ZenHAX

Free Game Research Forum | Official QuickBMS support | twitter @zenhax | SSL HTTPS://zenhax.com
It is currently Thu Dec 05, 2019 2:29 pm

Unanswered topics | Active topics


»

All times are UTC



Post new topic  Reply to topic  Page 1 of 6
  [ 105 posts ]  Go to page 1 2 3 4 5 6 Next
  Print view Previous topic | Next topic 
Author Message
makc_ar
PostPosted: Sat Jan 12, 2019 5:49 pm 
User avatar

Joined: Sun Aug 17, 2014 7:27 pm
Posts: 1160
Free game: https://store.steampowered.com/app/9614 ... 1Shot_Demo
Image

Someone script or tool to re_chunk_000.pak file?
Image
Image
Top
   
Reply with quote  
Ekey
PostPosted: Sat Jan 12, 2019 7:49 pm 

Joined: Sat Aug 09, 2014 2:34 pm
Posts: 873
Same format as in RE7, just added new compression flag for ZSTD. Filelist actually is empty for now.


Attachments:
re2_pak_unpack_r1.rar [703 Bytes]
Downloaded 1169 times
Top
   
Reply with quote  
makc_ar
PostPosted: Sun Jan 13, 2019 1:28 am 
User avatar

Joined: Sun Aug 17, 2014 7:27 pm
Posts: 1160
Thanks a lot Ekey!
Top
   
Reply with quote  
Ekey
PostPosted: Sun Jan 13, 2019 4:07 am 

Joined: Sat Aug 09, 2014 2:34 pm
Posts: 873
Hook to get file names. Copy two DLL's in game folder and run the game, after check RE2Hook.log file :)

PS: Not tested on Win10
PS2: Just a look a next page


Last edited by Ekey on Sat Jan 26, 2019 10:37 pm, edited 2 times in total.

Top
   
Reply with quote  
shadow_lonely
PostPosted: Sun Jan 13, 2019 6:03 am 

Joined: Mon Oct 06, 2014 3:30 am
Posts: 215
Ekey wrote:
Hook to get file names. Copy two DLL's in game folder and run the game, after check RE2Hook.log file :)

PS: Not tested on Win10

Thanks! My hook file here:
Attachment:
RE2Hook.rar [165.34 KiB]
Downloaded 538 times


Top
   
Reply with quote  
Ekey
PostPosted: Sun Jan 13, 2019 12:35 pm 

Joined: Sat Aug 09, 2014 2:34 pm
Posts: 873
Updated base with names

Edited: See below.


Last edited by Ekey on Mon Jan 14, 2019 12:17 am, edited 1 time in total.

Top
   
Reply with quote  
shadow_lonely
PostPosted: Sun Jan 13, 2019 2:13 pm 

Joined: Mon Oct 06, 2014 3:30 am
Posts: 215
Thanks you very much Ekey!
All text: https://cdn.discordapp.com/attachments/ ... essage.rar
Fonts: https://cdn.discordapp.com/attachments/ ... 2/font.rar
Top
   
Reply with quote  
Ekey
PostPosted: Sun Jan 13, 2019 4:24 pm 

Joined: Sat Aug 09, 2014 2:34 pm
Posts: 873
They are encrypted. For decrypt fonts you can use my old tool for RE7 (RE7.Fonts.CryptTool). Here is a snipped of decryption code for msg's text blocks.

Code:
        static byte[] m_Key = new byte[] {
            0xCF, 0xCE, 0xFB, 0xF8, 0xEC, 0x0A, 0x33, 0x66,
            0x93, 0xA9, 0x1D, 0x93, 0x50, 0x39, 0x5F, 0x09 };

        static byte[] iDecrypt(byte[] pBuffer, int dwSize)
        {
            byte m_Byte1;
            byte m_Byte2 = 0;

            int i = 0;
            int j = 0;
            int dwKeyIndex;

            do
            {
                m_Byte1 = m_Byte2;
                m_Byte2 = pBuffer[j];
                dwKeyIndex = i++ & 0xF;
                pBuffer[j] = (byte)(m_Byte1 ^ m_Byte2 ^ m_Key[dwKeyIndex]);
                j = i;
            } while (i < dwSize);

          return pBuffer;
        }
Top
   
Reply with quote  
ISKA
PostPosted: Sun Jan 13, 2019 6:03 pm 
User avatar

Joined: Mon Apr 09, 2018 11:09 pm
Posts: 152
Ekey wrote:
They are encrypted. For decrypt fonts you can use my old tool for RE7 (RE7.Fonts.CryptTool). Here is a snipped of decryption code for msg's text blocks.

Code:
        static byte[] m_Key = new byte[] {
            0xCF, 0xCE, 0xFB, 0xF8, 0xEC, 0x0A, 0x33, 0x66,
            0x93, 0xA9, 0x1D, 0x93, 0x50, 0x39, 0x5F, 0x09 };

        static byte[] iDecrypt(byte[] pBuffer, int dwSize)
        {
            byte m_Byte1;
            byte m_Byte2 = 0;

            int i = 0;
            int j = 0;
            int dwKeyIndex;

            do
            {
                m_Byte1 = m_Byte2;
                m_Byte2 = pBuffer[j];
                dwKeyIndex = i++ & 0xF;
                pBuffer[j] = (byte)(m_Byte1 ^ m_Byte2 ^ m_Key[dwKeyIndex]);
                j = i;
            } while (i < dwSize);

          return pBuffer;
        }

Unpack succesfly but i cant repack.
How can i repack msg and font files included .pak archvies?
Top
   
Reply with quote  
Ekey
PostPosted: Mon Jan 14, 2019 12:17 am 

Joined: Sat Aug 09, 2014 2:34 pm
Posts: 873
No tools for repack.

PS: Updated base with names


Attachments:
re2_pak_names_demo_r2.rar [154.67 KiB]
Downloaded 517 times
Top
   
Reply with quote  
Delutto
PostPosted: Mon Jan 14, 2019 3:24 am 
User avatar

Joined: Tue Oct 13, 2015 1:26 pm
Posts: 495
Ekey wrote:
PS: Not tested on Win10
Tested on W10 x64 and works. Thanks!
Hashs are Murmur3? I can't find a match...
Attachment:
Logs.7z [1.47 MiB]
Downloaded 184 times

_________________
Tribo Gamer Brasil
Top
   
Reply with quote  
Ekey
PostPosted: Mon Jan 14, 2019 11:19 am 

Joined: Sat Aug 09, 2014 2:34 pm
Posts: 873
Delutto wrote:
Ekey wrote:
PS: Not tested on Win10
Tested on W10 x64 and works. Thanks!
Hashs are Murmur3?

Yep
Top
   
Reply with quote  
Scobalula
PostPosted: Mon Jan 14, 2019 3:51 pm 

Joined: Mon Oct 08, 2018 1:44 pm
Posts: 2
For C# I made some small modification to the public MurMur3 implementation to return an unsigned integer, I tested it on the ones from the above logs and they matched the pak (keep they need to be unicode/UTF16 like RE7), feel free to use this in any shape or form:

https://pastebin.com/qVysA2Si
Top
   
Reply with quote  
Delutto
PostPosted: Mon Jan 14, 2019 5:57 pm 
User avatar

Joined: Tue Oct 13, 2015 1:26 pm
Posts: 495
Scobalula wrote:
For C# I made some small modification to the public MurMur3 implementation to return an unsigned integer, I tested it on the ones from the above logs and they matched the pak (keep they need to be unicode/UTF16 like RE7), feel free to use this in any shape or form:
Thanks. I'm coding in Delphi, in fact I was using Unicode and my code was right, now I see my problem in your code: seed 0xFFFFFFFF. Thanks again, now everything is working properly.

Updated:
Attachment:
Names_13405_of_18159.7z [145.36 KiB]
Downloaded 1500 times

_________________
Tribo Gamer Brasil
Top
   
Reply with quote  
Sajjad_Rahim
PostPosted: Wed Jan 16, 2019 3:11 pm 

Joined: Sat Jan 10, 2015 10:03 am
Posts: 61
Ekey wrote:
They are encrypted. For decrypt fonts you can use my old tool for RE7 (RE7.Fonts.CryptTool). Here is a snipped of decryption code for msg's text blocks.

Code:
        static byte[] m_Key = new byte[] {
            0xCF, 0xCE, 0xFB, 0xF8, 0xEC, 0x0A, 0x33, 0x66,
            0x93, 0xA9, 0x1D, 0x93, 0x50, 0x39, 0x5F, 0x09 };

        static byte[] iDecrypt(byte[] pBuffer, int dwSize)
        {
            byte m_Byte1;
            byte m_Byte2 = 0;

            int i = 0;
            int j = 0;
            int dwKeyIndex;

            do
            {
                m_Byte1 = m_Byte2;
                m_Byte2 = pBuffer[j];
                dwKeyIndex = i++ & 0xF;
                pBuffer[j] = (byte)(m_Byte1 ^ m_Byte2 ^ m_Key[dwKeyIndex]);
                j = i;
            } while (i < dwSize);

          return pBuffer;
        }


how i can use this code?
Top
   
Reply with quote  
Sajjad_Rahim
PostPosted: Wed Jan 16, 2019 3:12 pm 

Joined: Sat Jan 10, 2015 10:03 am
Posts: 61
Delutto wrote:
Scobalula wrote:
For C# I made some small modification to the public MurMur3 implementation to return an unsigned integer, I tested it on the ones from the above logs and they matched the pak (keep they need to be unicode/UTF16 like RE7), feel free to use this in any shape or form:
Thanks. I'm coding in Delphi, in fact I was using Unicode and my code was right, now I see my problem in your code: seed 0xFFFFFFFF. Thanks again, now everything is working properly.

Updated:Names_13405_of_18159.7z


any plans to make tool for msg?
Top
   
Reply with quote  
Delutto
PostPosted: Sat Jan 19, 2019 11:33 pm 
User avatar

Joined: Tue Oct 13, 2015 1:26 pm
Posts: 495
Sajjad_Rahim wrote:
any plans to make tool for msg?
No. michalss will probably update his RE7 Complete Tools to support this game. In any case, will be better wait until game full release.

_________________
Tribo Gamer Brasil
Top
   
Reply with quote  
DJ Normality
PostPosted: Mon Jan 21, 2019 9:37 pm 

Joined: Tue Jul 24, 2018 8:52 am
Posts: 80
Deleted


Last edited by DJ Normality on Tue Jan 22, 2019 8:18 pm, edited 4 times in total.

Top
   
Reply with quote  
aluigi
PostPosted: Mon Jan 21, 2019 10:31 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 10822
@DJ Normality
May I ask you to avoid posting big images like those and moreover avoiding to double-post the same content in other topics?

You have posted the same identical images in a topic about Assassin's Creed so are these images about RE2 or ACO???

And you do it often:
viewtopic.php?f=9&t=7424&p=42520#p42520 and viewtopic.php?f=9&t=9138&p=42519#p42519

*edit* let me know what are the 2 duplicates and I will delete them.

This is not the first time I warn you about posting big images of 3d models without any technical content.
The forum is NOT a portfolio or showcase.

Instead this is a good example of images from you, that's positive:
viewtopic.php?p=42520#p42520
Top
   
Reply with quote  
DJ Normality
PostPosted: Tue Jan 22, 2019 4:42 am 

Joined: Tue Jul 24, 2018 8:52 am
Posts: 80
I deleted the pictures sorry for double posting I just wanted to show the guys in that topic what I got since some of them are in this topic too. I just get so excited when I solve or extract something that is undiscovered I like sharing the content and the algorithms. Well.. and pictures lol. But I will try to keep all my post limited. I honestly just would like to make my own topic about extractions. I shrank this one down and put 4 in 1. Again sorry.


Last edited by DJ Normality on Thu Jan 24, 2019 11:39 am, edited 1 time in total.

Top
   
Reply with quote  
Display posts from previous:  Sort by  
Post new topic  Reply to topic  Page 1 of 6
  [ 105 posts ]  Go to page 1 2 3 4 5 6 Next

»

All times are UTC

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited