Real Racing 3 - Crypted Vehicle Materials

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
barti
Posts: 34
Joined: Sun Nov 09, 2014 2:40 pm

Real Racing 3 - Crypted Vehicle Materials

Post by barti »

- link expired -
Last edited by barti on Fri Sep 02, 2016 12:15 pm, edited 1 time in total.
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Real Racing 3 - Crypted Vehicle Materials

Post by aluigi »

It seems a sort of RC4 with key "\xcf\xe7\x43\xe8\xb1\xb3\x35\xa5", but there are some customizations.
The function to check "EncryptedXMLWriter::EncryptedXMLWriter(int, char *)".
Maybe I will check it later or someone else will (Ekey?).
Ekey
Posts: 1383
Joined: Sat Aug 09, 2014 2:34 pm

Re: Real Racing 3 - Crypted Vehicle Materials

Post by Ekey »

Hmmm. I think there is still one more encryption function. Look this > EncryptedXMLWriter::write(void const*,uint)
barti
Posts: 34
Joined: Sun Nov 09, 2014 2:40 pm

Re: Real Racing 3 - Crypted Vehicle Materials

Post by barti »

Thank you very much, works perfectly.
LolHacksRule
Posts: 865
Joined: Fri Apr 20, 2018 12:41 am

Re: Real Racing 3 - Encrypted files

Post by LolHacksRule »

Hate rebumping an old topic like this but I cannot decrypt this GUI (XML) file (they changed the extension sometime IDK, they are funky) using the script, can someone help or point me to an alternative program/site/script for decrypting it?
LolHacksRule
Posts: 865
Joined: Fri Apr 20, 2018 12:41 am

Re: Real Racing 3 - Crypted Vehicle Materials

Post by LolHacksRule »

Anything?
Ekey
Posts: 1383
Joined: Sat Aug 09, 2014 2:34 pm

Re: Real Racing 3 - Crypted Vehicle Materials

Post by Ekey »

This is not surprising. 5 years have passed since the topic was created. Perhaps the algorithm has changed or encryption key :)
LolHacksRule
Posts: 865
Joined: Fri Apr 20, 2018 12:41 am

Re: Real Racing 3 - Crypted Vehicle Materials

Post by LolHacksRule »

Key is fine definitely, I can decrypt everything else with the same script. UPDATE: I can decrypt this fine NVM, maybe the QuickBMS update fixed it?