This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=1057

CriticalError, posted Sat Jun 20, 2015 12:26 am (5816)

---

Hello guys, well I come with this strange format, I think the files are encrypted, so maybe is possible check that? ok many thanks for all and hope can check and help.

https://cloud.mail.ru/public/39L5/J1dFfG1Sn

aluigi, posted Sat Jun 20, 2015 9:06 am (5822)

---

I guess it's encrypted with AES (without ivec)

chrrox, posted Sat Jun 20, 2015 10:00 am (5825)

---

e-key looked at it and the exe is protected but it should be a version of aes he said.
If you want to look at it here is the client.
http://cache2.lova.jp/client/lovainstaller.exe
to launch the game without it crashing use.
only the -seekfreeloadingpcconsole
seems to be needed to launch the game.

CriticalError, posted Sat Jun 20, 2015 9:02 pm (5829)

---

well thanks for info guys, so is possible unpack it or not? I read something about this encryptation and exist blocks of AES-128 to 256, but this is necessary write a BMS Script to unpack files? or is necessary run the game and dump from memory the data? really I don't know for this reason I ask, i'm sorry if I feel stupid asking this question., but i'm not a pro in programming.

copyliu, posted Sun Jan 03, 2016 6:42 am (10684)

---

from memory dump I can find filename can be decoded with follow rule:
BldGame\GameData\ec_ replace with(=) Engine\Config\
BldGame\GameData\ei_ = Engine\Localization\INT\
BldGame\GameData\el_ = Engine\Localization\
BldGame\GameConfig\gs_ = BldGame\Config\PCServer\
BldGame\GameConfig\gc_ = BldGame\Config\
BldGame\GameData\ge_ = BldGame\CookedPCConsole\English(US)\
BldGame\GameData\gp_ = BldGame\CookedPCConsole\
BldGame\GameData\gi_ = BldGame\Localization\INT\
BldGame\GameData\gl_ = BldGame\Localization\
BldGame\GameData\sp_ = BldGame\Splash\PC\
BldGame\GameData\gm_ = BldGame\Movies\
*.d1=*.upk
*.d2=*.int
*.d3=*.ini
*.d4=*.wem
*.d5=*.bnk
*.d6=*.tfc
*.d7=*.bin
*.d8=*.bmp
*.d9=*.bik

and numbers can be decode like this:
eg: gp_32153163051063326318073406555563340015633716.d1
python script

Code:

>>> a="B2NHkP0Q5AC8op9DF1EstuGrvlIJKnqLM6U74STefVcdijWXYaZbxgR3hywOzm _-"
>>> filename="32153163051063326318073406555563340015633716"
>>> "".join([a[int(filename[x:x 2])] for x in range(0, len(filename),2)])
>>> 'MDL_PC_M_EQU033_UBD_SF'

result: BldGame\CookedPCConsole\MDL_PC_M_EQU033_UBD_SF.upk


filecontent maybe encrypted with AES-128 without padding,
I can find *.d3 files(.ini) last few byte is plan text

happyend, posted Sat Feb 27, 2016 9:28 am (11666)

---

bump need bms script...

pokepe, posted Mon Jun 27, 2016 3:45 pm (14825)

---

This game will out of commission after June 30, missing the bgm so there anyway can decode the files?