This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=5086

Delutto, posted Thu Oct 12, 2017 8:35 am (27252)

---

The game uses a *.pak packpage which I already figured out your GRAF:

Code:

4 bytes Magic #10E1A44A
4 bytes FileCount
4 bytes HeaderSize
for each file
n bytes FileName (null terminator)
4 bytes FileSize
4 bytes FileOffset

The extracted files seens to be compresses, I guess is a zlib becouse game have a zlib1.dll in his folder, but his magic is not 789C, I alread try XOR by 17D6 but I get a invalid zlib data.
I uploaded the pak file with the extracted files, plus exe game and zlib1.dll.

World Of One.7z

MerlinSVK, posted Thu Oct 12, 2017 3:47 pm (27260)

---

They are not compressed because:

1) you can compress them (unpacked sounds.xml => 61KB, zip compressed => 14KB)
2) you can see a repetitive strings there, like mxahl or ndpm.

So I guess they are some sort of compiled (binary) XMLs.

EDIT: Or they are obfuscated somehow, because JSON files are also non-readable.

Zolodei, posted Thu Oct 12, 2017 9:12 pm (27269)

---

Delutto correct a typo.

Code:

4 bytes HeaderSize
4 bytes FileCount

encryption XOR:
KEY: "SukaPizda" ; .xml, .atlas, .json, .plist, .fsh, .pex
KEY: "*SPAM*" ?

aluigi, posted Thu Oct 12, 2017 10:39 pm (27272)

---

http://aluigi.org/bms/worldofone.bms

Please let me know if ALL the files of ALL the archives are correctly decrypted.

Interesting bad words in the exe

Delutto, posted Fri Oct 13, 2017 5:21 pm (27296)

---

Zolodei wrote:

Delutto correct a typo.

Code:

4 bytes HeaderSize
4 bytes FileCount

encryption XOR:
KEY: "SukaPizda" ; .xml, .atlas, .json, .plist, .fsh, .pex
KEY: "*SPAM*" ?

Oops, my bad... I was in a hurry and I ended up changing the order...
Thanks for the key! XOR always cheat me...

aluigi wrote:

http://aluigi.org/bms/worldofone.bms

Please let me know if ALL the files of ALL the archives are correctly decrypted.

Interesting bad words in the exe

All kind of data in all pak files of the game correctly decrypted.
Someone doesn't like the Suka...
Thanks guys!