dungeon stricker , help me,please.

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
heng32032
Posts: 13
Joined: Sat Nov 15, 2014 9:03 am

Re: dungeon stricker , help me,please.

Post by heng32032 »

help me please'
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: dungeon stricker , help me,please.

Post by aluigi »

Unknown compression algorithm and possible usage of obfuscation, personally I will not work on this.
Ekey
Posts: 1383
Joined: Sat Aug 09, 2014 2:34 pm

Re: dungeon stricker , help me,please.

Post by Ekey »

First closed beta and second using simple xor. Compression lz series
heng32032
Posts: 13
Joined: Sat Nov 15, 2014 9:03 am

Re: dungeon stricker , help me,please.

Post by heng32032 »

i cant find the name of res.
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: dungeon stricker , help me,please.

Post by aluigi »

@ekey
What was the xor key used in the old beta?
Ekey
Posts: 1383
Joined: Sat Aug 09, 2014 2:34 pm

Re: dungeon stricker , help me,please.

Post by Ekey »

Dynamic keys generated by Mersenne Twister algorithm from dwSeed. As dwSeed used hash (fnv1a) from file name.
heng32032
Posts: 13
Joined: Sat Nov 15, 2014 9:03 am

Re: dungeon stricker , help me,please.

Post by heng32032 »

Ekey wrote:Dynamic keys generated by Mersenne Twister algorithm from dwSeed. As dwSeed used hash (fnv1a) from file name.

the package name has hashed?It looks like a very hard job
Ekey
Posts: 1383
Joined: Sat Aug 09, 2014 2:34 pm

Re: dungeon stricker , help me,please.

Post by Ekey »

In old client version packages names hashed like.

Code: Select all

0cb027ec6ad7c3711a0a9b6769e014e4aca291e397800aaa9160a7c0887c8a56379b9a047903bdb0d3ba0434e3da837c.dat
40679ba78c657c4e488dbb2178f7bc52b324729c20c85975d2e2cb3c4a45f1ee7716af2b96625ad838fbe21546094eec.dat
b2263b6806e5155562226439a20002cd8602b7b626ac67cf2bcde38384f2734bcbaf6259c864aca0071737958dba1e97.dat


Idk in latest version.
heng32032
Posts: 13
Joined: Sat Nov 15, 2014 9:03 am

Re: dungeon stricker , help me,please.

Post by heng32032 »

Ok it is use zlib to compression,but data are encrypted by the files name!?
heng32032
Posts: 13
Joined: Sat Nov 15, 2014 9:03 am

Re: dungeon stricker , help me,please.

Post by heng32032 »

who can help decode the .dat package?
Ekey
Posts: 1383
Joined: Sat Aug 09, 2014 2:34 pm

Re: dungeon stricker , help me,please.

Post by Ekey »

Algorithm used SHA1 + Salsa20 + XOR. Keys and IVs not static. As compression used LZMA.

I pass.
heng32032
Posts: 13
Joined: Sat Nov 15, 2014 9:03 am

Re: dungeon stricker , help me,please.

Post by heng32032 »

hi ekey, can you help me to decode the .dat?
Ekey
Posts: 1383
Joined: Sat Aug 09, 2014 2:34 pm

Re: dungeon stricker , help me,please.

Post by Ekey »

heng32032 wrote:hi ekey, can you help me to decode the .dat?

Ekey wrote:I pass.