Treeki

# a massive kludge by Ninji
# extracts the encrypted NRO from Mario Golf: Super Rush
#
# requires Python 3 and the lz4 and unicorn modules

import struct
import lz4.block
from unicorn import *
from unicorn.arm64_const import *

Treeki

use super::enums as gxe;

enum Size {
    Bit4,
    Bit8,
    Bit16,
    Bit32,
}

trait Decode {

Treeki

/* WARNING: Type propagation algorithm not settling */

uint ProduceNewFlowerGenes(ulonglong geneSetA,uint geneSetB)

{
  int iVar1;
  uint outputGene3;
  uint outputGene2;
  ulonglong geneSetA_;

Treeki

#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>

// munged from https://github.com/simontime/Resead

namespace sead
{
class Random
{

Treeki

# savefile decrypter for Animal Crossing: New Horizons
# copyright Ash Wolf (Ninji) 2020

import struct, binascii, sys, Crypto.Cipher.AES, Crypto.Util.Counter

if len(sys.argv) != 4:
	print('Usage: %s [main.dat] [mainHeader.dat] [output.dat]' % sys.argv[0])
	sys.exit()

class SeadRandom:

Treeki

import json
with open('/Users/ash/src/psion/all_exports.json', 'r') as f:
	all_exports = json.load(f)
del all_exports['EKERN'] #not valid for Windermere
  
def get_pascal_string(addr):
	count = Byte(addr)
	return ''.join([chr(Byte(addr + 1 + x)) for x in range(count)])

def scan_file(path, safepath, addr, size):

Treeki

import binascii, struct, zlib
 
key = b'Ti92T_77Zij_MiTik'
 
def decrypt_pkt(buf):
    a = buf[:2]
    b = buf[10:12]
 
    if buf[8] == 1:
        raise 'gzipped!!'

Treeki

Keybase proof

I hereby claim:

• I am treeki on github.
• I am ninji (https://keybase.io/ninji) on keybase.
• I have a public key ASA14uVhXUBlklIXELI8OKbNzPAvJnyCI-mlCKTdBtHQbAo

To claim this, I am signing this object:

Treeki

Notifications from Mouse:

08 02 x :: sends message with wParam 8, lParam x to GUI
08 01 x :: sends message with wParam 9, lParam x to GUI
08 06 x :: sends message with wParam 0xA, lParam x to GUI
08 09 __ 01 __ 04 :: sends message with wParam 0xB, lParam 0 to GUI
08 09 __ 01 __ 08 :: sends message with wParam 0xB, lParam 1 to GUI
08 09 __ 01 __ 02 :: sends message with wParam 0xB, lParam 2 to GUI
08 09 __ 02 __ 00 :: sends message with wParam 0xB, lParam 3 to GUI
08 09 __ 06 __ __ :: sends message with wParam 0xB, lParam 4 to GUI

Treeki

# runs under Python 2 (yes, I know...)
# required modules: pip install unicorn pefile
# this code is made available under the MIT license, as follows:

# Copyright (c) 2018 Ash Wolf

# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the "Software"), to deal
# in the Software without restriction, including without limitation the rights
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell