ZenHAX

Free Game Research Forum | Official QuickBMS support | twitter @zenhax | SSL HTTPS://zenhax.com
It is currently Thu Jun 24, 2021 5:51 pm

All times are UTC




Post new topic  Reply to topic  [ 2 posts ] 
Author Message
PostPosted: Fri Jun 04, 2021 4:42 pm 

Joined: Fri Jun 04, 2021 4:29 pm
Posts: 1
In the Lost Kingdom update, Devsisters encrypted the files in a completely different way, and now I saw someone that has managed to decrypt the files.
I'm absolutely DESPERATE to know how to decrypt them.
Image
But one thing I know is that they are encrypted with XOR and I have no idea how to do that.
Here is the link for 6 of the encrypted files.

https://drive.google.com/drive/folders/ ... sp=sharing

(The game is made with unity, by the way.)
If anyone can decrypt the files, I would be really happy.


Top
   
PostPosted: Tue Jun 22, 2021 10:08 pm 

Joined: Mon Jun 07, 2021 8:20 pm
Posts: 12
Tried to guess a key from file 0A3529EEFA7B1FCFCBB391F02D2EA5312879B83D. Thats seems like the best patient with more zeros.
Result probably incorrect. It's my first touch to obfuscation.

Code:
Set MEMORY_FILE binary "\x0A\x18\x08\xF7\xD4\xE5\xE3\x07\x10\xD4\xC1\x8A\xE6\x04\x18\x01\x20\x28\x28\xBE\xB8\xED\xA0\x04\x30\xF4\x03"

# Work only with file 0A3529EEFA7B1FCFCBB391F02D2EA5312879B83D
Open FDSE "0A3529EEFA7B1FCFCBB391F02D2EA5312879B83D" 0

Get fileSize asize 0
Get fileName basename 0
String fileName + ".dat"

Log MEMORY_FILE2 0 0

XMath numBlocks "fileSize / 184"

# Block size is 184 bytes
# Key assign seven times, moreover all 27 bytes of key used in the first and penultimate time.
For J = 0 < numBlocks
   CallFunction SetXOR 1 27 #Num bytes of a key
   CallFunction SetXOR 1 26
   CallFunction SetXOR 1 26
   CallFunction SetXOR 1 26
   CallFunction SetXOR 1 26
   CallFunction SetXOR 1 27
   CallFunction SetXOR 1 26
Next J

Log fileName 0 fileSize MEMORY_FILE2

StartFunction SetXOR
   GoTo 0 MEMORY_FILE
   For I = 0 < SetXOR_ARG1
      Get xorChar byte MEMORY_FILE
      Savepos offset 0
      Get char byte 0
      Math char ^ xorChar
      
      PutVarChr MEMORY_FILE2 offset char byte
   Next I
   
EndFunction


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 2 posts ] 

All times are UTC


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited