How do you convert PS1 Xploder Codes?

[misfire]

Yes, please.

BTW, I'm working on xpcrypt 1.1 which will support the encryption and decryption of Xploder ROMs.

[Lazy Bastard]

Cool

[bungholio]

I just used this tutorial http://www.codemasters-project.net/v...ead.php?t=5805 with a download of the PAL Xploder v4 pro media edition I downloaded from the site kh2k4 supplied. I made a .pis file in PS2Dis of the dumped data. If the data is correct, there might be something wrong with Majestic Porter doing the decrypting. I put in the whole long Lara Nude code perfectly starting with:
77C43C64 3534
57D14AD6 9537
34FF33FF 1B29
57420642 1BFD


PS2Dis gives me:
7009b0c2 73ff
500a7000 0208
and then it gets weird:
00000000 0000d4ff
9dafbd23 0400a9af
0c000800 a1afabaf
1000a4af 18001400
and it just goes on and on.
Majestic Porter gave me this for what actually converted:
7009B3C2 73FF
500A7000 6202
30DA3966 9894
503F9066 26C8
30DE3EC8 4C41


I'm very certain I have all codes typed perfectly, and I especially made sure the first 6 lines were typed correctly. Attached is the dump that has the codes decrypted, open it with PS2Dis or whatever hex program you want. Codes start at "0000FF00." I haven't actually made anything work yet, and probably won't. I'm fairly confused about what I am even doing.

[misfire]

77C43C64 3534
57D14AD6 9537 ; code type 5 starts here
34FF33FF 1B29
57420642 1BFD

Read my post above. Code type 5 isn't supported yet and you'll only get rubbish when you try to decrypt such a code.

Back in the days, I used pretty much the same process to crack (brute-force) the Xploder encryption keys like this guy from CMP.

With code type 5, the Xploder only saves a pointer to the unencrypted code data, IIRC.

7009b0c2 73ff
500a7000 0208
00000000 0000d4ff

So, have a look at the bytes at 0000d4ff.

[Lazy Bastard]

I've added XPCrypt to the GSHI Downloads section.

[Parasyte]

I believe the encryption is the same as that used in the N64 version of Xploder. The program "X-Killer" by Firefly was capable of encrypting/decrypting these codes. At one time, I RE'd the program to crack the [simple] algorithm. Sadly, I don't think it ever made it into the EnHacklopedia. I sent the work to misfire, maybe he still has a copy of it somewhere. If not, I'll dig through my old hard drive, I probably still have it on there.

Edit: Never mind, I'm thinking of the so-called (now well-known) "7K" encryption. And it seems like the only part that I did was the data/value.

[misfire]

Yes, you helped me on the value part.

Unfortunately, X-Killer can't handle the encryption of Mega and Super codes either.

Maybe I'm able to add decryption support to a future version of xpcrypt...

[misfire]

As promised, here is the source code of xpcrypt version 1.1.

From the README:

v1.1 (May 10 2009)
* Rewrote most of xpcrypt.
* Add decryption/encryption of Xploder ROMs.
* Use CMake as build system for portability.
* Upgrade to GPL v3.

Enjoy.

[Pattywick]

Hi.

Do you ever plan on releasing a .exe version of this? I tried compiling your source code in March and it failed, because I don't have the libraries you have on your computer.

[misfire]

Thanks for reminding me of this project.

I set up a dedicated repository at GitHub:
https://github.com/misfire/xpcrypt/

I also uploaded a Win32 build of version 1.1:
https://github.com/misfire/xpcrypt/downloads

I cross-compiled the binary on Ubuntu:

$ make CC=i586-mingw32msvc-gcc PROG=xpcrypt.exe
i586-mingw32msvc-gcc -Wall -Werror -O2 -s   -c -o xp_crypto.o xp_crypto.c
i586-mingw32msvc-gcc -Wall -Werror -O2 -s   -c -o xpcrypt.o xpcrypt.c
i586-mingw32msvc-gcc -Wall -Werror -O2 -s -o xpcrypt.exe xp_crypto.o xpcrypt.o 

$ wine xpcrypt.exe --version
xpcrypt version 1.1
Copyright (C) 2007, 2009 misfire <[email protected]>
This program is free software; you may redistribute it under the terms of
the GNU General Public License.  This program has absolutely no warranty.

[Pattywick]

Hi.

I am using the nude code found here.

I put those codes into this text file. Then I ran xpcrypt and it decrypted the codes here.

I entered them into [pec] and started ePSXe, and it doesn't work. I press and L1 + R1 + [] for 5 seconds when I start the first level (India Jungle), and she just jumps up and down making noises.

I went into the training gym level and did this, and there are just graphical errors all across the screen.

[pec] is a GameShark emulator. Were the decrypted codes enough, or do I have to convert them further?

EDIT: I was using the default settings with xpcrypt.

[misfire]

The nude code uses the Xploder's Supercode type (starting with 5) which cannot be decrypted by xpcrypt.

See https://github.com/misfire/xpcrypt/issues/#issue/1