Dragon Fin Soup .dfs archive

[tombmonkey]

This game just came out on steam, as you can see it has pretty beautiful painted backgrounds and portraits, plus nicely animated prerendered sprites.

It's archive is simply a renamed passworded .zip, I tried looking at the exe in a dissasembler for the password, foolish me thought I would get lucky and few searchs would turn up a password in plaintext, but no luck, truth be told I don't even know what I should be looking for in the dissasembler.

Just wanted to bring some attention to this game, since I know there are quite a few people skilled at computer forensics around here.

[puggsoy]

Wow. This is giving me some Bastion vibes, amazing art.

You can give this a shot, I'd try it myself but unfortunately I don't own the game. Good luck, I'd really love to see these graphics ripped.

[tombmonkey]

No luck, saddly, unless I did something wrong. Gonna guess the password is in a .dll or something.

Code:

F:\Games\quickbms>quickbms zip_pwd_scanner.bms "F:\Games\Dragon Fin Soup\resourc
es.dfs"

QuickBMS generic files extractor and reimporter 0.6.7a
by Luigi Auriemma
e-mail: me@aluigi.org
web:    aluigi.org
       (Sep 14 2015 - 21:30:55)

                 http://quickbms.aluigi.org
              http://twitter.com/luigi_auriemma
                      http://zenhax.com

- open input file F:\Games\Dragon Fin Soup\resources.dfs
- open script zip_pwd_scanner.bms
- set output folder .

 offset   filesize   filename
--------------------------------------
- enter in folder F:\Games\Dragon Fin Soup
- open input file F:\Games\Dragon Fin Soup\passwords_list.txt
- SCRIPT's MESSAGE:
 the error "incomplete input file number 1" means that no password was found

- SCRIPT's MESSAGE:
 FILE: animations/

- SCRIPT's MESSAGE:
 FILE: animations/actortrapspike.plist

- SCRIPT's MESSAGE:
 scanning in progress, please wait patiently...


- 0 files found in 0 seconds
 coverage file 0     0%   439        1280807720
 coverage file 1   100%   219785     219785
 coverage file -1    0%   0          325
 coverage file -2  909600%   3065352    337

F:\Games\quickbms>

Gonna try following the debugger tutorial, wish me luck

EDIT: Only got 3 signatures, one being anti-debug, not sure but I think this means the .exe is protected, maybe this is why the password didn't turn up in the previous try?

Code:

F:\Games\quickbms\ZipTools>signsrch -P DragonFinSoup.exe

Signsrch 0.2.3
by Luigi Auriemma
e-mail: aluigi@autistici.org
web:    aluigi.org
 optimized search function by Andrew http://www.team5150.com/~andrew/
 disassembler engine by Oleh Yuschuk

- 01060000 00c7b000 F:\Games\Dragon Fin Soup\DragonFinSoup.exe
- pid 8108
- base address 0x01060000
- offset 01060000 size 00c7b000
- 13086720 bytes allocated
- load signatures
- open file F:\Games\quickbms\ZipTools\signsrch.sig
- 3069 signatures in the database
- WARNING:
 the file loaded in memory is very big so the scanning may take many time
- start 12 threads
- start signatures scanning:

 offset   num  description [bits.endian.size]
 --------------------------------------------
 010d6d99 3048 DMC compression [32.le.16&]
 0146cd8e 2545 anti-debug: IsDebuggerPresent [..17]
 01c78813 1297 TEA encryption/decryption (0xc6ef3720  0x61c88647) [32.le.8&]

- 3 signatures found in the file in 28 seconds
- done

F:\Games\quickbms\ZipTools>

If anyone smarter than me manages to dig out the password or unpack the files somehow I'm willing to help in the sorting, arranging, uploading proccess.

[Drakan]

Hi! the password you are looking for:

File: Dragon Fin Soup\resources.dfs
Password: ESVWPEd$P3P$@+PVL$$x@

[tombmonkey]

Haha wow awesome, thanks a lot.


Randis is king.

Now to sort some of this stuff.

Gonna try to make a little program to read the .plist file and give me individual images to make contact sheets with, I say try because I'm no programmer and parsing a simple text file is a challenge for me

If someone wants to give me a hand with that, here's a sample file of the man himself Randis Albion:
http://www.mediafire.com/download/o3actd...randis.zip

[tombmonkey]

Can someone help me make sense of the plist file?

It's a texture packer file, I wrote a little program to clean up the binary plist file and output an easier to parse txt file and already have the framework to export individual frames.

However, I'm having trouble rebuilding the images.



As you can see, the third frame jumps quite a bit.

I arranged the images the way it's specified here:


Here is the plist data that corresponds to that animation:

Code:

TILB
õó…
frames

robin_attack_front2_0001.png
frame
298,2,134,256
offset
3,0
rotated
0
sourceColorRect
84,22,134,256
sourceSize
296,300

robin_attack_front2_0002.png
frame
2,562,220,274
offset
-34,9
rotated
0
sourceColorRect
4,4,220,274
sourceSize
296,300

robin_attack_front2_0003.png
frame
2,2,280,294
offset
-5,-1
rotated
1
sourceColorRect
3,4,280,294
sourceSize
296,300

robin_attack_front2_0004.png
frame
2,284,290,276
offset
1,-10
rotated
0
sourceColorRect
4,22,290,276
sourceSize
296,300
metadata
format
2
realTextureFileName
robin_attack_front2.png
size
512,1024
smartupdate<
$TexturePacker:SmartUpdate:90ef147479a05a4d1a8aec7c27331458$
textureFileName
robin_attack_front2.png

And here's the source image:


I'm not using offset, I don't know how offset is meant to work, since simply adding those values throw the sprites even more out of position in relation to each other.

I don't see any value that could help me push down the third frame to it's position.

Any help appreciated.

EDIT: I tested a bunch of other animations and it seems like only a few have problems, most came out perfect using the values fromsoruceColorRect, I guess I can simply manually fix the ones that come out bad.

Any recommendation on what to use to make contact sheets?

This should push me back to the top 50 uploaders on TSR XD

[puggsoy]

This might help you make more sense of the values. I'd give this a shot myself but you seem to have already got most of it down. Not sure what's up with those black bits by the corners though...?

[tombmonkey]

Fixed

Fixed my program with loads of help, was having transparency issues.

Expect sheets soonish.