This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=4243

Siberian GRemlin, posted Fri May 26, 2017 5:28 am (23532)

---

Good Day.

Looks game uses some kind of cycled XOR encription for archives header. I found some regularity and tryed to rebuild xor sequence, but no luck with bytes different from zero.

Code:

  xo1:=$d9;
  for k:=0 to $FF do begin
    cryp[k]:=xo1;
    if k mod 2=1 then xo1:=xo1-1;
    if k mod 8=0 then xo1:=xo1 $B;
    if k mod 8=2 then xo1:=xo1 $3;
    if k mod 8=4 then xo1:=xo1-$5;
    if k mod 8=6 then xo1:=xo1 $3;
    if k mod 16=7 then begin
      if ((k shr 4) mod 4)=0 then xo1:=xo1-$30-$10;
      if ((k shr 4) mod 4)=2 then xo1:=xo1 $50-$10;
    end;
  end;

Can anybody help with decryption? Free Demo available on Steam http://store.steampowered.com/app/619760/

Seems first value in header is file count, after that goes 0x30 bytes blocks for each file, that contained padded filename, offset and size.

Raw archive.


False decrypted header.

Gano, posted Sun May 28, 2017 9:13 pm (23592)

---

Maybe the following help:
https://github.com/shlainn/game-file-fo ... .FIL-files

and: https://github.com/jimmypw/constructor-fil

aluigi, posted Sun May 28, 2017 11:24 pm (23596)

---

Yes, useful information but it's an old format (*.fil) and a slightly different encryption (cn.ini).
Script:
http://aluigi.org/bms/constructor.bms

Please let me know if there is any problem with any FIL archive because I had to "guess" if the archive uses the old or new format.

Gano, posted Mon May 29, 2017 9:27 am (23605)

---

FIL archives and cn.ini work without any problems. (Tested with my purchased game)
The TEXT.* files are not decrypted at least not as plain text.

aluigi, posted Mon May 29, 2017 11:22 am (23607)

---

Can you upload a couple of these TEXT files?
There are no *.TEXT in the demo

Gano, posted Mon May 29, 2017 12:40 pm (23614)

---

Sure. Here you go

Gano, posted Tue May 30, 2017 3:11 pm (23643)

---

Any news ?

aluigi, posted Tue May 30, 2017 4:17 pm (23649)

---

I did just a "one minute" quick check by using the original obfuscation algorithm with different constants but no luck.
I have only updated the script to catch the "TEXT.*" files because the original script checked the "*.TEXT", anyway these files are NOT supported at the moment.

odinboss, posted Mon Dec 17, 2018 8:37 am (41462)

---

Hi! I have a file ".fil". That I would like to unzip and recompress the files it contains(or is that I suppose).It contains files ".dat", ".bin", ".tiz" and others. It is a file from the year 1999. Is there any possibility of extracting the files?

Quote:

Quote:

http://www.mediafire.com/file/3681d0pmgcwg0c9/LUNADATA.FIL/file

aluigi, posted Sat Jan 05, 2019 11:12 am (41961)

---

@odinboss
You are off-topic here because your files are from another game:
https://github.com/studio-lucia/lunarda ... ATA.FIL.md