READ THE RULES: Click here

Follow us on Facebook: https://www.facebook.com/xentax/ :)

new AION .pak file format.need help!

The Original Forum. Game archives, full of resources. How to open them? Get help here.
Post Reply
titanic
beginner
Posts: 35
Joined: Wed Nov 29, 2006 9:58 pm

new AION .pak file format.need help!

Post by titanic » Sun Nov 18, 2007 8:08 pm

The contents of this post was deleted because of possible forum rules violation.

Rheini
Moderator
Posts: 651
Joined: Wed Oct 18, 2006 9:48 pm
Location: Germany
Has thanked: 19 times
Been thanked: 40 times
Contact:

Post by Rheini » Mon Nov 19, 2007 12:29 am

Could you upload the game's exe and dll files?
Image

Remember: If you don't want to program a tool yourself, hack another one :wink:
__________
http://www.gameformats.de.vu

User avatar
john_doe
VIP member
VIP member
Posts: 80
Joined: Sat Oct 21, 2006 2:25 pm
Been thanked: 1 time

Post by john_doe » Mon Nov 19, 2007 10:00 am

Yes, that would be good.
I checked, and the bytes used to XOR against are different for each file. I guess it's calculated via one or more values from the file header.

titanic
beginner
Posts: 35
Joined: Wed Nov 29, 2006 9:58 pm

Post by titanic » Mon Nov 19, 2007 2:14 pm

The contents of this post was deleted because of possible forum rules violation.

Rheini
Moderator
Posts: 651
Joined: Wed Oct 18, 2006 9:48 pm
Location: Germany
Has thanked: 19 times
Been thanked: 40 times
Contact:

Post by Rheini » Mon Nov 19, 2007 2:47 pm

Fuck. Koreans seem to like Themida ^^
Ragnarök also used it I think.
Image

Remember: If you don't want to program a tool yourself, hack another one :wink:
__________
http://www.gameformats.de.vu

Rheini
Moderator
Posts: 651
Joined: Wed Oct 18, 2006 9:48 pm
Location: Germany
Has thanked: 19 times
Been thanked: 40 times
Contact:

Post by Rheini » Tue Nov 20, 2007 2:22 am

Unfortunately UnThemida can't unpack the dll :(
Image

Remember: If you don't want to program a tool yourself, hack another one :wink:
__________
http://www.gameformats.de.vu

Mark
n00b
Posts: 16
Joined: Sat Oct 27, 2007 5:57 am
Been thanked: 1 time

Post by Mark » Wed Dec 05, 2007 4:25 am

Oh, hey, someone made a thread for this before I did. Awesome! Any files that you guys need that you don't have?

Rheini
Moderator
Posts: 651
Joined: Wed Oct 18, 2006 9:48 pm
Location: Germany
Has thanked: 19 times
Been thanked: 40 times
Contact:

Post by Rheini » Wed Dec 05, 2007 10:45 am

No we'd need someone that is able to unpack Themida.
Image

Remember: If you don't want to program a tool yourself, hack another one :wink:
__________
http://www.gameformats.de.vu

GameZelda
advanced
Posts: 61
Joined: Wed Nov 14, 2007 5:56 pm
Been thanked: 27 times

Post by GameZelda » Wed Dec 05, 2007 6:51 pm

john_doe wrote:Yes, that would be good.
I checked, and the bytes used to XOR against are different for each file. I guess it's calculated via one or more values from the file header.
EDIT: Solved :oops:

titanic
beginner
Posts: 35
Joined: Wed Nov 29, 2006 9:58 pm

Post by titanic » Tue Dec 11, 2007 10:50 am

GameZelda wrote:
john_doe wrote:Yes, that would be good.
I checked, and the bytes used to XOR against are different for each file. I guess it's calculated via one or more values from the file header.
EDIT: Solved :oops:

whats mean?

Mark
n00b
Posts: 16
Joined: Sat Oct 27, 2007 5:57 am
Been thanked: 1 time

Post by Mark » Sun Dec 23, 2007 1:20 am

It means this thread gets bumped.

Mark
n00b
Posts: 16
Joined: Sat Oct 27, 2007 5:57 am
Been thanked: 1 time

Post by Mark » Thu Dec 27, 2007 5:45 am

Who should I bribe around here to find a solution to us AION fans little predicament? :wink:

Rheini
Moderator
Posts: 651
Joined: Wed Oct 18, 2006 9:48 pm
Location: Germany
Has thanked: 19 times
Been thanked: 40 times
Contact:

Post by Rheini » Thu Dec 27, 2007 2:25 pm

As I already said the exe seems to be protected by themida. We need an unpacked exe to figure out the encryption algorithm.
Image

Remember: If you don't want to program a tool yourself, hack another one :wink:
__________
http://www.gameformats.de.vu

Hiam
ultra-n00b
Posts: 7
Joined: Sat Dec 08, 2007 3:56 pm

No

Post by Hiam » Mon Jan 07, 2008 3:28 pm

What you need is not a unpacked exe. What you need is a unpacked CrySystem.dll. Also, you won't need a fully working one, what you need is to be able to read the code section. And that is pretty easy, since Themida anti codes are pretty simple.

http://geekserv.hornycat.org/~dick/CrySystem_dumped.rar

There you go, you will have all strings, all code. Just offsets is wrong.
Im myself investigating whats been happening to the first 32bytes of the compressedData. And i can say its not a simple xor, shr, shl method.
It's a dynamic value that's been tampered with more than that.

I'll be cross checking with the orginal CrySystem to see what they've added.

Many kisses

Rheini
Moderator
Posts: 651
Joined: Wed Oct 18, 2006 9:48 pm
Location: Germany
Has thanked: 19 times
Been thanked: 40 times
Contact:

Post by Rheini » Mon Jan 07, 2008 6:52 pm

Pretty simple? Doesn't this old version of Themida/Xtreme Protector use an aggressive ring0 driver?
And what about some tools identifying Xtreme Protector (though that one section is named Themida)?
Are both protections used?
Image

Remember: If you don't want to program a tool yourself, hack another one :wink:
__________
http://www.gameformats.de.vu

Post Reply