justaplayer69
Member
- Nov 29, 2023
- 318
- 362
This is definitely something new. It was created using WolfRPG 3.396, and looks like all the Address fields in the dx8 header are encrypted. I've never seen an encrypted dx8 header before (only dx6 header was encrypted, but the dev had removed that because the encryption key could be easily deducted that way, that's why GR does too btw.)
A dx8 header should be like:
But it is like:
The first two bytes is the magic (DX), then version on two bytes (8.0). After that the file index size (HeadSize) on 4 bytes, and 0x53cd4 (343252 bytes) seems about right, but the offset fields after that (8 bytes each) definitely not right, those are bigger than the file size. The CharCodeFormat and Flags are unencrypted again. So when dxlib calculates the required memory as "HuffHeadSize = size - Head.FileNameTableStartAddress ;" that turns out to be negative, which is definitely not okay and causes a memory allocation error.
Also I can confirm that with this latest WolfRPG Pro version there's no separate Game.wolf file like before, the encryption key is embedded in GamePro.exe somehow. I'm afraid no current tool (neither GR nor UberWolf) has implemented a crack for this new encryption method yet.
If someone can share this latest paid version of WolfRPG 3.396 Pro Editor, then I might be able to disassemble and reverse engineer the method from the exe, but it's going to take a while.
ps: I have found the game on pixeldrain
EDIT: the latest UberWolf release is 0.3.1, but it looks like the
A dx8 header should be like:
Code:
00000000 44 58 08 00 90 71 01 00 40 00 00 00 00 00 00 00 |DX...q..@.......|
00000010 e4 4f c4 0b 00 00 00 00 60 81 00 00 00 00 00 00 |.O......`.......|
00000020 50 6f 01 00 00 00 00 00 a4 03 00 00 00 00 3a 01 |Po............:.|
00000030 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
00000040 94 d6 09 9f d2 71 78 64 c6 9e ca 01 34 77 13 cd |.....qxd....4w..|
Code:
00000000 44 58 08 00 d4 3c 05 00 a7 41 f5 7b e9 4f f8 53 |DX...<...A.{.O.S|
00000010 0a 88 18 68 43 65 c3 54 87 18 68 42 2b 07 ce 33 |...hCe.T..hB+..3|
00000020 90 15 f1 6b ad 07 6e 48 a4 03 00 00 00 00 4b 01 |...k..nH......K.|
00000030 0c fc 82 50 33 57 72 c3 59 ab 65 55 98 47 c2 eb |...P3Wr.Y.eU.G..|
00000040 38 08 9f 7b e6 e2 33 76 91 35 6b 41 41 a6 12 d8 |8..{..3v.5kAA...|
Also I can confirm that with this latest WolfRPG Pro version there's no separate Game.wolf file like before, the encryption key is embedded in GamePro.exe somehow. I'm afraid no current tool (neither GR nor UberWolf) has implemented a crack for this new encryption method yet.
If someone can share this latest paid version of WolfRPG 3.396 Pro Editor, then I might be able to disassemble and reverse engineer the method from the exe, but it's going to take a while.
ps: I have found the game on pixeldrain
You must be registered to see the links
.EDIT: the latest UberWolf release is 0.3.1, but it looks like the
You must be registered to see the links
which already has this address encryption. So you have to compile UberWolf from the latest source and it will be able to decrypt this game file. I'll look into adding this to GR as well, will take a few days.
Last edited: