Splinter Cell Conviction

[Gildor]

I have reversed UMD file format. Facts:

• it is really uses simple encryption - it uses single XOR for all bytes in the file
• it is not an archive, UMD is a recorded file system access
  
• UMD contains only those parts of files which are read when loading some level

Benefits of such system:

• seek-free level loading, mostly for loading from the CD/DVD media (much faster than loading from the original game packages)
• UDM file contains only required file parts, all unused resources are not included into the file
  
  Recovering data from such files is very complex task, but probably I will try to do it later. This should be done in a few steps:
  1) decompress UMD files
  2) produce unreal packages from the decompressed UMD files
  3) process packages to find holes in data (resources which are not included into the game) and patch export table to hide them (to prevent umodel from crash)
  4) use umodel on the resulting packages

[Gildor]

That makes sense. They probably just stripped out the data from the packages after the fact once they figured out what data is not used at runtime?

No. UMD consists of parts of the files in pseudo-random order.

Did you find the encryption key in the .exe?

No. But I've found it in the 1st try.

Would it be possible for you to send me the method (or compiled version of your tool) that unencrypted the UMD data files?

It is not possible to post method - file format is too complex.

I would like to anaylze them. The game appears to have the ability to run with original data support - non umod)
I would like to see this game become mod-able.

Game engine supports UMD transparently. Higher level systems are even know nothing about UMD. It works with resources exactly in the same way as with packages.

[Gildor]

Can I have your updated tool that un-encrypts so that I can investigate the file format myself?

later

Can you provide me with what the encryption key is? Is it "Conviction"??  

No. It is hex B7 All bytes in the file were xor-ed with the same key.

[iservealot]

Information update.
I have finished reversing umd/ass format. It looks like .ass contains textures (similar to .tfc files). This file has no headers inside - only pure data.

I wonder how the game knows what texture is where without header/name table? Or are you just referring to no Áƒ*žd.Z. ?
Also, the .umd contained the .unr map file as well?

Can I have your updated tool that un-encrypts so that I can investigate the file format myself?

later

Can you provide me with what the encryption key is? Is it "Conviction"?? 

No. It is hex B7 All bytes in the file were xor-ed with the same key.

?? I am confused... the key was not B7? ...?
I am itching to get to see the archive format after decompression/ un-encrypted 

[Gildor]

There is no updates yet. I've been busy with my job.

[Gildor]

I have no time for tasks of such complexity

[Lenners]

I probably didn't make it clear what I was trying to do, Im not so much getting the 3D models, but the raw textures in DDS? to make higher resolution. I heard that there were some config files encrypted that changed the behaviour of the game and the AI and that I would love to do.

Thanks again.