Join also our Discord channel! Click here.

new AION .pak file format.need help!

The Original Forum. Game archives, full of resources. How to open them? Get help here.
Post Reply
titanic
beginner
Posts: 35
Joined: Wed Nov 29, 2006 9:58 pm

new AION .pak file format.need help!

Post by titanic » Sun Nov 18, 2007 8:08 pm

The contents of this post was deleted because of possible forum rules violation.

Rheini
Moderator
Posts: 653
Joined: Wed Oct 18, 2006 9:48 pm
Location: Germany
Has thanked: 19 times
Been thanked: 40 times
Contact:

Post by Rheini » Mon Nov 19, 2007 12:29 am

Could you upload the game's exe and dll files?

User avatar
john_doe
VIP member
VIP member
Posts: 80
Joined: Sat Oct 21, 2006 2:25 pm
Been thanked: 1 time

Post by john_doe » Mon Nov 19, 2007 10:00 am

Yes, that would be good.
I checked, and the bytes used to XOR against are different for each file. I guess it's calculated via one or more values from the file header.

titanic
beginner
Posts: 35
Joined: Wed Nov 29, 2006 9:58 pm

Post by titanic » Mon Nov 19, 2007 2:14 pm

The contents of this post was deleted because of possible forum rules violation.

Rheini
Moderator
Posts: 653
Joined: Wed Oct 18, 2006 9:48 pm
Location: Germany
Has thanked: 19 times
Been thanked: 40 times
Contact:

Post by Rheini » Mon Nov 19, 2007 2:47 pm

Fuck. Koreans seem to like Themida ^^
Ragnarök also used it I think.

Rheini
Moderator
Posts: 653
Joined: Wed Oct 18, 2006 9:48 pm
Location: Germany
Has thanked: 19 times
Been thanked: 40 times
Contact:

Post by Rheini » Tue Nov 20, 2007 2:22 am

Unfortunately UnThemida can't unpack the dll :(

Mark
n00b
Posts: 16
Joined: Sat Oct 27, 2007 5:57 am
Been thanked: 1 time

Post by Mark » Wed Dec 05, 2007 4:25 am

Oh, hey, someone made a thread for this before I did. Awesome! Any files that you guys need that you don't have?

Rheini
Moderator
Posts: 653
Joined: Wed Oct 18, 2006 9:48 pm
Location: Germany
Has thanked: 19 times
Been thanked: 40 times
Contact:

Post by Rheini » Wed Dec 05, 2007 10:45 am

No we'd need someone that is able to unpack Themida.

GameZelda
advanced
Posts: 61
Joined: Wed Nov 14, 2007 5:56 pm
Been thanked: 27 times

Post by GameZelda » Wed Dec 05, 2007 6:51 pm

john_doe wrote:Yes, that would be good.
I checked, and the bytes used to XOR against are different for each file. I guess it's calculated via one or more values from the file header.
EDIT: Solved :oops:

titanic
beginner
Posts: 35
Joined: Wed Nov 29, 2006 9:58 pm

Post by titanic » Tue Dec 11, 2007 10:50 am

GameZelda wrote:
john_doe wrote:Yes, that would be good.
I checked, and the bytes used to XOR against are different for each file. I guess it's calculated via one or more values from the file header.
EDIT: Solved :oops:

whats mean?

Mark
n00b
Posts: 16
Joined: Sat Oct 27, 2007 5:57 am
Been thanked: 1 time

Post by Mark » Sun Dec 23, 2007 1:20 am

It means this thread gets bumped.

Mark
n00b
Posts: 16
Joined: Sat Oct 27, 2007 5:57 am
Been thanked: 1 time

Post by Mark » Thu Dec 27, 2007 5:45 am

Who should I bribe around here to find a solution to us AION fans little predicament? :wink:

Rheini
Moderator
Posts: 653
Joined: Wed Oct 18, 2006 9:48 pm
Location: Germany
Has thanked: 19 times
Been thanked: 40 times
Contact:

Post by Rheini » Thu Dec 27, 2007 2:25 pm

As I already said the exe seems to be protected by themida. We need an unpacked exe to figure out the encryption algorithm.

Hiam
ultra-n00b
Posts: 7
Joined: Sat Dec 08, 2007 3:56 pm

No

Post by Hiam » Mon Jan 07, 2008 3:28 pm

What you need is not a unpacked exe. What you need is a unpacked CrySystem.dll. Also, you won't need a fully working one, what you need is to be able to read the code section. And that is pretty easy, since Themida anti codes are pretty simple.

http://geekserv.hornycat.org/~dick/CrySystem_dumped.rar

There you go, you will have all strings, all code. Just offsets is wrong.
Im myself investigating whats been happening to the first 32bytes of the compressedData. And i can say its not a simple xor, shr, shl method.
It's a dynamic value that's been tampered with more than that.

I'll be cross checking with the orginal CrySystem to see what they've added.

Many kisses

Rheini
Moderator
Posts: 653
Joined: Wed Oct 18, 2006 9:48 pm
Location: Germany
Has thanked: 19 times
Been thanked: 40 times
Contact:

Post by Rheini » Mon Jan 07, 2008 6:52 pm

Pretty simple? Doesn't this old version of Themida/Xtreme Protector use an aggressive ring0 driver?
And what about some tools identifying Xtreme Protector (though that one section is named Themida)?
Are both protections used?

Post Reply