This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=5038

MurraySkull, posted Sun Oct 01, 2017 11:11 pm (26981)

---

https://www.mediafire.com/file/wsw8kwau ... BGM.zip
These appear to be encrypted .ogg files.

aluigi, posted Sun Oct 08, 2017 10:17 pm (27167)

---

It can be anything from a fixed key xor starting with the bytes 0x8a 0xec 0xb3 0xa2 to a xor with incremental pseudo number generator.
You can verify the first idea by searching those 4 bytes in the executable of the game.
I don't know why there is a 32bit size value at the beginning at the file and what are all those bytes after at the end of the file

Mikeee, posted Mon Oct 09, 2017 5:52 pm (27201)

---

aluigi wrote:

It can be anything from a fixed key xor starting with the bytes 0x8a 0xec 0xb3 0xa2 to a xor with incremental pseudo number generator.
You can verify the first idea by searching those 4 bytes in the executable of the game.
I don't know why there is a 32bit size value at the beginning at the file and what are all those bytes after at the end of the file

They seem to be encrypted with AES keys. There's functions like DeALSetting$$get_OggEncryptionAesKey and AssetBundleSetting$$get_SimpleEncryptionKey, as for where to find these keys, I still don't know.

MurraySkull, posted Tue Oct 10, 2017 7:01 am (27208)

---

Well, I am convinced that the secret lies in libDeALWrapper.so, you can see the disassembly here: https://www.mediafire.com/file/40wrvvcq ... per.so.txt

MurraySkull, posted Sun Nov 05, 2017 5:49 am (29752)

---

Any updates?

MurraySkull, posted Sat Nov 18, 2017 7:43 am (30110)

---

Nothing?

aluigi, posted Sat Nov 18, 2017 7:51 pm (30118)

---

I think it's better to stop bumping.
Clearly nobody is working on this.

MurraySkull, posted Fri Dec 29, 2017 12:13 pm (31106)

---

Anyone working on this?

MurraySkull, posted Mon Feb 19, 2018 11:10 am (32603)

---

Anyone?