Super Mario Run OGG (Encrypted)

[TonyGamer]

Can you help me to decrypt super mario run ogg files please? In libDeALWrapper.so, i found a lot of aes encryption measure for ogg files and the function is DeALSetting$$get_OggEncryptionAesKey that means the ogg files is aes encrypted so can you help me please?

SMR_Audio_OGG.zip

Edited December 10, 2024 by TonyGamer

[TonyGamer]

Would you please stop bumping here? I’ve been waited from 2024 to 2026, more than a year, there’s something else with the OGG files of Super Mario Run?

[TonyGamer]

Use il2cppdumper, then check dump.cs or DummyDLL Assembly-CSharp.dll for get_OggEncryptionAesKey address, copy the address and paste on Hex view, you need to see aes encryption key as being blue bytes.

[TonyGamer]

Or use Ghidra with ghidra_with_struct.py and il2cpp_ghidra.h (Converted using header_to_ghidra.py), then look at get_OggEncryptionAesKey and check hex view, AES encryption key is blue bytes.