This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=9253

makc_ar, posted Sat Jan 12, 2019 5:49 pm (42256)

---

Free game: https://store.steampowered.com/app/9614 ... 1Shot_Demo


Someone script or tool to re_chunk_000.pak file?

Ekey, posted Sat Jan 12, 2019 7:49 pm (42260)

---

Same format as in RE7, just added new compression flag for ZSTD. Filelist actually is empty for now.

re2_pak_unpack_r1.rar

makc_ar, posted Sun Jan 13, 2019 1:28 am (42265)

---

Thanks a lot Ekey!

Ekey, posted Sun Jan 13, 2019 4:07 am (42269)

---

Hook to get file names. Copy two DLL's in game folder and run the game, after check RE2Hook.log file

PS: Not tested on Win10
PS2: Just a look a next page

shadow_lonely, posted Sun Jan 13, 2019 6:03 am (42270)

---

Ekey wrote:

Hook to get file names. Copy two DLL's in game folder and run the game, after check RE2Hook.log file

PS: Not tested on Win10

Thanks! My hook file here:

Ekey, posted Sun Jan 13, 2019 12:35 pm (42279)

---

Updated base with names

Edited: See below.

shadow_lonely, posted Sun Jan 13, 2019 2:13 pm (42293)

---

Thanks you very much Ekey!
All text: https://cdn.discordapp.com/attachments/ ... essage.rar
Fonts: https://cdn.discordapp.com/attachments/ ... 2/font.rar

Ekey, posted Sun Jan 13, 2019 4:24 pm (42304)

---

They are encrypted. For decrypt fonts you can use my old tool for RE7 (RE7.Fonts.CryptTool). Here is a snipped of decryption code for msg's text blocks.

Code:

        static byte[] m_Key = new byte[] {
            0xCF, 0xCE, 0xFB, 0xF8, 0xEC, 0x0A, 0x33, 0x66,
            0x93, 0xA9, 0x1D, 0x93, 0x50, 0x39, 0x5F, 0x09 };

        static byte[] iDecrypt(byte[] pBuffer, int dwSize)
        {
            byte m_Byte1;
            byte m_Byte2 = 0;

            int i = 0;
            int j = 0;
            int dwKeyIndex;

            do
            {
                m_Byte1 = m_Byte2;
                m_Byte2 = pBuffer[j];
                dwKeyIndex = i   & 0xF;
                pBuffer[j] = (byte)(m_Byte1 ^ m_Byte2 ^ m_Key[dwKeyIndex]);
                j = i;
            } while (i < dwSize);

          return pBuffer;
        }

ISKA, posted Sun Jan 13, 2019 6:03 pm (42308)

---

Ekey wrote:

They are encrypted. For decrypt fonts you can use my old tool for RE7 (RE7.Fonts.CryptTool). Here is a snipped of decryption code for msg's text blocks.

Code:

        static byte[] m_Key = new byte[] {
            0xCF, 0xCE, 0xFB, 0xF8, 0xEC, 0x0A, 0x33, 0x66,
            0x93, 0xA9, 0x1D, 0x93, 0x50, 0x39, 0x5F, 0x09 };

        static byte[] iDecrypt(byte[] pBuffer, int dwSize)
        {
            byte m_Byte1;
            byte m_Byte2 = 0;

            int i = 0;
            int j = 0;
            int dwKeyIndex;

            do
            {
                m_Byte1 = m_Byte2;
                m_Byte2 = pBuffer[j];
                dwKeyIndex = i   & 0xF;
                pBuffer[j] = (byte)(m_Byte1 ^ m_Byte2 ^ m_Key[dwKeyIndex]);
                j = i;
            } while (i < dwSize);

          return pBuffer;
        }

Unpack succesfly but i cant repack.
How can i repack msg and font files included .pak archvies?

Ekey, posted Mon Jan 14, 2019 12:17 am (42319)

---

No tools for repack.

PS: Updated base with names

Delutto, posted Mon Jan 14, 2019 3:24 am (42321)

---

Ekey wrote:

PS: Not tested on Win10

Tested on W10 x64 and works. Thanks!
Hashs are Murmur3? I can't find a match...

Ekey, posted Mon Jan 14, 2019 11:19 am (42330)

---

Delutto wrote:

Ekey wrote:

PS: Not tested on Win10

Tested on W10 x64 and works. Thanks!
Hashs are Murmur3?

Yep

Scobalula, posted Mon Jan 14, 2019 3:51 pm (42344)

---

For C# I made some small modification to the public MurMur3 implementation to return an unsigned integer, I tested it on the ones from the above logs and they matched the pak (keep they need to be unicode/UTF16 like RE7), feel free to use this in any shape or form:

https://pastebin.com/qVysA2Si

Delutto, posted Mon Jan 14, 2019 5:57 pm (42351)

---

Scobalula wrote:

For C# I made some small modification to the public MurMur3 implementation to return an unsigned integer, I tested it on the ones from the above logs and they matched the pak (keep they need to be unicode/UTF16 like RE7), feel free to use this in any shape or form:

Thanks. I'm coding in Delphi, in fact I was using Unicode and my code was right, now I see my problem in your code: seed 0xFFFFFFFF. Thanks again, now everything is working properly.

Updated:

Sajjad_Rahim, posted Wed Jan 16, 2019 3:11 pm (42443)

---

Ekey wrote:

They are encrypted. For decrypt fonts you can use my old tool for RE7 (RE7.Fonts.CryptTool). Here is a snipped of decryption code for msg's text blocks.

Code:

        static byte[] m_Key = new byte[] {
            0xCF, 0xCE, 0xFB, 0xF8, 0xEC, 0x0A, 0x33, 0x66,
            0x93, 0xA9, 0x1D, 0x93, 0x50, 0x39, 0x5F, 0x09 };

        static byte[] iDecrypt(byte[] pBuffer, int dwSize)
        {
            byte m_Byte1;
            byte m_Byte2 = 0;

            int i = 0;
            int j = 0;
            int dwKeyIndex;

            do
            {
                m_Byte1 = m_Byte2;
                m_Byte2 = pBuffer[j];
                dwKeyIndex = i   & 0xF;
                pBuffer[j] = (byte)(m_Byte1 ^ m_Byte2 ^ m_Key[dwKeyIndex]);
                j = i;
            } while (i < dwSize);

          return pBuffer;
        }

how i can use this code?

Sajjad_Rahim, posted Wed Jan 16, 2019 3:12 pm (42444)

---

Delutto wrote:

Scobalula wrote:

For C# I made some small modification to the public MurMur3 implementation to return an unsigned integer, I tested it on the ones from the above logs and they matched the pak (keep they need to be unicode/UTF16 like RE7), feel free to use this in any shape or form:

Thanks. I'm coding in Delphi, in fact I was using Unicode and my code was right, now I see my problem in your code: seed 0xFFFFFFFF. Thanks again, now everything is working properly.

Updated:Names_13405_of_18159.7z

any plans to make tool for msg?

Delutto, posted Sat Jan 19, 2019 11:33 pm (42547)

---

Sajjad_Rahim wrote:

any plans to make tool for msg?

No. michalss will probably update his RE7 Complete Tools to support this game. In any case, will be better wait until game full release.

DJ Normality, posted Mon Jan 21, 2019 9:37 pm (42615)

---

Deleted

aluigi, posted Mon Jan 21, 2019 10:31 pm (42617)

---

@DJ Normality
May I ask you to avoid posting big images like those and moreover avoiding to double-post the same content in other topics?

You have posted the same identical images in a topic about Assassin's Creed so are these images about RE2 or ACO???

And you do it often:
viewtopic.php?f=9&t=7424&p=42520#p42520 and viewtopic.php?f=9&t=9138&p=42519#p42519

*edit* let me know what are the 2 duplicates and I will delete them.

This is not the first time I warn you about posting big images of 3d models without any technical content.
The forum is NOT a portfolio or showcase.

Instead this is a good example of images from you, that's positive:
viewtopic.php?p=42520#p42520

DJ Normality, posted Tue Jan 22, 2019 4:42 am (42624)

---

I deleted the pictures sorry for double posting I just wanted to show the guys in that topic what I got since some of them are in this topic too. I just get so excited when I solve or extract something that is undiscovered I like sharing the content and the algorithms. Well.. and pictures lol. But I will try to keep all my post limited. I honestly just would like to make my own topic about extractions. I shrank this one down and put 4 in 1. Again sorry.

DJ Normality, posted Tue Jan 22, 2019 7:26 pm (42649)

---

N/A

aluigi, posted Tue Jan 22, 2019 7:55 pm (42651)

---

DJ Normality wrote:

Exterior of the police station

It's just like talking to the wind...

@Delutto
Could you please tell me if the last 3 posts made by DJ Normality are "on topic"?
I mean are these 3 set of images useful to the topic or not?

DJ Normality, posted Tue Jan 22, 2019 8:15 pm (42652)

---

aluigi wrote:

DJ Normality wrote:

Exterior of the police station

It's just like talking to the wind...

@Delutto
Could you please tell me if the last 3 posts made by DJ Normality are "on topic"?
I mean are these 3 set of images useful to the topic or not?

You got something against me or something ? I cant post a picture ? Dude get off my posts then. Don't see how posting a picture is a inconvenience to anyone. So you dont like it then why don't you not reply. You need me to buy some more keys to Model Researcher ? Is it a money issue. I'm confused. Need a gofundme page for funding a better server let me know ill set you up one.

aluigi, posted Tue Jan 22, 2019 8:42 pm (42654)

---

DJ Normality wrote:

You got something against me or something ? I cant post a picture ? Dude get off my posts then. Don't see how posting a picture is a inconvenience to anyone. So you dont like it then why don't you not reply. You need me to buy some more keys to Model Researcher ? Is it a money issue. I'm confused. Need a gofundme page for funding a better server let me know ill set you up one.

Because I received complaints about you and because your huge images act only as a showcase or even off-topic (like with AC).
The whole topic is about reverse engineering the format, only your posts are images of 3d models, and it happens often with your posts.