MK11 Config Archive

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
thethiny
Posts: 10
Joined: Tue Jan 26, 2016 10:34 pm

Probably XOR Encrypted File

Post by thethiny »

I have this file that I believe that it's XORed with a key length of 8. The file has a footer. The file I'm trying to crack is endpoints.json. I attached other files too because it might help to check the similarities. I've noticed the string "gikmoqsu", which I thought maybe it was a 00 padding that was XORed with that key in that place. But it didn't work unfortunately. Any help would be appreciated!
thethiny
Posts: 10
Joined: Tue Jan 26, 2016 10:34 pm

MK11 Config Archive

Post by thethiny »

Can someone help me try to figure out how to unpack this archive? I'm sure that it is XORed and Compressed. They all end with the string mcnxyxcmvmcxyxcmskdldkjshagsdhfj. I believe the XOR key might be 0x01 0x03 0x05 0x07 0x09 0x0B ...etc

Here are the files
https://ufile.io/dz0qx9k4

Thanks.
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: MK11 Config Archive

Post by aluigi »

Coalesced files are all encrypted, often with aes but in my experience they may use other algorithms too.
Better if you can upload the game executable in case someone wants to check.
thethiny
Posts: 10
Joined: Tue Jan 26, 2016 10:34 pm

Re: MK11 Config Archive

Post by thethiny »

aluigi wrote:Coalesced files are all encrypted, often with aes but in my experience they may use other algorithms too.
Better if you can upload the game executable in case someone wants to check.


Thank you for your reply aluigi, the executable is large (400MB), it'll take time to upload. Will do in due time.
They're XOR, AES, and oodle covered.

edit: her's a pic that might help (x64dbg)
https://i.imgur.com/ursA6im.png

edit: exe and all encrypted files
https://mega.nz/#F!OqxkiCZK!7sO-atNWSPPFqNABUl4RiQ