This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=8729

nnvt, posted Sat Oct 13, 2018 9:34 am (39480)

---

Hi there!

I'm trying to decode/decrypt the following savefile: https://drive.google.com/file/d/14MycmmP8Hkf_xRwJ58dvZjU61RVxZxjA/view?usp=sharing

At the top there seems to be some sort of key (look similar to the key for the main pak): 53729557affce487c97c5b98c585800d032b9337bb8c00d09ae7f79169552dae

I can't seem to decrypt the file with this key though. I know some parts are not encrypted so I looped over the file in c# and skipped a byte every time to try and find the starting point of the encrypted part but I didn't find anything.

Can anyone help me figure this out?

Thanks!

aluigi, posted Sat Oct 13, 2018 10:19 am (39484)

---

The data at offset 0x59 is compressed, offzip -a can do the extraction automatically.

nnvt, posted Sat Oct 13, 2018 10:59 am (39488)

---

aluigi wrote:

The data at offset 0x59 is compressed, offzip -a can do the extraction automatically.

OK Thanks, I managed to extract the file and reimport the modified bit. The game can't use the new file though, it just generates a new one.

EDIT: the "key" at the top also changes every time the game modifies the file, seems to be some sort of signature.

EDIT 2: it seems to be a SHA256 hash but I can't seem to find where it came from. (Generating a hash of the files never returns the same hash)