XpoZed's Unpakke project

[XpoZed]

Hello XpoZed,

Sorry for VETERAN

I have one more question, is possible to make some tool for repair broken PNG s, i look on your post, but i can t use only script.

Check out this thread - viewtopic.php?f=10&t=5467&hilit=a+new+beginning

[Moo]

The site (nullsecurity.org) seems to be dead. Is there anywhere else I could get the files from?

[Acewell]

Info:
http://webcache.googleusercontent.com/s ... clnk&gl=us

Download:
http://81256.com/game-29114-1-1.html



Local backup of version 0.4b:

unpakke.zip

[Moo]

Thanks, AceWell!
But that's only upkk_dcp1.dll. I can use this one, but... Anyone got the rest?

[Acewell]

XpoZed last visited this site yesterday. Maybe try sending him a PM to see if he still has all the files?

[XpoZed]

nullsecurity.org is not dead. Last few days my FREE hosting providers from 000webhost.com had some DDoS issues so the server where my site is located was shut down. That of course sucks, but you get what you pay for after all, and in my case I pay nothing (and I won't pay until I get enough donations to use a paid service).

Right now the site is working fine, so you'll be able to download Unpakke and its modules.

Anyways, lately I'm quite busy with my job that i do for living, so I didn't release anything new (well, i didn't release anything public...). However, when the game "Deponia" get to the stores officially I will release an updated version of the "upkk_vis3" module, so you can repack it. But not before the game is officially released...

Bye now, and have fun using Unpakke.

[Moo]

Yes, site working now. Thanks!

[Moo]

For Chains of Satinav (VIS3), keys for directory table decrypt:
63353531 61333037 63383035 61386331 39653935 37386665 34613537 64636365
(When using a simple xor system like this, why limit to hex digits? Or if starting from a random-seeming hex string, why not use that directly instead of converting into ascii and then using that... Strange...)
As string, 155c703a508c1c8a59e9ef8775a4eccd.

Using mangled PNGs again.

[XpoZed]

For Chains of Satinav (VIS3), keys for directory table decrypt:
63353531 61333037 63383035 61386331 39653935 37386665 34613537 64636365
(When using a simple xor system like this, why limit to hex digits? Or if starting from a random-seeming hex string, why not use that directly instead of converting into ascii and then using that... Strange...)
As string, 155c703a508c1c8a59e9ef8775a4eccd.

Using mangled PNGs again.

I didn't get that...

[Moo]

Oh... Which part?
My comment in brackets was about strange design of this "encryption", and not about your program. Or was it not this part?

[XpoZed]

Oh... Which part?
My comment in brackets was about strange design of this "encryption", and not about your program. Or was it not this part?

If you are talking about VIS3, it has simple XOR encryption with a MD5 string, which is often used here and there.
I've seen few games using VIS3 (all made by Daedalic ent.) and all of them has used different version of the format, e.g. one uses unicode string for MD5, other uses ANSII string, the third one is using byteswapped DWORDs, chunked file entries, etc. etc.

However, they are all using PNG's with obfuscated IHDR chunk, that is easily bruteforced, like I did here : http://www.nullsecurity.org/article/a_n ... png_fixing for the game "A new beginning".

So nothing strange here, just few light unpacking protections.

You should check Fallout 3's BSA's or even better "Ridge Racer Unbounded"'s BFS1 format that it turns out to be a whole filesystem, with few encryptions, obfuscations and even its own compression algorithm.

[Moo]

Yep, I actually found that page before I found about unpakke.
Anyway, I gave the string for Satinav... It also seems to have a type 12 for xml, which can be decrypted with same XOR as header, then unpacked with zlib, but in several sections or something...

[XpoZed]

Yep, I actually found that page before I found about unpakke.
Anyway, I gave the string for Satinav... It also seems to have a type 12 for xml, which can be decrypted with same XOR as header, then unpacked with zlib, but in several sections or something...

Yep, type 0x12 is a chunked zip. I have coded the module already but I'll put it on my site when the game is officially released.

[XpoZed]

"Deponia" is officially released, so is my VIS3 module updated to support it.

Here's a little translation example in Bulgarian language:

[hyndai]

hi, can you updated vis3 again for french version there are a new key :

"d9ef88157bcbcae0" # Deponia french - publish by aluigi

ThX