ZenHAX

Free Game Research Forum | Official QuickBMS support | twitter @zenhax | SSL HTTPS://zenhax.com
It is currently Sat Oct 19, 2019 9:51 pm

All times are UTC




Post new topic  Reply to topic  [ 2 posts ] 
Author Message
PostPosted: Sat Jul 06, 2019 8:57 am 

Joined: Wed Jul 03, 2019 4:50 pm
Posts: 1
I'm looking for help trying to decrypt data files for the game Hogwarts Mystery.
Some of them already come as plain JSON files but most of them can't be read normally

When the list of files is received from the game's server, attached to the filenames and MD5 checksums of the decompiled files (which is also part of the filename) is the following string
"546f6f206561737920736f206661722ed6cda565a46d266534da32a92d23659acae5a4c1fe4731b7f1f7d377517f3bbb"
with the name "cksAESKeys"
I'm sure this string or part of it could be useful to decrypt the files but I'm not sure how.

Included are a few of these encrypted files, any help or advice would be greatly appreciated.


Attachments:
Hogwarts Mystery data files.7z [3.06 MiB]
Downloaded 13 times
Top
   
PostPosted: Sat Jul 06, 2019 3:29 pm 

Joined: Fri Aug 26, 2016 3:11 pm
Posts: 61
merulasnyde wrote:
I'm looking for help trying to decrypt data files for the game Hogwarts Mystery.
Some of them already come as plain JSON files but most of them can't be read normally

When the list of files is received from the game's server, attached to the filenames and MD5 checksums of the decompiled files (which is also part of the filename) is the following string
"546f6f206561737920736f206661722ed6cda565a46d266534da32a92d23659acae5a4c1fe4731b7f1f7d377517f3bbb"
with the name "cksAESKeys"
I'm sure this string or part of it could be useful to decrypt the files but I'm not sure how.

Included are a few of these encrypted files, any help or advice would be greatly appreciated.


I tried decrypting the files a few different ways with that info but wasn't able to get it to work, 546F6F206561737920736F206661722E is "Too easy so far." which could be the Key, I tried using the other bytes as 128 & 256 bit blocks in ECB,CBC,CFB and couldn't get valid data with any of the combinations. I think you'd need to look at the executable to see how it's using the info to decrypt them honestly.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 2 posts ] 

All times are UTC


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited