This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=15370

RiffyDiffy, posted Fri Jun 04, 2021 4:42 pm (64489)

---

In the Lost Kingdom update, Devsisters encrypted the files in a completely different way, and now I saw someone that has managed to decrypt the files.
I'm absolutely DESPERATE to know how to decrypt them.

But one thing I know is that they are encrypted with XOR and I have no idea how to do that.
Here is the link for 6 of the encrypted files.

https://drive.google.com/drive/folders/ ... sp=sharing

(The game is made with unity, by the way.)
If anyone can decrypt the files, I would be really happy.

grandshot, posted Tue Jun 22, 2021 10:08 pm (64847)

---

Tried to guess a key from file 0A3529EEFA7B1FCFCBB391F02D2EA5312879B83D. Thats seems like the best patient with more zeros.
Result probably incorrect. It's my first touch to obfuscation.

Code:

Set MEMORY_FILE binary "\x0A\x18\x08\xF7\xD4\xE5\xE3\x07\x10\xD4\xC1\x8A\xE6\x04\x18\x01\x20\x28\x28\xBE\xB8\xED\xA0\x04\x30\xF4\x03"

# Work only with file 0A3529EEFA7B1FCFCBB391F02D2EA5312879B83D
Open FDSE "0A3529EEFA7B1FCFCBB391F02D2EA5312879B83D" 0

Get fileSize asize 0
Get fileName basename 0
String fileName   ".dat"

Log MEMORY_FILE2 0 0

XMath numBlocks "fileSize / 184"

# Block size is 184 bytes
# Key assign seven times, moreover all 27 bytes of key used in the first and penultimate time.
For J = 0 < numBlocks
   CallFunction SetXOR 1 27 #Num bytes of a key
   CallFunction SetXOR 1 26
   CallFunction SetXOR 1 26
   CallFunction SetXOR 1 26
   CallFunction SetXOR 1 26
   CallFunction SetXOR 1 27
   CallFunction SetXOR 1 26
Next J

Log fileName 0 fileSize MEMORY_FILE2

StartFunction SetXOR
   GoTo 0 MEMORY_FILE
   For I = 0 < SetXOR_ARG1
      Get xorChar byte MEMORY_FILE
      Savepos offset 0
      Get char byte 0
      Math char ^ xorChar
      
      PutVarChr MEMORY_FILE2 offset char byte
   Next I
   
EndFunction