[PC]BulletStorm's engine.ini, etc is encrypted

[East]

I have no idea why this file is encrypted but for most people all they want to do is change bsmoothframerate from from true to false and increase MaxSmoothedFrameRate= from 62 to 100 or so and just play the game. But the file isn't accessible just using a notepad. Does anyone have a method of accessing this file?

[aluigi]

providing the file is the first step

[East]

Does anyone else have the game that can upload the stormengine/etc.ini files. I'm not able to do so yet.
I would really appreciate your help.

Edit:
Here you go:
http://dl.dropbox.com/u/10044418/ini_files.rar

What do you make of it?

[Caboose]

Look's like AES EBC, or it could be a simple XOR. We would need the executable to get the key and method.

[aluigi]

it's for sure not a block cipher algorithm due to the lack of alignment and for stormgame.ini that doesn't show the same 8/16 bytes blocks, for example they vary each 2 bytes (in a block cipher the blocks are identical or completely different, not half).
I don't have other ideas

[East]

Will this be of any use?

[Rick]

This should be it, untested.

Code: Select all

unsigned char *output;
if (*(unsigned int *)&input[0] == 0x474831A6)
{
    output = malloc(length - 4);
    unsigned char *key = { 0x01, 0x02, 0x03, 0x04, 0x0A, 0x0B, 0x0C, 0x0D, 0x1A, 0x2B, 0x3C, 0x4D, 0xDB, 0xCA, 0x43, 0x21 };
    unsigned char magic = (length - 4) % 256;
    for (int i = 0; i < length - 4; i++)
    {
        output[i] = input[4 + i] - key[i % 16] - magic;
    }
}
else
{
    output = malloc(length);
    memcpy(output, input, length);
}

[East]

Thanks for the info. I assume that was directed at Caboose or Aluigi?

[Rick]

http://mod.gib.me/bulletstorm/inicrypt.exe

(I was too tired to open Visual Studio when I posted the crypto snippet )

[cocococo]

hello everybody.

how do i use this file to decrypt the config files?

greetings

[aluigi]

well done Rick.
to keep me in exercise with the bms language and for who is interesting in its syntax I have made a simple commented script:

Code: Select all

idstring "\xa6\x31\x48\x47"     # check if the signature is correct
get SIZE asize                  # get the size of the file
math SIZE -= 4                  # skip 4 bytes
log MEMORY_FILE 4 SIZE          # load in memory from offset 4
set KEY binary "\x01\x02\x03\x04\x0A\x0B\x0C\x0D\x1A\x2B\x3C\x4D\xDB\xCA\x43\x21"   # the key
for i = 0 < SIZE                # start the cycle for each byte
    getvarchr B MEMORY_FILE i   # get the current byte (B)
    math T = i                  # these...
    math T %= 16                # 3 operations...
    getvarchr T KEY T           # are only needed for T = KEY[i % 16]
    math B -= T                 #
    math B -= SIZE              # B = B - T - SIZE
    putvarchr MEMORY_FILE i B   # replace the current byte
next i
get NAME basename               # the following is needed only
get EXT extension               # to add _decrypted before
string NAME += "_decrypted."    # the file extension
string NAME += EXT
log NAME 0 SIZE MEMORY_FILE     # copy everything in the file

obviously full credit to Rick.

[East]

Thank you very much for time and effort in resolving this. I also want to point out that the bms script does work. However, I don't know how to encrypt the corrected StormEngine.ini file once the changes are made. Can anyone be of assistance?

[Rick]

You can use my inicrypt to reencrypt, just click+drag unencrypted file onto inicrypt again.

[WRS]

@Rick - own curiosity with encrypted formats - how did you find the key? did you reverse any of the game client or figure the key bytes from just the format?

[Paft]

GREAT! So, I tried to increase FPS to 100. Changed the value and decrypted, but still at 62.

What are the ones to disable mouse smoothing, acceleration and sensitivity?