Page 1 of 1

Call of Chaos Online

Posted: Tue May 19, 2009 2:21 am
by chrrox
The contents of this post was deleted because of possible forum rules violation.

Re: Call of Chaos Online

Posted: Tue May 19, 2009 2:09 pm
by Rheini
Which lua file describes the encryption?
Well found the code where the npks get loaded but couldn't trace the calls since they are register indirect ones.
Would need to install the full game to be able to debug it, maybe some time later. No time atm.

Re: Call of Chaos Online

Posted: Tue May 19, 2009 8:57 pm
by chrrox
Would it be better if I uploaded the updater file would that be easier to trace?
Is there anything I could do to learn to do this on my own?

Re: Call of Chaos Online

Posted: Tue May 19, 2009 9:50 pm
by Rheini
Well most "encryptions" are quite simple (xors, some arithmetics or the like)
Some people can figure them out just by looking at the file data. Don't know how they do that :wink:
But esp. when it comes to more complex algorithms you need to have a look at the game exe.
I personally always do that cause you always learn something :)

Well if you want to learn that, grab some x86 assembler tutorials, get a disassembler like IDA and/or a debugger like OllyDbg and play around.
It's all about experience.

http://www.tuts4you.com/download.php?list.19
This site has loads of tutorials and downloads for almost everything.
Starting with tutorials about Olly and IDA, ending with a detailed explanation of SecuROM :wink:

Re: Call of Chaos Online

Posted: Sun May 24, 2009 9:08 pm
by chrrox
I dug some more into this and I will post what I have found

idstring "NPAK"
get version long
get FILES long
get FILETBLOFF long
get OFFSET long

then you must read the file table
there are 0x18 bytes of encrypted data which I assume is the offset/size/chechsum information
then 0x4 bytes file name length
then what appears to be a partial encrypted file name.
then it goes to the next file table entry.
I have attached a small archive and the unencrypted file names.

not all of these are used in this file but 4 of these are. you can match them using their lengths.
I got these names from the exe.
PostEffect/PP_ColorGBlurH_7Sample.psh
PostEffect/PP_ColorGBlurV_7Sample.psh
PostEffect/PP_BlendWithBlurFactor_With_Param.psh
PostEffect/PP_PixelColorBrightPassFilter.psh
PostEffect/PP_ProcessGlare.psh
PostEffect/PP_ColorGBlurH.psh
PostEffect/PP_ColorGBlurV.psh

Re: Call of Chaos Online

Posted: Sat Sep 12, 2009 5:06 pm
by pixellegolas
googled NPAK compression and this popped up:

http://code.google.com/p/npk/