This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=11513

chrrox, posted Mon Jun 03, 2019 4:04 am (48374)

---

Here is a quickbms to decrypt the files of this game .png is not perfect on some files that are not a size that is a multiple of 4
but it still loads the png fine just last 0x40 bytes not correct.
http://gemtrader.cn/index.php/Download/index.html

Code:

#quickbms script
#by chrrox and aluigi
#quickbms.com
get NAME basename
get EXT extension
string NAME   _dec.
string NAME   EXT
if EXT == png
get SIZE asize
set NUM 0x40000000
set MEMORY_FILE binary ""
set MEMORY_FILE2 binary "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
set MEMORY_FILE3 binary ""
math SIZE x 0x20
math SIZE - 0x54
math SIZE / 0x20

math SIZE - 2
for i = 0 set OFF i
math OFF * 4
putvarchr MEMORY_FILE OFF NUM long
math NUM -= 1
next i

append
for i = 0 set OFF i
math OFF * 0x20
math OFF   0x5C
log MEMORY_FILE 0 0x1C MEMORY_FILE2
putvarchr MEMORY_FILE OFF NUM long
math NUM -= 1
next i
append

get SIZE asize
#math SIZE y 4
math SIZE - 0x54
get SIZE2 asize MEMORY_FILE

if SIZE2 > SIZE
math NUM  = 1
endif

for i = 0 set OFF i
math OFF * 4
math OFF   SIZE
putvarchr MEMORY_FILE OFF NUM long
math NUM -= 1
next i

encryption xor MEMORY_FILE
get SIZE asize
math SIZE - 0x14
log NAME 0x14 SIZE
else
encryption "incremental xor" 0x40000000 -1
math OFFSET = 0x14
get SIZE asize
math SIZE - OFFSET
log NAME OFFSET SIZE
endif