Super Mario Run .OGG

[MurraySkull]

https://www.mediafire.com/file/wsw8kwau ... %20BGM.zip
These appear to be encrypted .ogg files.

[aluigi]

It can be anything from a fixed key xor starting with the bytes 0x8a 0xec 0xb3 0xa2 to a xor with incremental pseudo number generator.
You can verify the first idea by searching those 4 bytes in the executable of the game.
I don't know why there is a 32bit size value at the beginning at the file and what are all those bytes after at the end of the file

[Mikeee]

It can be anything from a fixed key xor starting with the bytes 0x8a 0xec 0xb3 0xa2 to a xor with incremental pseudo number generator.
You can verify the first idea by searching those 4 bytes in the executable of the game.
I don't know why there is a 32bit size value at the beginning at the file and what are all those bytes after at the end of the file

They seem to be encrypted with AES keys. There's functions like DeALSetting$$get_OggEncryptionAesKey and AssetBundleSetting$$get_SimpleEncryptionKey, as for where to find these keys, I still don't know.

[MurraySkull]

Well, I am convinced that the secret lies in libDeALWrapper.so, you can see the disassembly here: https://www.mediafire.com/file/40wrvvcq ... per.so.txt

[MurraySkull]

Any updates?

[MurraySkull]

Nothing?

[aluigi]

I think it's better to stop bumping.
Clearly nobody is working on this.

[MurraySkull]

Anyone working on this?

[MurraySkull]

Anyone?