This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=1364

AlexMan586, posted Sun Sep 13, 2015 10:01 am (7440)

---

[DELETED]

Xiron, posted Sun Sep 13, 2015 10:47 am (7441)

---

Normally I'd be inclined to check it out and say "yes they would be in there" or "no they won't" but 2 GB to download a client I won't use? Right...
Not to be discouraging, but maybe someone else will. Either that or perhaps you could attach a sample .pack file at the least and as well provide a screenshot of this "packages" folder so we know what it look like?

aluigi, posted Sun Sep 13, 2015 11:34 am (7443)

---

The funny thing is that the pack archives are not big so was very easy to upload a couple of them.
Anyway there is no solution at the moment.
http://forum.xentax.com/viewtopic.php?f=21&t=3863

AlexMan586, posted Sun Sep 13, 2015 12:43 pm (7444)

---

[DELETED]

aluigi, posted Sun Sep 13, 2015 1:05 pm (7445)

---

What?
That post is there from 2009!

aluigi, posted Mon Sep 14, 2015 11:13 pm (7491)

---

Just for the record, the encryption is a lot more complex than that.
It uses aes_256_cfb128 (plus some ivec-related xor every 32 bytes that is not standard or not correctly implemented in quickbms) with dynamic keys to decrypt the table of each archive, a non-standard base64 for a fixed key ("IMAAAAAACAAAAAAAFPHPKJP...") and also the charset encryption for the content of the files is dynamic.
"IPack001" 8 bytes 0x80 bytes table to decrypt with aes_256_cfb128 content of files
"LPack002" 0x80 bytes rest to decrypt with aes_256_cfb128

I will not work on this but, maybe, these info can be a starting point for someone else.

If someone wants to waste some time and wants to have a quick look at this stuff you have to copy the bin file as exe (like ProjectTorque.bin -> test.exe) and then use offbreak: offbreak -D "c:\PATH\test.exe" "c:\PATH\Packages.lpatch" 0x88 "c:\PATH\Packages\100_2.pack" 0x90
The code is in CRC_ReleaseNoDebug.dll, it uses msvcr90.fread for reading the data.

Jackster, posted Mon May 06, 2019 4:38 am (47627)

---

Sorry to necropost this topic but me and a few others are working on reverse engineering the game.

We are newbs but are having fun.


Anyone up for trying to decrypt these package files?

Can pay for coffee.

Jackster, posted Wed May 08, 2019 9:19 am (47665)

---

d2040000d7110000c522000029090000 is a possible key?

Got it with https://github.com/mmozeiko/aes-finder

[edit]
Looks like we no longer need to do it this way.

Jackster, posted Wed May 08, 2019 12:45 pm (47668)

---

REMOVED

Karpati, posted Sat Jun 01, 2019 3:57 pm (48202)

---

I have converted all .scx files from the vehicles.zip \Bmw\Coupe_125i_E82_2009 folder to Wavefront .obj format.

Karpati, posted Sat Jun 08, 2019 5:17 pm (48605)

---

I have finished the HEAT Online .scx loader module and I released the 3D Object Converter v7.008 as a web update now.

How to get the 3D Object Converter v7.008:
Download the 3D Object Converter from http://3doc.i3dconverter.com and install it or download and use the portable version.

After it just use the Help/Check for updates... function to get the v7.008.