how to decrypt and decode png files to real file (.ass)

[Legremlins_Keitaro]

Hmm where is the new $start in the multibu.as ? someone can give me the sample of the line please ?

Edit: is the line is this one => var _loc2_:String = AES.dec(param1,d1(20),false);
in this case 20 ?

[NoWay]

Can someone make a script to get the multibu file and the .png please ?

[NoWay]

They have changed their method another time , can we have an update please ?

[KSV]

People keep PM'ing me to ask if this script currently works or not because most of them don't bother to read few pages to know what needs to be done exactly. The short answer is Yes this script still works as expected and doesn't require any other update except the two values ($constants and $start) which they keep changing on rotational basis (probably daily).

1. First you need to grab the mulutibu swf file and encrypted png file correctly. I recommend using Fiddler to save both the swf file and encrypted png file. When you try to grab the file otherwise server may send you wrong file and decryption won't work even if you follow other steps correctly.

2. Now grab a good swf decompiler (JPEXS Free Flash Decompiler) and extract new constants which are embedded as binary data in swf file. in the saved file replace all 0x with \x.

\x61\x65\x63\x64\x61\x35\x33\x30\x65\x38\x36\x65\x61\x63\x33\x65\x64\x64\x36\x63\x38\x66\x66\x65\x61\x38\x36\x31\x64\x35\x32\x64\x39\x34\x31\x30\x65\x39\x39\x34\x37\x35\x38\x37\x38\x31\x62\x61\x34\x38\x63\x32\x64\x33\x36\x65\x31\x31\x36\x34\x61\x66\x35\x36\x65\x65\x37\x65\x32\x65\x36\x39\x31\x63\x38\x64\x36\x64\x62\x30\x34\x37\x62\x64\x65\x38\x63\x64\x33\x35\x63\x31\x34\x63\x37\x30\x36\x63\x30\x61\x62\x39

3. To get the start value you need to find the call to AES function as shown in following image. it's 61 in this case.



4. after updating those two values in the script you can now use it to decrypt the png file to ass file.

php AnimeDigital.php encrypted.png

it will save the decrypted file with .ass extension.

[Tewx]

Hello

WHen i start the php, i have this error

What's the problem ?

[Tewx]

Hey

Any News ?

Cordialy

[Legremlins_Keitaro]

In this new year, new protection Doesn't work anymore

[KSV]

I will look into it in a day or two and provide the update.

[Legremlins_Keitaro]

Ok thanks, I have MP you what I find on this update

[blurg]

Originally Posted by KSV

I will look into it in a day or two and provide the update.

do you see my MP