply to topic  [ 11 posts ] 
Author Message
PostPosted: Sun Sep 13, 2015 10:01 am 

Joined: Sun Sep 13, 2015 9:57 am
Posts: 4
Hello dudes, this is AlexMan here and I'm trying to extract car models out of HEAT Online. It is a shutdown online racing game but you can go look on GamersHell for an old client and install it with RunAsDate. Are the 3D models packed in those .pack files in the packages folder? Please, tell me!


Top
   
PostPosted: Sun Sep 13, 2015 10:47 am 
User avatar

Joined: Sat Sep 12, 2015 7:09 am
Posts: 104
Normally I'd be inclined to check it out and say "yes they would be in there" or "no they won't" but 2 GB to download a client I won't use? Right...
Not to be discouraging, but maybe someone else will. Either that or perhaps you could attach a sample .pack file at the least and as well provide a screenshot of this "packages" folder so we know what it look like?


Top
   
PostPosted: Sun Sep 13, 2015 11:34 am 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 10541
The funny thing is that the pack archives are not big so was very easy to upload a couple of them.
Anyway there is no solution at the moment.
http://forum.xentax.com/viewtopic.php?f=21&t=3863


Top
   
PostPosted: Sun Sep 13, 2015 12:43 pm 

Joined: Sun Sep 13, 2015 9:57 am
Posts: 4
Oh, OK. I will wait.


Top
   
PostPosted: Sun Sep 13, 2015 1:05 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 10541
What?
That post is there from 2009!


Top
   
PostPosted: Mon Sep 14, 2015 11:13 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 10541
Just for the record, the encryption is a lot more complex than that.
It uses aes_256_cfb128 (plus some ivec-related xor every 32 bytes that is not standard or not correctly implemented in quickbms) with dynamic keys to decrypt the table of each archive, a non-standard base64 for a fixed key ("IMAAAAAACAAAAAAAFPHPKJP...") and also the charset encryption for the content of the files is dynamic.
"IPack001" + 8 bytes + 0x80 bytes + table to decrypt with aes_256_cfb128 + content of files
"LPack002" + 0x80 bytes + rest to decrypt with aes_256_cfb128

I will not work on this but, maybe, these info can be a starting point for someone else.

If someone wants to waste some time and wants to have a quick look at this stuff you have to copy the bin file as exe (like ProjectTorque.bin -> test.exe) and then use offbreak: offbreak -D "c:\PATH\test.exe" "c:\PATH\Packages.lpatch" 0x88 "c:\PATH\Packages\100_2.pack" 0x90
The code is in CRC_ReleaseNoDebug.dll, it uses msvcr90.fread for reading the data.


Top
   
PostPosted: Mon May 06, 2019 4:38 am 

Joined: Mon May 06, 2019 4:25 am
Posts: 3
Sorry to necropost this topic but me and a few others are working on reverse engineering the game.

We are newbs but are having fun.


Anyone up for trying to decrypt these package files?

Can pay for coffee.


Top
   
PostPosted: Wed May 08, 2019 9:19 am 

Joined: Mon May 06, 2019 4:25 am
Posts: 3
d2040000d7110000c522000029090000 is a possible key?

Got it with https://github.com/mmozeiko/aes-finder

[edit]
Looks like we no longer need to do it this way.


Top
   
PostPosted: Wed May 08, 2019 12:45 pm 

Joined: Mon May 06, 2019 4:25 am
Posts: 3
All the maps, textures, sounds and cars.

40,000 files in total, nearly 9GB.

Uploaded a few of the files in the sample folder but over 40,000 files and nearly 9GB in total so we have ZIPed everything.
All available to view and download here http://heatonline.tk/archive/extractedfiles/


Top
   
PostPosted: Sat Jun 01, 2019 3:57 pm 

Joined: Wed Nov 12, 2014 1:46 pm
Posts: 28
I have converted all .scx files from the vehicles.zip \Bmw\Coupe_125i_E82_2009 folder to Wavefront .obj format.


Attachments:
BMW_Coupe_125i_E82_2009.zip [2.41 MiB]
Downloaded 8 times
Top
   
PostPosted: Sat Jun 08, 2019 5:17 pm 

Joined: Wed Nov 12, 2014 1:46 pm
Posts: 28
I have finished the HEAT Online .scx loader module and I released the 3D Object Converter v7.008 as a web update now.

How to get the 3D Object Converter v7.008:
Download the 3D Object Converter from http://3doc.i3dconverter.com and install it or download and use the portable version.

After it just use the Help/Check for updates... function to get the v7.008.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 11 posts ] 

All times are UTC


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited