This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=2542

123xong, posted Thu Jun 02, 2016 2:41 am (13918)

---

Hello master,

I just read here http://www.progamercity.net/game-files/ ... actor.html

but it was too old i cannot download SDOESAITool.rar?,

can anyone with old account help me to download ??

the main website is http://sdox.cibmall.net/
Im uploading datas.sac, datas.sai (too big)

thank you

123xong, posted Thu Jun 02, 2016 8:47 am (13923)

---

Please help me to decrypt datas.sai to get file table, thank you

https://mega.nz/#!UhoiTSLZ!aGzYN3EX1T0p ... 5OGUHG7GxQ

aluigi, posted Thu Jun 02, 2016 9:54 am (13924)

---

@Ekey
Can you upload SDOESAITool.rar here too?

Ekey, posted Thu Jun 02, 2016 11:32 am (13933)

---

here

SDOESAITool-src-bin.rar

123xong, posted Thu Jun 02, 2016 4:49 pm (13946)

---

I still cannot believe, awesome forum ever thank everybody very much

now I'm learning the way to reimport , ^_^

123xong, posted Fri Jun 03, 2016 3:44 pm (13999)

---

Can I have more favor !!!

the file songlist.dat https://mega.nz/#!ZoZTFI6B!NyyyqKfsbKAE ... SGnLpmVXFA is simple string table

Can you help me to edit/add/delete records inside that

thank you very much !!!

Ekey, posted Sat Jun 04, 2016 3:53 pm (14041)

---

Here script for unpack sac

PS: see below.

123xong, posted Mon Jun 13, 2016 6:19 am (14352)

---

thank EKey alot

In new game version, they changed the key to decrypt datas.sai (the old key 0x7C53F961u does not work)

https://mega.nz/#!xwpHTD7Z!cMlUm21zLqmE ... ZMxvoMv0lU

if possible, can you tech me how to find the new key to decrypt ?

thank you

Ekey, posted Mon Jun 13, 2016 11:14 am (14360)

---

I will can try to update script, if you upload all DLL and EXE from game.

123xong, posted Tue Jun 14, 2016 2:08 am (14384)

---

wow, here is new bin, dll

https://mega.nz/#!1hBQXCyJ!ARoKPv6owpNo ... RwdJG22WwA

sdo.bin is execute file for game

thank you alot

Ekey, posted Tue Jun 14, 2016 1:23 pm (14389)

---

Encryption key is not changed. They added new block for patch data. Anyway i updated script. Let me know if it does not work.

PS: See below.

123xong, posted Tue Jun 14, 2016 5:16 pm (14397)

---

wow, too fast,
..................
0000000018d6901 65664 UI\ROOM\LETTER2.DDS
000000000190297e 352 SCENE\MAPOBJ\PK\LABA2\LABA2.HRC
000000000112607a 14565 DANCE\12538.DPS
0000000001ae03c5 394 UI\MATCHLOBBY\LOBBY140.PNG
0000000000bfcad8 32896 AVATAR\007234_MAN_SHOULDER_1.DDS
0000000001b1af9e 12390 UI\MATCHLOBBY\LOBBY150.PNG
00000000056c8340 11 UI\CERTIFICATEDLG\10301_6.AN
000000000112995f 12346 DANCE\12539.DPS
00000000015569ae 464 3DNOTES\LONG.HRC
0000000000a3d1eb 17818 UI\ITEM2D_PACK_IN_SHOP\200010_CHARBACK10_1.PNG
0000000001577e26 10720 UI\PIECESDLG\MALE\CHECKED\6\5.PNG
00000000012a24da 65664 AVATAR\018121_MAN_HAIR.DDS
00000000126e4e8d 131200 AVATAR\033272_MAN_HAIR.DDS
00000000002b1900 65664 AVATAR\018221_MAN_HAIR.DDS
00000000013ba376 1530 UI_MINI\LINPAIDLG\LINGPAI_OK_1.PNG
000000000157e957 13859 UI\PIECESDLG\MALE\CHECKED\7\1.PNG
000000001590ac1d 262272 AVATAR\033472_MAN_HAIR.DDS
0000000013407ae9 131200 AVATAR\033332_MAN_PANT.DDS
0000000005c6bf58 93501 UI\MUSIC\ICONS\12571.PNG
0000000001c61c24 15476 PETMOTION\TOTO_RUN.MOT
0000000011c15122 10127 DANCE\12730.DPS
0000000011c178b1 11395 DANCE\12731.DPS
0000000011c1a534 11712 DANCE\12732.DPS
0000000000c31b6d 26 UI\ITEM2D_PACK\100975_TGSTHLKT.AN
0000000000ebf626 131200 SCENE\MONSTERROOM\SLYUANJING_.DDS
0000000011c1d2f4 12651 DANCE\12733.DPS
0000000011c2045f 12334 DANCE\12734.DPS
0000000000e77d40 74140 PETMOTION\001_1_GAME_PE_OPEN_W.MOT
000000000183601b 3338 UI\STATIS\O2JAMSTATISTIC\REDBAG_NUM\0.PNG
0000000011c2348d 11066 DANCE\12735.DPS
00000000006bde85 65664 AVATAR\014902_MAN_HAIR.DDS
0000000011c25fc7 13285 DANCE\12736.DPS

- 127792 files found in 232 seconds
coverage file 0 99% 6880618 6892498
coverage file 1 88% 5680201809 6429115688
coverage file -1 100% 3067008 3067008
coverage file -2 100% 3813586 3813586
coverage file -3 0% 0 57

I see your new script can get the correct files structure but incorrect the files' content

example in previous version of datas/petdress.txt is readable

1010000 1010000_laoshu_face.msh
1010001 1010001_xiaomao_face.msh
1010002 1010002_huanxiong_face.msh
1010003 1010003_xiaogou_face.msh

...........

but now is unreadable

BF00008040D784543EE276A0BE1AF9043F437444BF0000A040FAB5953D4FCCDABEE124E53E213A48BF0000C...

--> ?..?@?"T>av??u?CtD?..?@u?=OIU?a$a>!:H?..A@$?[_???>?
D?..a@????h?c??>|c?..AA'?G?O9>e_?.. Ac?*?u?O?? 9>?8?..0A~y&?)E??Ac.>?e,?.

I dont think they encrypted them. just wrong some offset

thank for you helping

123xong, posted Tue Jun 14, 2016 5:28 pm (14398)

---

Sorry, maybe my wrong
in new version, they splitted big file datas.sac into many small files and I have to know the way to combine them into one big file before using your script

Ekey, posted Tue Jun 14, 2016 6:19 pm (14401)

---

As i said, they added new block with patch files and seems some files can be compressed. I need full client.

AnonBaiter, posted Tue Jun 14, 2016 6:22 pm (14402)

---

Ekey wrote:

I need full client.

Then you'll need to grab a copy of the game for yourself. Here's a link where you can download the full client.

Ekey, posted Tue Jun 14, 2016 9:54 pm (14408)

---

AnonBaiter wrote:

Ekey wrote:

I need full client.

Then you'll need to grab a copy of the game for yourself. Here's a link where you can download the full client.

This client is invalid. Old variant with a large archive. I need client with splitted archives. Seems it's http://sdo.9you.com/web_v8/download_game.html

123xong, posted Wed Jun 15, 2016 1:31 am (14414)

---

Ekey wrote:

AnonBaiter wrote:

Ekey wrote:

I need full client.

Then you'll need to grab a copy of the game for yourself. Here's a link where you can download the full client.

This client is invalid. Old variant with a large archive. I need client with splitted archives. Seems it's http://sdo.9you.com/web_v8/download_game.html

yes it is, , thank you very much

Ekey, posted Wed Jun 15, 2016 12:55 pm (14431)

---

Here we go.

Code:

# Super Dancer Online (SAI/SAC format) 0.3b
# Written by Ekey (h4x0r)
# Game: http://sdo.9you.com/web_v8/download_game.html
# 
# script for QuickBMS http://quickbms.aluigi.org

get EXT extension
if EXT != "sai"
   print "Error: you must select the file with SAI extension, all the others will be extracted automatically!"
   cleanexit
endif

# Function for decrypt > pBuffer, dwSize
set MEMORY_FILE3 binary "\x55\x8B\xEC\x57\x8B\x7D\x0C\x33\xC9\xBA\x61\xF9\x53\x7C\x85\xFF\x7E\x22\x56\x8B\x75\x08\xEB\x08\x8D\xA4\x24\x00\x00\x00\x00\x90\x69\xD2\x09\x3D\x00\x00\x8B\xC2\xC1\xE8\x10\x28\x04\x31\x41\x3B\xCF\x7C\xED\x5E\x8B\xC7\x5F\x5D\xC3"

get SAI_SIZE asize 0
get ARCHIVE_PATH FILE_FOLDER

idstring "SDO\x00" 0
get FILES long 0
get NAMES_SIZE long 0
get ZERO long 0
get PATCH_CHUNKS long 0
get PATCH_FILES long 0

set PATCH_SIZE long PATCH_FILES
xmath PATCH_SIZE "PATCH_SIZE * 264"

savepos ENTRY_OFFSET 0
set ENTRY_SIZE long SAI_SIZE
xmath ENTRY_SIZE "FILES * 24"
log MEMORY_FILE1 ENTRY_OFFSET ENTRY_SIZE 0
calldll MEMORY_FILE3 0 cdecl RET MEMORY_FILE1 ENTRY_SIZE

set NAMES_OFFSET long SAI_SIZE
xmath NAMES_OFFSET "NAMES_OFFSET - NAMES_SIZE - PATCH_SIZE"
goto NAMES_OFFSET 0
log MEMORY_FILE2 NAMES_OFFSET NAMES_SIZE 0
calldll MEMORY_FILE3 0 cdecl RET MEMORY_FILE2 NAMES_SIZE

for i = 0 < FILES
   get FLAG long MEMORY_FILE1
   get SIZE long MEMORY_FILE1
   get OFFSET long MEMORY_FILE1
   get NAME_OFFSET long MEMORY_FILE1
   get CHUNK_ID long MEMORY_FILE1
   get PATCH_ID long MEMORY_FILE1
   goto NAME_OFFSET MEMORY_FILE2
   get NAME string MEMORY_FILE2
   
   if PATCH_ID != 0
      string ARCHIVE_NAME p "%s\Data\Datas_p%d.sac" ARCHIVE_PATH PATCH_ID  
   else CHUNK_ID >= PATCH_ID
      string ARCHIVE_NAME p "%s\Data\Datas%d.sac" ARCHIVE_PATH CHUNK_ID
   endif
       
   open FDSE ARCHIVE_NAME 1
   log NAME OFFSET SIZE 1
next i

123xong, posted Wed Jun 15, 2016 3:34 pm (14463)

---

wow, your newest 0.3b is workingggggggggggggggggggg
I still cannot believe
Ekey,you are awesome, best help ever !!!!!
thank you very much again !!!!!!!!!!

Ekey, posted Wed Jun 15, 2016 4:08 pm (14464)

---

You're welcome

godskin, posted Wed Jun 15, 2016 6:59 pm (14480)

---

Ekey wrote:

You're welcome

thank very but

but .MESH don't work on
- Noesis
- 3D Objconverter

Ekey, posted Wed Jun 15, 2016 8:18 pm (14489)

---

Make request here

123xong, posted Fri Jun 17, 2016 6:41 am (14530)

---

Ekey wrote:

You're welcome

Master Ekey, Can you give me one more favor !!!!
there is a file serverconfig.dat which already encrypted,
if you can de-assemble client.bin (Malaysia verison http://sdox.cibmall.net/) , you may know the way they encrypt / decrypt !!!!

I already tried IDA-pro, ollydbg... but couldnot get it

just the extra request !!!! if possible, thank you very much

Ekey, posted Fri Jun 17, 2016 10:06 am (14533)

---

Nah. I'm deleted already game.