This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=11213

haku0011, posted Thu Apr 11, 2019 3:08 pm (46816)

---

https://store.steampowered.com/app/980830/Death_Mark/

A file has been encrypt. I have no idea to deal with. It's just full "3" when open with Hex editor.

Example: https://drive.google.com/file/d/1UYt29Qm6s_nmnO4_76qlwcGlxDIKvuSW/view?usp=sharing

haibaer, posted Wed Apr 17, 2019 4:14 pm (47030)

---

The script file is partially encrypted using a substitution table, e.g. the period '.'(0x2e) is mapped to 0x98. You can deduce the entire substitution table using this.

LinkOFF, posted Sun Apr 04, 2021 5:05 pm (63216)

---

My research (not finished):

Code:

space = 0xB5
line break = 0x77, 0x99
? = 0x03
! = 0xA7
$ = 0xBB
& = 0x83
^ = 0xAD
: = 0x23
, = 0x30
. = 0x98
( = 0xC5
) = 0x37
" = 0x14
' = 0x16
0 = 0xEE
1 = 0x3B
2 = 0x72
3 =
4 = 0x34
5 =
6 =
7 =
8 =
9 =
a = 0x49
b = 0x69
c = 0x9C
d = 0xFA
e = 0x1D
f = 0x55
g = 0xAE
h = 0xF6
i = 0x46
j = 0xEB
k = 0x6C
l = 0x48
n = 0x4D
o = 0xFF
p = 0xCE
q =
r = 0x02
s = 0x54
t = 0xEA
u = 0x80
v = 0x57
w = 0xAF
x =
y = 0x1F
z = 0x3A
A = 0x3F
B = 0x63
C = 0xF1
D = 0xCB
E =
F =
G =
H = 0xF2
I = 0x2E
J = 0xD8
K = 0x8D
L = 0xC3
M = 0xD0
N = 0x89
O = 0xF3
P = 0x66
Q = 
R = 0x10
S = 0x87
T = 0xA8
U = 0xE4
V = 0x2C
W = 0x21
X =
Y = 0x38
Z =