*.cd suffix file [Encrypted] , Seeking can work bms

[x_hiro11]

The file is encrypted and I want to extract the video. https://drive.google.com/file/d/10XbpuT ... sp=sharing

[x_hiro11]

please help~

[x_hiro11]

誰か助けって emmm

[gokhan935]

The file is encrypted and I want to extract the video. https://drive.google.com/file/d/10XbpuT ... sp=sharing

http://prntscr.com/lx96c9
delete those three string with hxd and it is a flv file. You can play with it a flv player
https://drive.google.com/open?id=19LEfA ... 6W8yk1xLX_

[x_hiro11]

The file is encrypted and I want to extract the video. https://drive.google.com/file/d/10XbpuT ... sp=sharing

http://prntscr.com/lx96c9
delete those three string with hxd and it is a flv file. You can play with it a flv player
https://drive.google.com/open?id=19LEfA ... 6W8yk1xLX_

My God!　
きみは神様だ！スゴイ！
You are God! great!

[x_hiro11]

@gokhan935
I still have 3 files that I can't extract according to the method you provided, all of which show garbled characters.
Please give me a free web disk, I want to upload the file to you, my network can't log in to Google now.

Can you use Baidu's network disk?
If you can, I upload to the network disk.
http://pan.baidu.com

Look at this picture：

QQ截图20181221181334.jpg

[x_hiro11]

@gokhan935
Please take a look at this file.
https://pan.baidu.com/s/1vfpPPa4t2W8GUlO1munRBw

[x_hiro11]

Linked content can not download? Why no one replies to me.

[aluigi]

Yes, Baidu wants login.

[x_hiro11]

@ aluigi

This should be available for download without logging in.
Click Download, then enter the characters and the download will start automatically.
http://www.filedropper.com/test_29

These three file encryptions seem to be more complicated. The method using gokhan935 is invalid..

[Acewell]

01.cd is xored with 0xED
02.cd is xored with 0xF1
03.cd is xored with 0xF1

[aluigi]

Code: Select all

# the first bytes are 0xa1bd or 0xbda1
goto 2
get KEY byte
math KEY ^ 0x01
filexor KEY
savepos OFFSET
get SIZE asize
math SIZE - OFFSET
get NAME basename
string NAME + "."
log NAME OFFSET SIZE

Do you have the name of this software?
I see only a http://www.51zxw.net/ website in these flv videos.

[x_hiro11]

@ aluigi
Does this software refer to software that encrypts .cd files? That I don't have, only .exe, used to start the video.

[aluigi]

Yes the name of the software you use for playing the videos.
Just for having a searchable "word" for the search engines in case other people need a way for decrypting these cd files.

[x_hiro11]

@ aluigi
This is the directory structure, the temp inside is the .cd file.

QQ截图20190104082704.jpg

This is the "Entering learning" folder
http://www.filedropper.com/enteringlearning


Thank you very much, you have helped me many times! I want to make friends with you. Do you have wechat ID?
This is my wechat ID hiro_ryuu

I really like this forum!!!!!!

[x_hiro11]

@Acewell
I don't understand how to use those characters.
Last night I used winhex to search for the hexadecimal characters you provided, and I didn't find any results.

I really appreciate the enthusiastic help of netizens. I love everyone!

[x_hiro11]

@ aluigi
Can you record a video tutorial? I want to know the process of writing this code. What programming language does this belong to?
Thank You

[aluigi]

I'm a bit lost in the conversation

The decrypted CD files are just FLV videos that you can play with any media player.
Maybe give them the .flv extension just to be sure that the media player loads them.

[x_hiro11]

@ aluigi
I want to know the process of using winhex to find the address and writing bms.
After that, I can self-sufficiency, hahaha.

[aluigi]

Ah only that!
You need various years of practice in reverse engineering