中华龙塔

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
Viserion
Posts: 63
Joined: Fri Sep 12, 2014 11:02 pm

中华龙塔

Post by Viserion »

Web: http://lt.ccjoy.com/
Client Download: http://down.sandai.net/xlgame/longta_setup.exe

someone can help me descrypt it?
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: 中华龙塔

Post by aluigi »

Maybe provide a sample, just in case it's a simple compression instead of an encryption.
Viserion
Posts: 63
Joined: Fri Sep 12, 2014 11:02 pm

Re: 中华龙塔

Post by Viserion »

Hello aluigi,
The client have only files with big size (1gb+), sorry. Client have too encryption with password.
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: 中华龙塔

Post by aluigi »

You can provide just the beginning and final part of a file using this cutter script:
http://aluigi.org/papers/bms/others/filecutter.bms
Viserion
Posts: 63
Joined: Fri Sep 12, 2014 11:02 pm

Re: 中华龙塔

Post by Viserion »

.
Sorry, here: http://www.mediafire.com/download/d7i0e ... ltdata.rar

It will help?

Thanks,
Cheers.
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: 中华龙塔

Post by aluigi »

I guess that the table with information about each file is at the end (but it's not fully covered by the cut).
Then I think that all the files are obfuscated using, probably, the name of the files (that is just a GUID in reality) or something similar.

Can you modify the filecutter.bms script replacing
math MEGABYTES = 2
with
math MEGABYTES = 8
and then uploading only the second file?
Viserion
Posts: 63
Joined: Fri Sep 12, 2014 11:02 pm

Re: 中华龙塔

Post by Viserion »

.
8mb: http://www.mediafire.com/download/njw9a ... tdata2.rar

Has another file in client with same extension, but I can't confirm if this file is using same encryption. Maybe yes.
dlg.jzw: http://www.mediafire.com/download/d0195 ... p1/dlg.rar
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: 中华龙塔

Post by aluigi »

There is something I don't understand.
This is the max I can do, sorry but I will no longer continue on this format:

Code: Select all

idstring "JZW\0"
#callfunction EASY 1
#cleanexit

goto 0 0 SEEK_END
get JZW_SIZE asize
for FILES = 0
    goto -12 0 SEEK_CUR
    get OFFSET longlong
    get DUMMY long
    if OFFSET u>= JZW_SIZE
        break
    endif
    goto -0x120 0 SEEK_CUR
next FILES
for i = 0 < FILES
    getdstring DUMMY 0xc
    getdstring NAME 0x108
    get OFFSET longlong
    get DUMMY long
    putarray 0 i OFFSET
next i

sortarray 0 1

    getarray OFFSET 0 0
for i = 1 <= FILES
    if i < FILES
        getarray NEXT_OFF 0 i
    else
        math NEXT_OFF = JZW_SIZE
    endif
    xmath SIZE "NEXT_OFF - OFFSET"
    log "" OFFSET SIZE
    math OFFSET = NEXT_OFF
next i

startfunction EXTRACT_WHAT
    goto 0x84
    get DUMMY long
    get DUMMY long
    get DUMMY long
    get DUMMY long
    for
        get ZERO long
        get DUMMY long
        get ZERO long
        get SIZE long
        savepos OFFSET
        log "" OFFSET SIZE
        math OFFSET + SIZE
        goto OFFSET
    next
endfunction
Viserion
Posts: 63
Joined: Fri Sep 12, 2014 11:02 pm

Re: 中华龙塔

Post by Viserion »

Don' worry. ^^