This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=3926

godskin, posted Fri Mar 10, 2017 11:54 am (21348)

---

Web : http://kuf2.changyou.com/main.shtml



Need unpack .PKG
Sample File : https://drive.google.com/open?id=0B0b7s ... nZaUnlTMVU

aluigi, posted Fri Mar 10, 2017 2:28 pm (21351)

---

http://aluigi.org/bms/kingdom_under_fire_2.bms

godskin, posted Fri Mar 10, 2017 4:41 pm (21356)

---

aluigi wrote:

http://aluigi.org/bms/kingdom_under_fire_2.bms

thank you ^ ^

Googlemo, posted Thu Jun 08, 2017 12:26 pm (23928)

---

I don't know why but it isn't working... Here is an error I get while trying to open the same file(but from the latest client):
http://prntscr.com/fhdl1z

Here is file from latest client:
https://yadi.sk/d/yNBlRNES3JwPaP

aluigi, posted Thu Jun 08, 2017 3:16 pm (23939)

---

Unfortunately it looks like now the table with the information about the archived files is encrypted.
offzip -a -c 65536 can be a good work-around to extract the files anyway.

paercen, posted Tue Jun 13, 2017 12:45 am (24066)

---

Hi, I also have a question
I can't find KUF2 game icons in files.
Icon - that's images of skills, items and etc. They usually have size 64x64.

I use "offzip -a -c 65536" as you said. Sometimes I see errors with text "try offzip -z 15" but that doesn't work
I check DDS files, PNG and BMP in all packages and no result.
Maybe offzip skips some files?

Link to file that gives an error - https://cloud.mail.ru/public/9eJb/uCUWVhmoj

ERROR:
. 0x0005f0be
- zlib Z_DATA_ERROR, the data in the file is not in zip format
or uses a different windowBits value (-z). Try to use -z -15

aluigi, posted Tue Jun 13, 2017 4:06 pm (24078)

---

It's all correct, you can ignore that message.

paercen, posted Tue Jun 13, 2017 9:54 pm (24097)

---

Thanks.
Maybe somebody helps with icons? Where are they?

Googlemo, posted Wed Jun 14, 2017 7:07 am (24102)

---

Here is links to the whole client:
https://yadi.sk/d/pcJa_jXt3K5Dwe
https://yadi.sk/d/Op0SizYg3K5Dz4

Would be awesome if someone can direct me to game icons...

lelicopter, posted Thu Jun 15, 2017 5:21 am (24127)

---

today was update KUF2. link above not so actual. (but update was installed at this client well)

dron4938, posted Fri Oct 20, 2017 8:56 am (27482)

---

Need unpack .PKG please
Sample File : https://yadi.sk/d/Hr384ciw3NvCMf

aluigi, posted Fri Oct 20, 2017 6:46 pm (27491)

---

That file seems to have an encrypted TOC (the table with information about the archived files).
That's why the script doesn't work on it.
The only solution is using offzip -a.

dron4938, posted Sun Oct 22, 2017 10:30 am (27596)

---

after unpacking a bunch of files with random names.
how to decode .bsv and how to pack back?
thank you
Sample File .bsv : https://yadi.sk/d/qOo7hw0D3Nxvoz

Ekey, posted Sun Mar 25, 2018 2:45 pm (33563)

---

aluigi wrote:

That file seems to have an encrypted TOC (the table with information about the archived files).
That's why the script doesn't work on it.
The only solution is using offzip -a.

Yeah, there two tables is encrypted. I wrote two functions for decrypt their.

Code:

uint32_t kuf2_fs_decrypt_entry(uint8_t *pBuffer, uint32_t dwTableSize, uint32_t dwArchiveSize)
{
   uint32_t dwResult1;
   uint32_t dwResult2;
   uint32_t dwResult3;
   uint32_t dwResult4;
   uint32_t dwSeed = dwArchiveSize;

   uint32_t dwBlockSize = 24;
   uint32_t dwBlockCount = dwTableSize / dwBlockSize;

   for (uint32_t i = 0; i    {
      dwResult1 = 0x19660D * dwSeed   0x3C6EF35F;
      *(uint64_t *)(pBuffer   0)  = dwResult1;

      dwResult2 = 0x19660D * dwResult1   0x3C6EF35F;
      *(uint32_t *)(pBuffer   8)  = dwResult2;

      dwResult3 = 0x19660D * dwResult2   0x3C6EF35F;
      *(uint32_t *)(pBuffer   12)  = dwResult3;

      dwResult4 = 0x19660D * dwResult3   0x3C6EF35F;
      *(uint32_t *)(pBuffer   16)  = dwResult4;

      dwSeed = 0x19660D * dwResult4   0x3C6EF35F;
      *(uint32_t *)(pBuffer   20)  = dwSeed;
   }
   return dwSeed;
}

Code:

void kuf2_fs_decrypt_subentry(uint8_t *pBuffer, uint32_t dwTableSize, uint32_t dwSeed)
{
   uint32_t dwResult1;
   uint32_t dwResult2;
   uint32_t dwResult3;

   uint32_t dwBlockSize = 12;
   uint32_t dwBlockCount = dwTableSize / dwBlockSize;

   for (uint32_t i = 0; i    {
      dwResult1 = 0x19660D * dwSeed   0x3C6EF35F;
      *(uint32_t *)(pBuffer   0)  = dwResult1;

      dwResult2 = 0x19660D * dwResult1   0x3C6EF35F;
      *(uint32_t *)(pBuffer   4)  = dwResult2;

      dwSeed = 0x19660D * dwResult2   0x3C6EF35F;
      *(uint32_t *)(pBuffer   8)  = dwSeed;
   }
}

First function for decrypt table with values:

Code:

    get SOME_CRC longlong
    get ZSIZE long
    get SIZE long
    get ID long
    get ZERO long

Second for

Code:

        get CHUNK_OFF long
        get CHUNK_ZSIZE long
        get CHUNK_SIZE long

Sample:

Code:

//First table
dwSeed = kuf2_fs_decrypt_entry(pBuffer, dwTableSize, dwArchiveSize);

//Second table
kuf2_fs_decrypt_subentry(pBuffer, dwTableSize, dwSeed);

Sorry for necropost

aluigi, posted Sat Apr 21, 2018 4:30 pm (34199)

---

Excellent job as usual
Script 0.2:
http://aluigi.org/bms/kingdom_under_fire_2.bms

noazett, posted Sat Nov 16, 2019 6:34 am (52136)

---

Hi, the US version of the game has been released this week. so i'm posting a sample pkg file. I really hope someone can look to the package and make and extractor tool for it.
https://drive.google.com/file/d/1JXr2nC ... sp=sharing
Thank you

WollieWoltaz, posted Sat Nov 16, 2019 11:20 am (52142)

---

Doesn't the tool Aluige provided work?
Btw.. is this game made with Unreal Engine or?

Amagakuro, posted Sat Nov 16, 2019 2:40 pm (52144)

---

Quickbms works although files have no names and "useless" extension apart from the .dds, maybe the tables have a different encyption?

WollieWoltaz wrote:

Doesn't the tool Aluige provided work?
Btw.. is this game made with Unreal Engine or?

Sadly no... it uses the old engine (Blueside engine), what a pity, i was really looking forward an engine change.

Ekey, posted Sat Nov 30, 2019 11:12 am (52319)

---

Amagakuro wrote:

Quickbms works although files have no names and "useless" extension apart from the .dds, maybe the tables have a different encyption?

Archives do not contain file names, only hashes. Therefore, QuickBMS unpack files with unknown names

Pepita, posted Fri Dec 27, 2019 11:52 pm (52824)

---

Sadly the old Script wont work anymore. I uploade example File Binary just in Case someone of you can take a look!

https://mega.nz/#!XMpyzAwA!NkeuiTS0jhJ9 ... RYE2DSZeKg

Ekey, posted Sat Dec 28, 2019 12:43 am (52826)

---

Pepita wrote:

Sadly the old Script wont work anymore. I uploade example File Binary just in Case someone of you can take a look!

https://mega.nz/#!XMpyzAwA!NkeuiTS0jhJ9 ... RYE2DSZeKg

If you uploaded the main executable file then attach also all the libraries. Anyway exe is protected.