Chewy: Esc from F5 game: Texts

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
Pakolmo
Posts: 52
Joined: Thu Jun 09, 2016 1:15 am

Chewy: Esc from F5 game: Texts

Post by Pakolmo »

Hi!

Aluigi, Can you decript the text file?

Most of the data is compressed with LZSS and afterwards encrypted with a really tricky encryption.

I upload German and English files.
https://www.dropbox.com/s/msjbf0t90jc9ieu/chewy.7z?dl=0

Thanks!
Pakolmo
Posts: 52
Joined: Thu Jun 09, 2016 1:15 am

Re: Chewy: Esc from F5 game: Texts

Post by Pakolmo »

More information:
It is a Blue Byte Game (Settlers saga).

It use the same file extension than Lula the sexy empire. (Same engine?)

http://game-viewer.org/plugins_files/g_lula.py

Help, please.
Pakolmo
Posts: 52
Joined: Thu Jun 09, 2016 1:15 am

Re: Chewy: Esc from F5 game: Texts

Post by Pakolmo »

Can it help to do a quickbms to decrypt and encrypt for Chewy: Esc from F5?

It is a file from Settlers 2 game. Encrypted and unencrypted.
https://www.dropbox.com/s/8zm9qv171ewep ... 02.7z?dl=0

It can be the same encryption with other Key... (I don't know).
Pakolmo
Posts: 52
Joined: Thu Jun 09, 2016 1:15 am

Re: Chewy: Esc from F5 game: Texts

Post by Pakolmo »

I think I found the C++ code for decode.

Aluigi. Can you do the Quickbms script for decode/encode the "ATDS.TAP" file, please?


decrypt(data, chunk->size);

void Resource::decrypt(byte * data, uint32 size) {
byte* c = data;

for (uint i = 0; i < size; i++)
{
*c = -(*c);
++c;
}
Pakolmo
Posts: 52
Joined: Thu Jun 09, 2016 1:15 am

Re: Chewy: Esc from F5 game: Texts

Post by Pakolmo »

I have the next wrong Quickbms script to decode texts:

get header long
get resType short
get chunkCount short
for i = 0 < chunkCount
get size long
get type short
savepos OFFSET
xmath NEXT_OFF "OFFSET + size"

encryption math "n #INPUT#"
#log "" OFFSET size

filecrypt 1
# wrong part starts here
getdstring DUMMY 0x18
do
slog "" -1 -1
getdstring DUMMY 5 #7???
savepos TMP
while TMP < NEXT_OFF
# end of wrong part
filecrypt 0

goto NEXT_OFF
next i

Please, Can someone do it better?