ZenHAX

Free Game Research Forum | Official QuickBMS support | twitter @zenhax | SSL HTTPS://zenhax.com
It is currently Thu Oct 18, 2018 4:17 pm

All times are UTC




Post new topic  Reply to topic  [ 10 posts ] 
Author Message
 Post subject: Fifa Online 4
PostPosted: Thu Jun 14, 2018 1:35 pm 

Joined: Thu Jun 14, 2018 1:24 pm
Posts: 7
Hi and hello.

I was wondering if it would be possible to extract/decrypt/decompress the following file:

https://drive.google.com/open?id=1SlVTcblwjA25vQbZYrn5-9SOOAlMZX58

It is the fo4_ng_db.dat of Fifa Online 4 (the database file of FO4).

My guess is that it is an encrypted archive (with obfuscated header) because, usually, FIFA database is stored (10bh compression) in a big file.
I also guess that the file is crypted but am unable to sort it out.
However in FO3 the database was included in a big file together with the companion xml file.

If I am correct, fo4_ng_db.dat should contain 1 xml file (as it happens in regular FIFA, meta XML file for a t3db database) and a fo4/fifa_ng_db.db at least (probably it is called fifa_ng_db.db as in FO3 and regular FIFA versions). Although it might be possible this dat file does also include other files.


Top
   
 Post subject: Re: Fifa Online 4
PostPosted: Thu Jun 14, 2018 2:31 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 9051
It's encrypted with some 64bit block cipher algorithm without ivec like blowfish or *tea.
Not much to do without reverse engineering the executables.
And the result will have the same problems of the FO3 dat files in which the only pseudo-solution was the raw_ea10fb_dumper.bms script.


Top
   
 Post subject: Re: Fifa Online 4
PostPosted: Thu Jun 14, 2018 2:34 pm 

Joined: Thu Jun 14, 2018 1:24 pm
Posts: 7
Thanks for the answer Luigi.

That pseudo-solution like for FO3 is good enough to me. No big troubles exploring to find the xml and db file by checking the extracted.


Top
   
 Post subject: Re: Fifa Online 4
PostPosted: Fri Jun 15, 2018 4:28 am 

Joined: Thu Jun 14, 2018 1:24 pm
Posts: 7
If it might help you, Luigi, Nexon korean version of FO4, does include some files like BlackCipher64.aes etc...

Let's say that if you can provide me a working decrypt+raw dump script for the FO4 database file is ok to me. No big troubles checking the files myself to find out which are the xml and db.


Top
   
 Post subject: Re: Fifa Online 4
PostPosted: Fri Jun 15, 2018 6:29 am 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 9051
Black Cipher is the anti-cheating system:
http://mabinogi.nexon.net/News/All/3/00G9y


Top
   
 Post subject: Re: Fifa Online 4
PostPosted: Fri Jun 15, 2018 6:36 am 

Joined: Thu Jun 14, 2018 1:24 pm
Posts: 7
Yes I know that it's the anti-cheating system but the fact that it's an aes might help for the crypted database file. This is what I meant


Top
   
 Post subject: Re: Fifa Online 4
PostPosted: Fri Jun 15, 2018 6:43 am 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 9051
The algorithm used on the database is not aes.


Top
   
 Post subject: Re: Fifa Online 4
PostPosted: Fri Jun 15, 2018 9:29 am 

Joined: Thu Jun 14, 2018 1:24 pm
Posts: 7
anyway I am not sure it is a crypted EA BIG file.
It is just a suspicion because they use to store the database file and xml descriptor in a big file, same for locales and xml descriptors.


Top
   
 Post subject: Re: Fifa Online 4
PostPosted: Sun Jun 17, 2018 4:16 pm 

Joined: Thu Jun 14, 2018 1:24 pm
Posts: 7
Hi Luigi and sorry for the delay but am currently getting ready to move so...

However, as you were saying about the executables...

Here are the only two executables of the game:

Fifa 4 Launcher: https://drive.google.com/open?id=1WDPEHNJya8YFYJKJAJZ7Ycng5KN4lFw5

Fifa 4 ZF: https://drive.google.com/open?id=1c2kIm16d7iRNc1nD7RZEj0UGTzBK65YM


Top
   
 Post subject: Re: Fifa Online 4
PostPosted: Wed Jul 11, 2018 5:12 pm 

Joined: Thu Jun 14, 2018 1:24 pm
Posts: 7
Taking a look at the same fo4_ng_db.dat file of Nexon korean version, there appears to be an archive inside the file (chunlzma).

However I am unable to extract and decompress it.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 10 posts ] 

All times are UTC


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited