This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=630

hackspeedok, posted Mon Feb 16, 2015 8:33 am (3204)

---

Please help me decrypt somes txt,ini and dlg file. Thanks aluigi
https://mega.co.nz/#!plERzT4L!osVmy2wjH ... xP4WpPfDjY

aluigi, posted Mon Feb 16, 2015 8:55 am (3208)

---

Unfortunately the comtype scanner didn't find the compression algorithm.

hackspeedok, posted Mon Feb 16, 2015 9:19 am (3210)

---

thanks

hackspeedok, posted Mon Feb 16, 2015 9:52 am (3211)

---

Can you help me with this file ?
https://mega.co.nz/#!049RzLQC!znSkpNopz ... bGMugTVEK0

aluigi, posted Mon Feb 16, 2015 10:46 am (3212)

---

One thing that I noticed is an obfuscation that performs a XOR with the bytes of this key 05 BF ED 6F 75 3D 9A B1 E3 56 87, but it's not related to the compression.

aluigi, posted Mon Feb 16, 2015 10:36 pm (3220)

---

Ok it's a simple xor with the byte 0x78.
If you need a script:

Code:

get TMP byte
if TMP == 0x80
    savepos OFFSET
    filexor 0x78
    get SIZE asize
    math SIZE -= OFFSET
    get NAME filename
    log NAME OFFSET SIZE
endif

hackspeedok, posted Tue Feb 17, 2015 4:17 am (3222)

---

aluigi wrote:

Ok it's a simple xor with the byte 0x78.
If you need a script:

Code:

get TMP byte
if TMP == 0x80
    savepos OFFSET
    filexor 0x78
    get SIZE asize
    math SIZE -= OFFSET
    get NAME filename
    log NAME OFFSET SIZE
endif

Sorry aluigi, i dont understand what does it mean
http://i.imgur.com/gN4pih4.png

But when i extracted soe.exe with 7zip, i recreceived some files like this. Can you help me again ?
https://mega.co.nz/#!khlEDDjI!UI4ZZa9yO ... QHtY6NeWyU

aluigi, posted Tue Feb 17, 2015 8:28 am (3223)

---

That file sealofevil.txt doesn't exist.

The script is meant for the obfuscated files like Ini\DialogInfo.ini

Don't use 7-zip on the executable if you have no idea of what you are doing.

hackspeedok, posted Tue Feb 17, 2015 12:01 pm (3234)

---

Soe.exe is english patch. I think ".text" is string file. Can you help me?

aluigi, posted Tue Feb 17, 2015 12:05 pm (3235)

---

https://en.wikipedia.org/wiki/Portable_ ... ble#Layout

hackspeedok, posted Tue Feb 17, 2015 2:02 pm (3239)

---

Thanks and sorry for my bad knowledge