Victim
Here extracted and decrypted java class files from executable. Some general parts decompiled.
Maybe some one who understand JAVA programming language make packer / unpacker for KAR archives
Please register or login to download attachments.
Last edited by h4x0r; 2012-08-14 at 07:20 AM.
I be able to compile tool, but can't check, need password. Kar files crypted with key maked from password.
Code:CryptKey(String key) // key = password { long hash = 0L; for (int i = 0; i < key.length(); i++) { hash = 31L * hash + key.charAt(i); } setSeed(hash); }
lol wanted to see this since it wasn't posted on xentax directly but I guess I have to wait until my account's out of lurker mode
I develop noesis plugins using the Sanae3D interface I wrote. If a plugin says Sanae3D is missing, just download it and put it in your plugins folder. Since signatures do not allow URL tags you can visit my profile to get the link to my website which contains a link to the Sanae3D package.
But I'm usually on xentax.
Updated source's. Try pwd
Code:dhfuhsudfh98vhdsovnfdhiouer8u8hgjbkjciudsuifsjdiosajfn
Last edited by h4x0r; 2012-08-14 at 07:21 AM.
Are you sure it's source of current kar format?
I founded some differences in header. Here is right:
One more interesting thing:void readExternal(DataInput in)
throws IOException, ClassNotFoundException
{
in.readByte(); // not known, not present in default
if(in.readBoolean())
password = in.readUTF();
timestamp = in.readLong();
in.readByte(); // not known, not present in default
String deflatet = in.readUTF(); // was byte
deflate = Integer.parseInt(deflatet.substring(deflatet.index Of("=") + 1, deflatet.length() - 1)) <= 0 ? false : true;
password digest stored in kar(password = in.readUTF() has 29 symbols "8612427997cc3b484346c73f11bba", but must be 32, coz it's md5.
Password do not match if nothing changed, password need to decrypt files. For headers is no need.
Some files from image.kar:
/arena/cg_loadingstg1_poyeen05.png
/arena/cg_room1img_a00_01.png
/mate/cg_mate2_B_angry.png
/arena/cg_loadingstg1_black02.png
/arena/cg_loadingstg1_event004.png
/other/ic_planet_flowy.png
/loading/loading_001.png
Java classes from latest version client.
No ideas
btw: This game used too KAR
Last edited by h4x0r; 2012-08-14 at 03:38 PM.
Here you are version can list files and extract one of files.
If we will found password or what's wrong i rewrite it.
Please register or login to download attachments.
Good. I check it later
Last edited by h4x0r; 2012-08-14 at 05:28 PM.
Haha, there are two KarSource files, one of them only to confuse us.
For example right entry structure:
void readExternal(DataInput in) throws IOException, ClassNotFoundException
{
in.readShort();
password = in.readUTF();
timestamp = in.readLong();
int b = in.readByte();
if (b > 0) {
String ext = in.readUTF();
int i = ext.indexOf("deflate=");
if (i >= 0) {
String ls = ext.substring(i);
i = ls.indexOf(",");
if (i >= 0) {
ls = ls.substring("deflate=".length(), i);
deflevel = Integer.parseInt(ls);
}
deflater = new Deflater(deflevel);
}
}
Rewrite unpacker