I am trying to modify the NDLAUNCHER.exe texts and links.
I decrypted XLAUNCHER.XP from the client using quickbms tool,after that it splited in 14 files .pmm and .XI extensions.
I am using this for the quickbms script
Does anyone know how I can decrypt the .xi and .pmm extensions ? Specialy the .XI extension.Quote:
get idstring long
get files long
for i = 0 < files
get nsize short
filexor "0xEF"
getdstring NAME nsize
filexor ""
putarray 0 i NAME
next i
for i = 0 < files
get id1 long
putarray 1 i id1
next i
get SIZE asize
putarray 1 files SIZE
# filexor "0xA5"
for i = 0 < files
set j i
math j + 1
getarray NAME 0 i
getarray OFFSET 1 i
getarray SIZE 1 j
math SIZE - OFFSET
log NAME OFFSET SIZE
next i
I tried 9DCryptTool_0.1 tool but no luck.
If i open with notepad++ its crypted.
PS:I am willing to give some beers !







