READ THE RULES: Click here

Follow us on Facebook: https://www.facebook.com/xentax/ :)

Gensokyo Shiki

Read or post about compression. And decompression. Or ask questions how to decompress your files.
Post Reply
finale00
M-M-M-Monster veteran
M-M-M-Monster veteran
Posts: 2382
Joined: Sat Apr 09, 2011 1:22 am
Has thanked: 170 times
Been thanked: 295 times

Gensokyo Shiki

Post by finale00 » Tue Aug 14, 2012 3:57 am

Original name: 幻想郷史紀

Hmm first, the archives are encrypted.
That's all I know from looking at the hex.

Exe: http://www.mediafire.com/?rjh4jt4o4x7xt6j

Sample archives attached
You do not have the required permissions to view the files attached to this post.

User avatar
Falo
advanced
Posts: 78
Joined: Fri Oct 23, 2009 1:29 pm
Been thanked: 33 times

Re: Gensokyo Shiki

Post by Falo » Tue Aug 14, 2012 4:46 pm

It's a "Wolf RPG Editor" Game,

the decrypt key is "ypcd121231",
the function to calculate the key is (in ida pro) at: ".text:00588C00"
the calculated key is: "86 07 E9 B9 CE 9E CE B9 99 4E 41 BC"

it's a simple xor encryption, here the decrypted samples: http://www.mediafire.com/download.php?vv4ubxfbslbmep5

finale00
M-M-M-Monster veteran
M-M-M-Monster veteran
Posts: 2382
Joined: Sat Apr 09, 2011 1:22 am
Has thanked: 170 times
Been thanked: 295 times

Re: Gensokyo Shiki

Post by finale00 » Tue Aug 14, 2012 5:56 pm

LOL wow it really is a wolf archive.
I was playing the game and never thought it was made in wolf.

I tried to figure out how their file table is stored. Offset to file table at 0xC, followed by the size of the name table. A bunch of names followed by a bunch of file entries, where there is some number system to indicate which directory a file belongs in. But couldn't figure it out.

Post Reply