how to decrypt and decode png files to real file (.ass)

[baka.shinji]

I tried several Times with denobis hints without result.
I 'can't get the decryption Key :/

[denobis]

Try http://www.mediafire.com/download/o7...2/adnivkey.exe

Usage

adnivkey --login=login --pass=pass

if you are in France add --noproxy

The ivkey now is 73e13fae869893a5d9d1bc7d9cb96836

[baka.shinji]

I works!
Thank you very much Denobis, for your work and your patience

[blurg]

@denobis : i have test your key but i have another problem

$key = 73e13fae869893a5d9d1bc7d9cb96836

shell dos :

error ligne xx e13fae869893a5d9d1bc7d9cb96836

[denobis]

Originally Posted by blurg

@denobis : i have test your key but i have another problem

$key = 73e13fae869893a5d9d1bc7d9cb96836

shell dos :

error ligne xx e13fae869893a5d9d1bc7d9cb96836

$key = "73e13fae869893a5d9d1bc7d9cb96836";

[gaaara]

hello

i have a probleme with key générated of your script dénobis

is a good key is not a probleme juste but it works randomly

on the script

   $open = fopen("php\key\keyfile.txt", "r");
  $okey=fgets($open,255);
  $td  = mcrypt_module_open('rijndael-128', '', 'ecb', '');
  $iv  = str_repeat("\x00", 16);

  $key = pack("A*",$okey); ## **not working**

  $key = $key . str_repeat("\x00", 32 - strlen($key));
  mcrypt_generic_init($td, $key, $iv);
  $key = mcrypt_generic($td, $key);
  $key = str_repeat(substr($key, 0, 16), 2);
  mcrypt_generic_deinit($td);

the key is readable

test code

<?php
$key = pack('A*', 'b8e3c43ee882b09ec4e7ace525dfd45');
echo "$key"
?>

résult

[gaaara@localhost adn]$ php test
b8e3c43ee882b09ec4e7ace525dfd45

jus actualy not works

[denobis]

Originally Posted by gaaara

hello

i have a probleme with key générated of your script dénobis

is a good key is not a probleme juste but it works randomly

on the script

   $open = fopen("php\key\keyfile.txt", "r");
  $okey=fgets($open,255);
  $td  = mcrypt_module_open('rijndael-128', '', 'ecb', '');
  $iv  = str_repeat("\x00", 16);

  $key = pack("A*",$okey); ## **not working**

  $key = $key . str_repeat("\x00", 32 - strlen($key));
  mcrypt_generic_init($td, $key, $iv);
  $key = mcrypt_generic($td, $key);
  $key = str_repeat(substr($key, 0, 16), 2);
  mcrypt_generic_deinit($td);

the key is readable

test code

<?php
$key = pack('A*', 'b8e3c43ee882b09ec4e7ace525dfd45');
echo "$key"
?>

résult

[gaaara@localhost adn]$ php test
b8e3c43ee882b09ec4e7ace525dfd45

jus actualy not works

$key = $okey; ## **working**

The key is 'b8e3c43ee882b09ec4e7ace525dfd45', dont repack it, but adjust it to 32 bytes

0b8e3c43ee882b09ec4e7ace525dfd45

change the script anyway to

		$iv=array_slice(explode("24",explode("5620",explode("d030",explode("62052404d3a215d3ffff620848",$swf)[1])[1])[0]),1);
		
		$key="";
		
		foreach ($iv as $c)
			{
                        $actual=sprintf("%02x",chr(hexdec(substr($c,0,2))));
			$key.=str_repeat($actual,strlen($c)/2);
							
			}

[gaaara]

What I have to replace exactl

<?php

//get the encryption key
$swf=file_get_contents("mulutibu_v4_3.swf");
$swf        = bin2hex(gzuncompress(substr($swf,8)));
        if (!strpos($swf,"62052404d3a215d3ffff620848")) die("bad");
        
		$iv=explode("24",explode("5620",explode("d030",explode("62052404d3a215d3ffff620848",$swf)[1])[1])[0]);
		
		$key1="";
		
		foreach ($iv as $c)
			{
			$actual=chr(hexdec(substr($c,0,2)));
			$key1.=$actual;
			if (strlen($c)>2)
				$key1.=$actual;							
			}

echo "\r\nivkey:".trim($key1);
        echo "\r\nThe key is in the file adnivkey.txt";
		file_put_contents("adnivkey.txt", trim($key1));

?>

this part ?

$iv=explode("24",explode("5620",explode("d030",explode("62052404d3a215d3ffff620848",$swf)[1])[1])[0]);
		
		$key1="";
		
		foreach ($iv as $c)
			{
			$actual=chr(hexdec(substr($c,0,2)));
			$key1.=$actual;
			if (strlen($c)>2)
				$key1.=$actual;							
			}

i have edited the files and get this

ivkey:0609070904010801000000000900050506010202060600040003070000070800

and test not working

I do not understand why the script can not decrypt the file

[denobis]

Send me a valid mulutibu.swf

[gaaara]

mp