silberberg44 wrote: ↑Mon Sep 06, 2021 6:39 pm C59FDBADFBB93D8024D3F2CB516F696D6D8A9B78_00000 - db3 database

Database of what?

Continuing to reversing hfs format, I found out that offsets for header and entry table are generated from file name

like this

It's nice to see the progress is somewhat moving from dead point. Meanwhile, I've managed to pin-point at least 4 HFS, whose content can be obtained without decoding. Hm, can you provide names of these files? We will need this in order to understand where we need to decrypt data, and where not. At ...

There is a small problem, IDA and Ghidra give incorrect arguments for functions in pseudo-code. For example, Ghidra think that the decryption function has no arguments and decompiles it like void blablabla() ;, IDA decompiles function with one argument int blablabla(int hehe) , but actually function...

So, encryption algorithm is not AES or Sosemanuk. I just restored code of functions for keygen, updating and setup keys, function for decrypting data is next !



No one will help me?

Edited: Decryption start from 0xFF offset (maybe first 256 bytes is something like a digital signature, anyway no ideas at this moment :oops:) So, here some 4 bytes data for test from file 77EEDAF6871DCC7B83BE580E005294A26F71CDCF_00000.hfs Before =>> After decryption 83 50 46 17 =>> 95 00 00 00 BF 3...

As Yretenai said in newest version HFS files is encrypted by AES (probably modified) cuz for setup encryption keys it uses SOSEMANUK multiplication tables (I have never seen such thing 8D). There are no static encryption keys, they are dynamic and are generated from the file name https://forum.xenta...

# Crossbeats REV. SUNRISE (ARC) format # script for QuickBMS http://quickbms.aluigi.org idstring "ARC\x00" get VERSION short #7 get FILES short for i = 0 < FILES getdstring PATH 64 get EXT_HASH long get ZSIZE long math ZSIZE &= 0x3FFFFFFF get SIZE long get OFFSET long string NAME p= &...

Nope, these tools are only for unpack assets.

My list > https://zenhax.com/viewtopic.php?p=63853#p63853

@erik945 - This list will be merged soon > https://github.com/WolvenKit/CP77Tools/issues/27

My project list (Multi-Language). Current state 1307466 audio_1_general.archive -> 4363 of 4376 (99%) audio_2_soundbanks.archive -> 2427 of 2751 (88%) basegame_1_engine.archive -> 1541 of 1840 (83%) basegame_2_mainmenu.archive -> 68 of 68 (100%) basegame_3_nightcity.archive -> 122248 of 122502 (99%)...

Developers have confirmed that in Cyberpunk 2077 there will be tools for modifications will avaible later after release

This PKG is encrypted?