This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=3904

sigroon365, posted Mon Mar 06, 2017 8:20 am (21231)

---

It seems that this file is encrypted.

aluigi, posted Mon Mar 06, 2017 8:45 am (21235)

---

Apparently compressed (32bit size, 32bit zsize, data) but no results from my compressions scanner.

makc_ar, posted Mon Mar 06, 2017 8:52 am (21236)

---

Interested too.

sigroon365, posted Mon Mar 06, 2017 10:44 am (21244)

---

aluigi wrote:

Apparently compressed (32bit size, 32bit zsize, data) but no results from my compressions scanner.

Is it compressed? Well.. apparently 7F BF 08 00 is SIZE from 0x08 to 0x8BF87.
But please take a look at this dumped file. 0x23C814007FBF0800 at 0x00 is same.
But it is decrypted on memory. I don't think it is compressed one.

aluigi, posted Mon Mar 06, 2017 11:22 am (21248)

---

In that case it's encryption and not compression.
False positive

sigroon365, posted Mon Mar 06, 2017 11:33 am (21249)

---

aluigi wrote:

In that case it's encryption and not compression.
False positive

Is there any way to find key?

ys2plus.rar

sigroon365, posted Wed Mar 08, 2017 4:24 pm (21301)

---

I want to learn decryption method but it seems that there'n no guide for decryption.