Resident evil X360 debug build

Discussion in 'Modding and Hacking - Consoles and Electronics' started by james2452, Mar 14, 2018.

  1. james2452

    james2452 X360

    Joined:
    Jan 8, 2014
    Messages:
    530
    Likes Received:
    708
    I did this a long time ago, encryp key does not decryp it ?
    It may help someone if they know what to do with it...

    Advanced Archive Password Recovery statistics:
    Encrypted ZIP/RAR/ACE/ARJ-file: C:\Users\User\Downloads\Desktop\new builds\BHR_ROMRelease_r1267_Xenon.zip
    Total passwords: n/a
    Total time:
    Average speed (passwords per second): n/a
    Password for this file: Not found
    Encryption keys: [ 1b21a411 97031ff6 497ed6b9 ]
     
    XboxTestKit likes this.
  2. PixelButts

    PixelButts Site Soldier

    Joined:
    Aug 19, 2014
    Messages:
    2,734
    Likes Received:
    2,025
    It's a tad hard to do anything when the file from the link is missing
     
    james2452 likes this.
  3. james2452

    james2452 X360

    Joined:
    Jan 8, 2014
    Messages:
    530
    Likes Received:
    708
    Last edited: Aug 11, 2018
    XboxTestKit likes this.
  4. saibot_20194

    saibot_20194 Spirited Member

    Joined:
    Aug 4, 2011
    Messages:
    186
    Likes Received:
    35
    the password is still uncracked?
     
  5. james2452

    james2452 X360

    Joined:
    Jan 8, 2014
    Messages:
    530
    Likes Received:
    708
    XboxTestKit, Stipo360 and Shadha like this.
  6. Traace

    Traace Rapidly Rising Member

    Joined:
    Nov 22, 2016
    Messages:
    92
    Likes Received:
    73
    "Time remaining: More than one year"

    Really need openGL or CUDA gpu acceleration now :D
     
    james2452 likes this.
  7. james2452

    james2452 X360

    Joined:
    Jan 8, 2014
    Messages:
    530
    Likes Received:
    708
    Ill do some each day. Good thing it saves..
     
    XboxTestKit likes this.
  8. luke9511

    luke9511 Active Member

    Joined:
    Feb 22, 2015
    Messages:
    28
    Likes Received:
    2
    have you tried the tool set in kali linux?
     
  9. james2452

    james2452 X360

    Joined:
    Jan 8, 2014
    Messages:
    530
    Likes Received:
    708
    What is it ?
     
    XboxTestKit likes this.
  10. nold

    nold Active Member

    Joined:
    Nov 19, 2017
    Messages:
    40
    Likes Received:
    34
    Those keys actually seem to be working. I've played around with PKCrack & it seems to decrypt the files just fine.. BUT.. it doesn't support the zip64-extention used in this file.. (original zip only supports a zip-filesize up to 4GB).. So it fails to create the decrypted zip...

    $ zipdecrypt 1b21a411 97031ff6 497ed6b9 BHR_ROMRelease_r1267_Xenon.zip BHR_decrypt.zip
    Decrypting nativeXenon/archive/demo/d0_101_020_0.arc (e56bb22e68d7871cf3a30974)... OK!
    Decrypting nativeXenon/archive/demo/d0_101_024_0.arc (a9934c05b0ea7291968e0974)... OK!
    Decrypting nativeXenon/archive/demo/d0_101_030_0.arc (e55763cef15d9dcf01470974)... OK!
    Decrypting nativeXenon/archive/demo/d0_101_100_0.arc (9c5bac6597f8978eec5a0974)... OK!
    Decrypting nativeXenon/archive/demo/d0_101_102_0.arc (25f5b3eac5621572322d0974)... OK!
    Decrypting nativeXenon/archive/demo/d0_101_103_0.arc (7ad2089d7234a767f8630974)... OK!
    [...]
    Decrypting default.xex (009f48365fa5291a6ee70974)... OK!
    Decrypting mtf_exception/xfLog20130401_022754_Xenon.txt (7685011d6edd6f2a98f30974)... OK!
    Read unknown signature: 0x06064b50
    Error: unknown signature (ZIP file may be corrupt)

    Where "0x06064b50" is the signature of the "Zip64 end of central directory record". (See this for more info)

    Well.. i was super frustrated about that ofc.. and there doesn't seem to be another tool like pkcrack.. But while writing this post, i had the (great) idea, to simply split the zip file into multiple parts, that hopefully wouldn't use zip64 anymore.. zipsplit did the job.. and just as i expected/hoped! So i finally could decrypt & unpack all the files!

    There are a few files i couldn't transfer to my devkit, because there filenames include a '+'-sign.. don't know what to think about that..
    $ find . -iname *+*
    ./nativeXenon/model/textures/s400_075_BM+A.tex
    ./nativeXenon/model/stage/s1/textures/s120_017_BM+A.tex
    ./nativeXenon/model/chara/textures/it1502_000_BM+A.tex
    ./nativeXenon/model/chara/om/om1351/om1351_000_BM+A.tex
    ./nativeXenon/model/chara/om/om1315/om1315_BM+A.tex
    ./nativeXenon/model/chara/om/om1354/s112_019_BM+A.tex
    ./nativeXenon/model/chara/om/om1358/s10c_010_NM+A.tex
    ./nativeXenon/model/chara/om/om1348/s10c_010_NM+A.tex
    ./nativeXenon/model/chara/om/om1352/om1352_002_BM+A.tex
    ./nativeXenon/model/chara/om/om1352/om1352_008_BM+A.tex
    ./nativeXenon/model/chara/om/om1352/om1352_003_BM+A.tex
    ./nativeXenon/model/chara/om/om1352/om1352_004_BM+A.tex
    ./nativeXenon/model/chara/np/np1350/np1350_hair_NM+A.tex
    ./nativeXenon/model/chara/np/np1350/np1350_01_BM+A.tex
    ./nativeXenon/model/chara/np/np1350/np1350_00_BM+A.tex
    ./nativeXenon/model/chara/np/np1350/np1350_face_BM+A.tex
    ./nativeXenon/model/chara/np/np1050/np1050_d_skin_BM+A.tex
    ./nativeXenon/model/chara/np/np1050/np1050_d_face_BM+A.tex
    ./nativeXenon/game/scene/21/21_01/21_01_main_Sendou+EMKill.fsm

    Long story short.. The xex-files doesn't seem legit.. what ever they are, they aren't xex files.. at least from what i can tell..

    All included xex-files have a header like this:
    $ hexdump -C bhrev-xenon-demo.xex |head -100
    00000000 41 52 43 00 07 00 2d 00 73 6f 75 6e 64 5c 73 65 |ARC...-.sound\se|
    00000010 5c 73 63 65 6e 65 5c 30 31 5f 43 75 74 5c 53 68 |\scene\01_Cut\Sh|
    00000020 69 70 5f 30 66 5c 77 61 76 5c 53 68 69 70 5f 43 |ip_0f\wav\Ship_C|
    00000030 72 65 61 6b 31 00 00 00 00 00 00 00 00 00 00 00 |reak1...........|
    00000040 00 00 00 00 00 00 00 00 79 f8 4d 72 55 b2 00 00 |........y.MrU...|
    00000050 2a 6a 01 40 00 80 00 00 73 6f 75 6e 64 5c 73 65 |*j.@....sound\se|
    00000060 5c 73 63 65 6e 65 5c 30 31 5f 43 75 74 5c 53 68 |\scene\01_Cut\Sh|
    00000070 69 70 5f 30 66 5c 77 61 76 5c 53 68 69 70 5f 43 |ip_0f\wav\Ship_C|
    00000080 72 65 61 6b 32 00 00 00 00 00 00 00 00 00 00 00 |reak2...........|
    00000090 00 00 00 00 00 00 00 00 79 f8 4d 72 30 a5 00 00 |........y.Mr0...|
    000000a0 be 0d 01 40 55 32 01 00 73 6f 75 6e 64 5c 73 65 |...@U2..sound\se|
    000000b0 5c 73 63 65 6e 65 5c 30 31 5f 43 75 74 5c 53 68 |\scene\01_Cut\Sh|
    000000c0 69 70 5f 30 66 5c 77 61 76 5c 46 69 72 65 31 00 |ip_0f\wav\Fire1.|
    000000d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    000000e0 00 00 00 00 00 00 00 00 79 f8 4d 72 76 53 01 00 |........y.MrvS..|
    000000f0 54 86 01 40 85 d7 01 00 73 6f 75 6e 64 5c 73 65 |T..@....sound\se|
    00000100 5c 73 63 65 6e 65 5c 30 31 5f 43 75 74 5c 53 68 |\scene\01_Cut\Sh|
    00000110 69 70 5f 30 66 5c 77 61 76 5c 61 72 63 5f 4c 5f |ip_0f\wav\arc_L_|
    00000120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    00000130 00 00 00 00 00 00 00 00 79 f8 4d 72 c8 3b 00 00 |........y.Mr.;..|
    00000140 de 6b 00 40 fb 2a 03 00 73 6f 75 6e 64 5c 73 65 |.k.@.*..sound\se|
    00000150 5c 73 63 65 6e 65 5c 30 31 5f 43 75 74 5c 53 68 |\scene\01_Cut\Sh|
    00000160 69 70 5f 30 66 5c 77 61 76 5c 61 72 63 32 5f 4c |ip_0f\wav\arc2_L|
    00000170 5f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |_...............|
    00000180 00 00 00 00 00 00 00 00 79 f8 4d 72 2d 2a 00 00 |........y.Mr-*..|
    00000190 74 35 00 40 c3 66 03 00 73 6f 75 6e 64 5c 73 65 |t5.@.f..sound\se|
    000001a0 5c 73 63 65 6e 65 5c 30 31 5f 43 75 74 5c 53 68 |\scene\01_Cut\Sh|
    000001b0 69 70 5f 30 66 5c 77 61 76 5c 61 72 63 33 00 00 |ip_0f\wav\arc3..|
    000001c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    000001d0 00 00 00 00 00 00 00 00 79 f8 4d 72 1e 3e 00 00 |........y.Mr.>..|
    000001e0 14 54 00 40 f0 90 03 00 73 6f 75 6e 64 5c 73 65 |.T.@....sound\se|
    000001f0 5c 73 63 65 6e 65 5c 30 31 5f 43 75 74 5c 53 68 |\scene\01_Cut\Sh|
    00000200 69 70 5f 30 66 5c 77 61 76 5c 70 6f 6f 00 00 00 |ip_0f\wav\poo...|
    00000210 79 f8 4d 72 c8 3b 00 00 de 6b 00 40 fb 2a 03 00 |y.Mr.;...k.@.*..|
    00000220 73 6f 75 6e 64 5c 73 65 5c 73 63 65 6e 65 5c 30 |sound\se\scene\0|
    00000230 31 5f 43 75 74 5c 53 68 69 70 5f 30 66 5c 77 61 |1_Cut\Ship_0f\wa|
    00000240 76 5c 61 72 63 32 5f 4c 5f 00 00 00 00 00 00 00 |v\arc2_L_.......|
    00000250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    00000260 79 f8 4d 72 2d 2a 00 00 74 35 00 40 c3 66 03 00 |y.Mr-*..t5.@.f..|
    00000270 73 6f 75 6e 64 5c 73 65 5c 73 63 65 6e 65 5c 30 |sound\se\scene\0|
    00000280 31 5f 43 75 74 5c 53 68 69 70 5f 30 66 5c 77 61 |1_Cut\Ship_0f\wa|
    00000290 76 5c 61 72 63 33 00 00 00 00 00 00 00 00 00 00 |v\arc3..........|
    000002a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    000002b0 79 f8 4d 72 1e 3e 00 00 14 54 00 40 f0 90 03 00 |y.Mr.>...T.@....|
    000002c0 73 6f 75 6e 64 5c 73 65 5c 73 63 65 6e 65 5c 30 |sound\se\scene\0|
    000002d0 31 5f 43 75 74 5c 53 68 69 70 5f 30 66 5c 77 61 |1_Cut\Ship_0f\wa|
    000002e0 76 5c 70 6f 6f 00 00 00 79 f8 4d 72 c8 3b 00 00 |v\poo...y.Mr.;..|
    000002f0 de 6b 00 40 fb 2a 03 00 73 6f 75 6e 64 5c 73 65 |.k.@.*..sound\se|
    00000300 5c 73 63 65 6e 65 5c 30 31 5f 43 75 74 5c 53 68 |\scene\01_Cut\Sh|
    00000310 69 70 5f 30 66 5c 77 61 76 5c 61 72 63 32 5f 4c |ip_0f\wav\arc2_L|
    00000320 5f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |_...............|
    00000330 00 00 00 00 00 00 00 00 79 f8 4d 72 2d 2a 00 00 |........y.Mr-*..|
    00000340 74 35 00 40 c3 66 03 00 73 6f 75 6e 64 5c 73 65 |t5.@.f..sound\se|
    00000350 5c 73 63 65 6e 65 5c 30 31 5f 43 75 74 5c 53 68 |\scene\01_Cut\Sh|
    00000360 69 70 5f 30 66 5c 77 61 76 5c 61 72 63 33 00 00 |ip_0f\wav\arc3..|
    00000370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    00000380 00 00 00 00 00 00 00 00 79 f8 4d 72 1e 3e 00 00 |........y.Mr.>..|
    00000390 14 54 00 40 f0 90 03 00 73 6f 75 6e 64 5c 73 65 |.T.@....sound\se|
    000003a0 5c 73 63 65 6e 65 5c 30 31 5f 43 75 74 5c 53 68 |\scene\01_Cut\Sh|
    000003b0 69 70 5f 30 66 5c 77 61 76 5c 70 6f 6f 00 00 00 |ip_0f\wav\poo...|
    000003c0 79 f8 4d 72 c8 3b 00 00 de 6b 00 40 fb 2a 03 00 |y.Mr.;...k.@.*..|
    000003d0 73 6f 75 6e 64 5c 73 65 5c 73 63 65 6e 65 5c 30 |sound\se\scene\0|
    000003e0 31 5f 43 75 74 5c 53 68 69 70 5f 30 66 5c 77 61 |1_Cut\Ship_0f\wa|
    000003f0 76 5c 61 72 63 32 5f 4c 5f 00 00 00 00 00 00 00 |v\arc2_L_.......|
    00000400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    00000410 79 f8 4d 72 2d 2a 00 00 74 35 00 40 c3 66 03 00 |y.Mr-*..t5.@.f..|
    00000420 73 6f 75 6e 64 5c 73 65 5c 73 63 65 6e 65 5c 30 |sound\se\scene\0|
    00000430 31 5f 43 75 74 5c 53 68 69 70 5f 30 66 5c 77 61 |1_Cut\Ship_0f\wa|
    00000440 76 5c 61 72 63 33 00 00 00 00 00 00 00 00 00 00 |v\arc3..........|
    00000450 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    00000460 79 f8 4d 72 1e 3e 00 00 14 54 00 40 f0 90 03 00 |y.Mr.>...T.@....|
    00000470 73 6f 75 6e 64 5c 73 65 5c 73 63 65 6e 65 5c 30 |sound\se\scene\0|
    00000480 31 5f 43 75 74 5c 53 68 69 70 5f 30 66 5c 77 61 |1_Cut\Ship_0f\wa|
    00000490 76 5c 70 6f 6f 00 00 00 79 f8 4d 72 c8 3b 00 00 |v\poo...y.Mr.;..|
    000004a0 de 6b 00 40 fb 2a 03 00 73 6f 75 6e 64 5c 73 65 |.k.@.*..sound\se|
    000004b0 5c 73 63 65 6e 65 5c 30 31 5f 43 75 74 5c 53 68 |\scene\01_Cut\Sh|
    000004c0 69 70 5f 30 66 5c 77 61 76 5c 61 72 63 32 5f 4c |ip_0f\wav\arc2_L|
    000004d0 5f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |_...............|
    000004e0 00 00 00 00 00 00 00 00 79 f8 4d 72 2d 2a 00 00 |........y.Mr-*..|
    000004f0 74 35 00 40 c3 66 03 00 73 6f 75 6e 64 5c 73 65 |t5.@.f..sound\se|
    00000500 5c 73 63 65 6e 65 5c 30 31 5f 43 75 74 5c 53 68 |\scene\01_Cut\Sh|
    00000510 69 70 5f 30 66 5c 77 61 76 5c 61 72 63 33 00 00 |ip_0f\wav\arc3..|
    00000520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    00000530 00 00 00 00 00 00 00 00 79 f8 4d 72 1e 3e 00 00 |........y.Mr.>..|
    00000540 14 54 00 40 f0 90 03 00 73 6f 75 6e 64 5c 73 65 |.T.@....sound\se|
    00000550 5c 73 63 65 6e 65 5c 30 31 5f 43 75 74 5c 53 68 |\scene\01_Cut\Sh|
    00000560 69 70 5f 30 66 5c 77 61 76 5c 70 6f 6f 00 00 00 |ip_0f\wav\poo...|
    00000570 79 f8 4d 72 c8 3b 00 00 de 6b 00 40 fb 2a 03 00 |y.Mr.;...k.@.*..|
    00000580 73 6f 75 6e 64 5c 73 65 5c 73 63 65 6e 65 5c 30 |sound\se\scene\0|
    00000590 31 5f 43 75 74 5c 53 68 69 70 5f 30 66 5c 77 61 |1_Cut\Ship_0f\wa|
    000005a0 76 5c 61 72 63 32 5f 4c 5f 00 00 00 00 00 00 00 |v\arc2_L_.......|
    000005b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    000005c0 79 f8 4d 72 2d 2a 00 00 74 35 00 40 c3 66 03 00 |y.Mr-*..t5.@.f..|
    000005d0 73 6f 75 6e 64 5c 73 65 5c 73 63 65 6e 65 5c 30 |sound\se\scene\0|
    000005e0 31 5f 43 75 74 5c 53 68 69 70 5f 30 66 5c 77 61 |1_Cut\Ship_0f\wa|
    000005f0 76 5c 61 72 63 33 00 00 00 00 00 00 00 00 00 00 |v\arc3..........|
    00000600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    00000610 79 f8 4d 72 1e 3e 00 00 14 54 00 40 f0 90 03 00 |y.Mr.>...T.@....|
    00000620 73 6f 75 6e 64 5c 73 65 5c 73 63 65 6e 65 5c 30 |sound\se\scene\0|
    00000630 31 5f 43 75 74 5c 53 68 69 70 5f 30 66 5c 77 61 |1_Cut\Ship_0f\wa|

    I can't even find out what the file signature "ARC"/"41 52 43" is right now.. well it looks like some kind of archive, tho.. I only know it should be "XEX2"... :(

    The wmv-files in this built play just fine on my notebook, so i'm pretty sure the decryption worked fine..

    Anyways: Here are the extracted "xex"-files & some non-retail files, i'll upload the rest later/tomorrow:
    Code:
    https://mega.nz/#!uLJkhSiC!zzCRX21zl-uY578-5Yz1S6zz9o65iSA92PC2ity5EL0
    

    Btw.: here are some more links i found while analyzing this stuff:
    https://github.com/hannob/zipeinfo <-- Info about applied ZIP-Encryption
    http://www.securiteam.com/tools/5NP0C009PU.html <-- Would've tried that, if OP didn't already provide the encryption keys
     
    Traace, james2452 and Bazatree like this.
  11. james2452

    james2452 X360

    Joined:
    Jan 8, 2014
    Messages:
    530
    Likes Received:
    708
    I would like to know what old version of winzip he used. If i delete files out of the zip to make it smaller ,my version of winzip is newer and converts it to my version. Then its even harder to crack....
    Edit: This weekend fingers crossed we will have it. Had a idea. ;)
     
    Last edited: Aug 13, 2018
    XboxTestKit and Shadha like this.
  12. luke9511

    luke9511 Active Member

    Joined:
    Feb 22, 2015
    Messages:
    28
    Likes Received:
    2
    it is a linux os that is for hacking and cracking passwords, wifi etc etc
     
  13. nold

    nold Active Member

    Joined:
    Nov 19, 2017
    Messages:
    40
    Likes Received:
    34
    Here is the full archive:
    Code:
    https://mega.nz/#!6C5R2KyJ!rujdp6X4ypfDA4liZeEUv-hufOG0MlR8-kzj05Y_rAw
     
  14. PixelButts

    PixelButts Site Soldier

    Joined:
    Aug 19, 2014
    Messages:
    2,734
    Likes Received:
    2,025
    At last 5 months later
     
  15. nold

    nold Active Member

    Joined:
    Nov 19, 2017
    Messages:
    40
    Likes Received:
    34
    yea, but as said:
     
  16. PixelButts

    PixelButts Site Soldier

    Joined:
    Aug 19, 2014
    Messages:
    2,734
    Likes Received:
    2,025
    Is it possible theyre unsigned binaries
     
  17. Stipo360

    Stipo360 Dead Rising & XDKs

    Joined:
    Feb 11, 2014
    Messages:
    1,114
    Likes Received:
    483
    The "xex" files are fucking .ARC files from the game that he renamed into XEX files LOL. ARC/CRA is a Capcom archive file for all MT Framework games.

    @PixelButts literally opened it and got a ZLIB :p
     
    nold and Traace like this.
  18. Traace

    Traace Rapidly Rising Member

    Joined:
    Nov 22, 2016
    Messages:
    92
    Likes Received:
    73
    Well, atleast now we know why that guy on OG didn't provide passwords ^^

    Is Capcoms ARC/CRA same as PSARC ? PSARC can choose between zlib and lzma :)
     
  19. PixelButts

    PixelButts Site Soldier

    Joined:
    Aug 19, 2014
    Messages:
    2,734
    Likes Received:
    2,025
    their arc format is changed every so often. PSARC is the same idea but instead they were trying to push it a 1 big file instead of multiple archives. Theyre the same in application/usage but theyre different in how widely used they are.
     
    Traace likes this.
  20. pato

    pato Resolute Member

    Joined:
    Jan 3, 2010
    Messages:
    932
    Likes Received:
    119
    Judging by some names, it appears to be RE Revelations?
     

Share This Page