This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=1050

yianti, posted Wed Jun 17, 2015 10:09 am (5768)

---

Hey guys,
here is a beautiful china game ,name is: Demon Seals ?????




Web: http://zmq.163.com/index.html
Client: http://zmq.gdl.netease.com/zmq-1.0.212-setup.exe

Example npk: http://www.mediafire.com/download/dc80p ... n/base.npk
http://www.mediafire.com/download/1l157 ... c46/ui.npk

Hope someone can help me!
Thanks~

aluigi, posted Thu Jun 18, 2015 12:19 pm (5781)

---

Script updated to version 0.1.1 (lz4 compression instead of zlib):
http://aluigi.org/papers/bms/others/nxpk.bms

yianti, posted Thu Jun 25, 2015 3:26 am (5905)

---

Cool! thanks aluigi!

CriticalError, posted Fri Jun 26, 2015 7:21 pm (5944)

---

very interesting game, as I can see the unpack got random file names and no real ones right? and check it use SKI format for models? you study this format as well yianti?

PS: any chance to correct file names when export aluigi?

aluigi, posted Fri Jun 26, 2015 7:34 pm (5946)

---

You need to have a database with the hash->name entries for obtaining the real names otherwise only the sequential name plus the guessed extension is possible.

CriticalError, posted Mon Jun 29, 2015 12:46 pm (5987)

---

ummmm ok thanks for clarify it for me alugi, now another question, how we can create database for get file names? I know the hash names are get when you run client and play, but I wanna know if possible know the process to make them, because i'm interested for others games, no this one in particular, ok many thanks for all as alwasys aluigi, for patience and dedication to all members, have a nice day.

Ekey, posted Mon Jun 29, 2015 1:24 pm (5990)

---

I'm working on unpacker now



but i have problem with script.npk, seems data with flag 0 also can be obfuscated or compressed. example in attach.

aluigi, posted Mon Jun 29, 2015 1:29 pm (5991)

---

I bet it's encrypted with a block cipher (like AES) because the first 32bit value is the final size necessary due to the alignment created by the encryption.

Ekey, posted Mon Jun 29, 2015 2:37 pm (5998)

---

In script.npk and libs.npk always present redirect.nxs the file (only compressed by zlib), all other data obfuscated. In file you can see lines like

Code:

redirect_crypt.pyt
decrypt_buffer
zlib
decompress
marshal

Seems it's compiled Python module. I have tried to find file redirect_crypt.pyt but wihout results.

The soul of light, posted Thu May 04, 2017 1:51 pm (22888)

---

Ekey wrote:

In script.npk and libs.npk always present redirect.nxs the file (only compressed by zlib), all other data obfuscated. In file you can see lines like

Code:

redirect_crypt.pyt
decrypt_buffer
zlib
decompress
marshal

Seems it's compiled Python module. I have tried to find file redirect_crypt.pyt but wihout results.

Hello, Ekey.
Some people who are interested in the format of the game, if you can, you can continue the unpacker work? Thank you very much!

The soul of light, posted Tue May 09, 2017 6:53 am (23040)

---

Someone get name by dynamic debugging, but cannot one-time get all of my name, I don't know to use what way to get all the names.
https://gist.github.com/fate0/3e1d23bce9d4d2cfa93848dd92aba3d4