This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=2346

bam_bam, posted Thu Apr 21, 2016 1:16 pm (12744)

---

Hi, There.

At first, I'm very sorry because my english is little rusty. plz excuse me.

I know there is a QuickBMS script for pf8. (*PFS - http://aluigi.altervista.org/quickbms.htm)

But it doesn't match. Maybe, File I want to decrypt is different one.

Does anyone know how to extract this? Thanks!

aluigi, posted Thu Apr 21, 2016 2:12 pm (12745)

---

What's the name of the game and the original names of these pfs files?

aluigi, posted Thu Apr 21, 2016 2:16 pm (12746)

---

Norn9 right?

aluigi, posted Thu Apr 21, 2016 2:18 pm (12747)

---

http://aluigi.org/bms/norn9.bms

bam_bam, posted Thu Apr 21, 2016 3:48 pm (12749)

---

aluigi wrote:

http://aluigi.org/bms/norn9.bms

OH MY! I'm much obliged to you for your help.
Thank you very much!

May I ask one more favor?

I tested another pfs file.
it's also same game file. it's too big so I uploaded patch file!

But this time it didn't work.

If you ok, Can you take a look this file?

aluigi, posted Thu Apr 21, 2016 4:10 pm (12750)

---

What's the name of the previous file you uploaded?

bam_bam, posted Thu Apr 21, 2016 4:22 pm (12751)

---

aluigi wrote:

What's the name of the previous file you uploaded?

The previous file name is patch10.

aluigi, posted Thu Apr 21, 2016 4:28 pm (12752)

---

That's bad, because every file has a different key so a file like patch11.pfs (if exists) can't be extracted and the same is valid for the real root.pfs which is 1,5Gb (got the info from google).
And what's the name of the first file you uploaded?

aluigi, posted Thu Apr 21, 2016 4:36 pm (12753)

---

Script 0.2, it tries to guess the key and it works correctly with the 2 files you provided.

bam_bam, posted Thu Apr 21, 2016 4:50 pm (12755)

---

aluigi wrote:

That's bad, because every file has a different key so a file like patch11.pfs (if exists) can't be extracted and the same is valid for the real root.pfs which is 1,5Gb (got the info from google).
And what's the name of the first file you uploaded?

Oh, sorry. My mistake.
First file name is patch10 and second file name is main3.
That's all.

My team have worked thie series. A file format isn't xor.
The new Game will be released in the latter half of this year.
According to your words, every file has a different key......so sad
Anyway I'm very grateful for your help!

aluigi, posted Thu Apr 21, 2016 5:29 pm (12758)

---

Have you tried the script 0.2?
It should work with most of your files.

bam_bam, posted Fri Apr 22, 2016 8:25 am (12765)

---

aluigi wrote:

Have you tried the script 0.2?
It should work with most of your files.

I tested the script 0.2!
It worked most of games. Thanks a lot

By the way, The new game file is still didn't work.
It was recently released, I guess that might make a difference.
I'm sorry for giving you so much trouble. Our team really appreciate you.

https://www.dropbox.com/s/24n0h2igoil9zap

aluigi, posted Fri Apr 22, 2016 10:15 am (12767)

---

There is nothing I can do. It's just a key guesser.

bam_bam, posted Fri Apr 22, 2016 12:36 pm (12769)

---

aluigi wrote:

There is nothing I can do. It's just a key guesser.

I see. Thanks for your time.
Lastly, That pfs in test.zip (new game file) is xor encryption too?
Someone asked me but I don't know about it at all.

aluigi, posted Fri Apr 22, 2016 4:35 pm (12772)

---

All the pfs archives are encrypted but the mp4 files archived in them are not encrypted.
I have updated the script to version 0.2.1 with the 3 hardcoded keys for the archives you provided.

qianqilin, posted Thu Apr 28, 2016 9:33 am (12939)

---

Added.
Because I had unpacked.

Code:

#IF NORN9 IOS
XOR is \x43\xA5\x04\x7B\xF9\x05\xBE\xD2\x8D\x2F\xF1\xF4\xEB\x5A\x4A\xDA\x98\xF1\x63\xED

#IF NORN9 APK
XOR is \xCD\x43\x09\xB6\xB2\xA5\xA6\x37\x44\x51\xC2\xB1\x2A\x89\x6C\xB9\xFA\x12\x83\x8E

#IF NORN9 APK PFS.000
XOR is \xD1\xFF\xCD\xBD\x96\x64\xA9\x02\xB6\xE9\x4B\x0A\xD3\x79\x98\xEE\x63\xB1\xFC\xBF

This is what I know~

aluigi, posted Thu Apr 28, 2016 10:19 am (12940)

---

What's the name of the file for each one of these keys?
I hope it's not just "root.pfs" for the first 2 and "root.pfs.000" for the third one.

qianqilin, posted Sat Apr 30, 2016 10:21 am (12985)

---

But it is.
The NORN9(v1.0.1).ipa have a archive [root.pfs].
It has a blank Photo [all zero].

NORN9.APK have:
main.3.jp.co.ideaf.norn9vcsmp.obb [I think is root.pfs]
patch.10.jp.co.ideaf.norn9vcsmp.obb [root.pfs.000]

If you want to run on PC, comment "os_check".

I only know that these.

bam_bam, posted Sat May 07, 2016 12:56 pm (13198)

---

I'm sorry for replying late because of a busy daily life for days.
Meanwhile, The Game is updated. Main4 file has changed to main8 file And a new image file has added.
Unfortunately script 0.2.1 doesn't work in these files.
Our team are very sorry for the inconvenience. But We could not give up in the middle.
So if you don't mind, could you check these files once again?
I just hope any more update.

NEW IMAGE FILE
https://www.dropbox.com/s/bey9hp5iiblqtp6

MAIN FILE
https://www.dropbox.com/s/h5vroo2ggotp693

aluigi, posted Mon May 09, 2016 7:37 am (13228)

---

Script 0.2.2 with an improved method to guess the key for the archives containing main.iet.

bam_bam, posted Mon May 09, 2016 1:09 pm (13238)

---

aluigi wrote:

Script 0.2.2 with an improved method to guess the key for the archives containing main.iet.

I'm terribly sorry but Script 0.2.2 doesn't operate at all.
Even if it extracted some files, all files in main8.pfs and image2.pfs are broken.

aluigi, posted Mon May 09, 2016 1:21 pm (13239)

---

I have retested it now and all the files are perfect.
Are you sure that you are using 0.2.2?
Is quickbms 0.7.3 or above?

bam_bam, posted Mon May 09, 2016 1:37 pm (13241)

---

oh, I used quickbms 0.6. That is the problem.
quickbms 0.7.3 works very well. Thanks a lot!

aluigi, posted Mon May 09, 2016 2:28 pm (13245)

---

And if you use 0.7.4a it will wok even better (latest is better)