This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=7063

RetroHelix, posted Sat Dec 09, 2017 10:44 am (30614)

---

EDIT: Looks like CriPakGUI, the tool I used to extract the cpks, is just doing something wrong here. I tried some other cpk extractors and the extracted files look ok.
Hi,

I was looking at the files of the game 428: Shibuya Scramble for the Wii. Most of the files are encrypted. But at the end of each file there is a part that is not encrypted. This part seem to be the first 256 bytes of the original file. See:


At 0xC is a pointer (little endian) that points to the end of the encrypted file (0x01D0 0x10 (header size maybe) = 0x01E0). The orignial file is a TPL (image) with the identifier "00 20 AF 30".

Any idea how to decrypt this?

RetroHelix, posted Sun Jan 07, 2018 8:37 pm (31368)

---

Looks like the data is not encrypted but compressed... Luckily there are some uncompressed files on the disc and I was able to find an uncompressed and a compressed version of the same file. When I did a comtypescan with quickbms I got mostly garbage but there was one compressiontype which was able to extract at least a small part right. With comtype 629 COMP_LZW_STELLAR7 the string "DUMMY_LABEL" was extracted correctly:


For the archiveformat:
long unk #always 0x0000
long unk #always 0x0000
SIZE long
ZSIZE long

Can anyone make sense of this?

aluigi, posted Sun Jan 07, 2018 10:00 pm (31372)

---

Probably that "DUMMY_LABEL" comes from your memory, that's quite normal with wrong compression algorithms that read data outside their buffers.

RetroHelix, posted Mon Jan 08, 2018 8:02 pm (31429)

---

aluigi wrote:

Probably that "DUMMY_LABEL" comes from your memory, that's quite normal with wrong compression algorithms that read data outside their buffers.

I see. Thanks for the information