MK11 coalesced.eng decryption?

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
nightwolf1982
Posts: 22
Joined: Fri Dec 07, 2018 12:24 am

MK11 coalesced.eng decryption?

Post by nightwolf1982 »

Has anyone tried or is wiling to try to crack the new encryption on the MK11 coalesced.eng file?

Link to sample:
https://drive.google.com/open?id=1paJcP ... ot6ip72wLB
nightwolf1982
Posts: 22
Joined: Fri Dec 07, 2018 12:24 am

Re: MK11 coalesced.eng decryption?

Post by nightwolf1982 »

Anyone looked at this?
LokiReborn
Posts: 190
Joined: Fri Aug 26, 2016 3:11 pm

Re: MK11 coalesced.eng decryption?

Post by LokiReborn »

Typically it's not really possible to just guess encryption you need to look at the decryption function and the information to decrypt is normally in the executable and not the file so unless it's weak XOR encryption or a simple Caesar cipher you're out of luck. That said the last 0x3C bytes look like information tagged onto the encrypted data, it's possible it's information needed to decrypt the file or a signature. Can try using it in a few common ways but outside of that the bin folder of the game would need to be reviewed.

Edit: tried a couple things with aes & xor and did have any luck, would really need to look at the game itself. If you want to upload the binary folder can try taking a look.
nightwolf1982
Posts: 22
Joined: Fri Dec 07, 2018 12:24 am

Re: MK11 coalesced.eng decryption?

Post by nightwolf1982 »

Tough part is finding anyone willing to try. Here's the binaries folder:

https://drive.google.com/open?id=1dH3K4 ... mcilRcL0uQ
nightwolf1982
Posts: 22
Joined: Fri Dec 07, 2018 12:24 am

Re: MK11 coalesced.eng decryption?

Post by nightwolf1982 »

Has anyone had any luck?
LokiReborn
Posts: 190
Joined: Fri Aug 26, 2016 3:11 pm

Re: MK11 coalesced.eng decryption?

Post by LokiReborn »

nightwolf1982 wrote:Has anyone had any luck?


Sorry I didn't, I can see where the file starts to be read but there are a bunch of relative jumps right after that and I wasn't able to trace it. I might be able to do it with the game installed and be able to actively debug it but with it being bound to steam I'd have to edit a ton to be able to attempt it without purchasing it as it tries to do the call backs and they'd needed to be edit out to trace further into the client.