This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=9077

x_hiro11, posted Tue Dec 18, 2018 3:24 am (41481)

---

The file is encrypted and I want to extract the video. https://drive.google.com/file/d/10XbpuT ... sp=sharing

x_hiro11, posted Tue Dec 18, 2018 3:26 am (41482)

---

please help~

x_hiro11, posted Thu Dec 20, 2018 12:29 am (41525)

---

?????? emmm

gokhan935, posted Thu Dec 20, 2018 2:15 am (41526)

---

x_hiro11 wrote:

The file is encrypted and I want to extract the video. https://drive.google.com/file/d/10XbpuT ... sp=sharing

http://prntscr.com/lx96c9
delete those three string with hxd and it is a flv file. You can play with it a flv player
https://drive.google.com/open?id=19LEfA ... 6W8yk1xLX_

x_hiro11, posted Thu Dec 20, 2018 9:14 am (41531)

---

gokhan935 wrote:

x_hiro11 wrote:

The file is encrypted and I want to extract the video. https://drive.google.com/file/d/10XbpuT ... sp=sharing

http://prntscr.com/lx96c9
delete those three string with hxd and it is a flv file. You can play with it a flv player
https://drive.google.com/open?id=19LEfA ... 6W8yk1xLX_

My God!?
??????!???!
You are God! great!

x_hiro11, posted Fri Dec 21, 2018 10:07 am (41552)

---

@gokhan935
I still have 3 files that I can't extract according to the method you provided, all of which show garbled characters.
Please give me a free web disk, I want to upload the file to you, my network can't log in to Google now.

Can you use Baidu's network disk?
If you can, I upload to the network disk.
http://pan.baidu.com

Look at this picture:

x_hiro11, posted Sat Dec 22, 2018 12:27 am (41562)

---

@gokhan935
Please take a look at this file.
https://pan.baidu.com/s/1vfpPPa4t2W8GUlO1munRBw

x_hiro11, posted Wed Jan 02, 2019 10:08 am (41806)

---

Linked content can not download? Why no one replies to me.

aluigi, posted Wed Jan 02, 2019 7:05 pm (41826)

---

Yes, Baidu wants login.

x_hiro11, posted Thu Jan 03, 2019 1:25 am (41836)

---

@ aluigi

This should be available for download without logging in.
Click Download, then enter the characters and the download will start automatically.
http://www.filedropper.com/test_29

These three file encryptions seem to be more complicated. The method using gokhan935 is invalid..

Acewell, posted Thu Jan 03, 2019 3:43 am (41837)

---

01.cd is xored with 0xED
02.cd is xored with 0xF1
03.cd is xored with 0xF1

aluigi, posted Thu Jan 03, 2019 6:40 am (41840)

---

Code:

# the first bytes are 0xa1bd or 0xbda1
goto 2
get KEY byte
math KEY ^ 0x01
filexor KEY
savepos OFFSET
get SIZE asize
math SIZE - OFFSET
get NAME basename
string NAME   "."
log NAME OFFSET SIZE

Do you have the name of this software?
I see only a http://www.51zxw.net/ website in these flv videos.

x_hiro11, posted Thu Jan 03, 2019 10:41 am (41870)

---

@ aluigi
Does this software refer to software that encrypts .cd files? That I don't have, only .exe, used to start the video.

aluigi, posted Thu Jan 03, 2019 3:08 pm (41886)

---

Yes the name of the software you use for playing the videos.
Just for having a searchable "word" for the search engines in case other people need a way for decrypting these cd files.

x_hiro11, posted Fri Jan 04, 2019 12:24 am (41905)

---

@ aluigi
This is the directory structure, the temp inside is the .cd file.


This is the "Entering learning" folder
http://www.filedropper.com/enteringlearning


Thank you very much, you have helped me many times! I want to make friends with you. Do you have wechat ID?
This is my wechat ID hiro_ryuu

I really like this forum!!!!!!

x_hiro11, posted Fri Jan 04, 2019 12:39 am (41906)

---

@Acewell
I don't understand how to use those characters.
Last night I used winhex to search for the hexadecimal characters you provided, and I didn't find any results.

I really appreciate the enthusiastic help of netizens. I love everyone!

x_hiro11, posted Mon Jan 07, 2019 12:25 am (42008)

---

@ aluigi
Can you record a video tutorial? I want to know the process of writing this code. What programming language does this belong to?
Thank You

aluigi, posted Mon Jan 07, 2019 1:50 pm (42023)

---

I'm a bit lost in the conversation

The decrypted CD files are just FLV videos that you can play with any media player.
Maybe give them the .flv extension just to be sure that the media player loads them.

x_hiro11, posted Tue Jan 08, 2019 12:30 am (42038)

---

@ aluigi
I want to know the process of using winhex to find the address and writing bms.
After that, I can self-sufficiency, hahaha.

aluigi, posted Thu Jan 10, 2019 8:19 pm (42147)

---

Ah only that!
You need various years of practice in reverse engineering

x_hiro11, posted Wed Jan 16, 2019 3:45 am (42426)

---

@ aluigi
This is an encrypted .sz file, seeking bms.

http://www.filedropper.com/szfiles

x_hiro11, posted Wed Jun 05, 2019 12:32 pm (48482)

---

The file is encrypted and I want to extract the video.

https://drive.google.com/file/d/1cq7KtB ... IZ-ko/view


The file extracted by the following code is a .dat file and cannot be played. Its real format is flv

Please help me modify the code so that it can work on the dat file and extract the video file.

Code:

# the first bytes are 0xa1bd or 0xbda1
goto 2
get KEY byte
math KEY ^ 0x01
filexor KEY
savepos OFFSET
get SIZE asize
math SIZE - OFFSET
get NAME basename
string NAME   "."
log NAME OFFSET SIZE

aluigi, posted Wed Jun 05, 2019 9:21 pm (48501)

---

@ x_hiro11
Please don't open new topics for the same software and format.

aluigi, posted Wed Jun 05, 2019 9:26 pm (48502)

---

Code:

goto 3
get KEY byte
math KEY ^ 'F'
goto 3
filexor KEY
savepos OFFSET
get SIZE asize
math SIZE - OFFSET
get NAME basename
string NAME   "."
log NAME OFFSET SIZE