Request: Method for EFS Windows Store titles by kode54 at 9:57 PM EST on February 13, 2018
I'm looking to rip the soundtracks for both ReCore and Super Lucky's Tale, and both are stored on my Windows machine using the Encrypted File System, with a certificate apparently owned by my Windows Store account, locking access to the files to just the Trusted Installer.

Is there some hook or something which could dump the data within these apps, without resorting to files linked from YouTube videos, which may or may not be virus or trojan infected messes?
by Mr.Sanic at 10:15 PM EST on February 13, 2018
Search for some tutorials to uninstall Trusted Installer, sometimes it is annoying.
If it doesn't help, i will do some further research on that.
by Mr.Sanic at 10:18 PM EST on February 13, 2018
You kinda need to go on the file properties, click on security and click "add user" (depends of your windows version) and add your Username that you put in your pc. (example: MyPc_0282)

Then click on "full control" and phew, done.
by kode54 at 11:09 PM EST on February 13, 2018
Full control does nothing if the files are encrypted by another user that you don't have the encryption certificate for.

E: I previously located the encryption certificate in my account folders, but it's encrypted with a password that I do not have. It is not my account password.

edited 11:10 PM EST February 13, 2018

E: I don't even know what you mean by uninstall Trusted Installer. It's a Windows component that is not designed to be removed, and it handles all of the Windows Store installation and launching processes. I would just assume that removing it would prevent all Windows Store apps from even working.

I have the base certificate, which protects the individual files' AES keys, which are stored in an alternate stream alongside the actual encrypted content, but the certificate is password or passphrase or passkey protected, and I assume this key is stored in my Windows Store account somehow.

edited 8:27 PM EST February 14, 2018
by bxaimc at 12:30 PM EST on February 15, 2018
Maybe try UWPDumper?
by kode54 at 9:32 PM EST on February 15, 2018
Thanks for finding that, but just as I try it, the games refuse to launch with the 803f8001 error, so I guess I have to remove and reinstall them to dodge the EFS certificate being lost or something.

E: Probably uses a machine key for the passkey to the encryption, and my rejiggering my virtual machines, including having redone the UEFI/OVMF NVRAM (OVMF_VARS.fd), probably had something to do with breaking those titles. Oh well, another 24GB to download...

edited 10:12 PM EST February 15, 2018
by Sir-Sabin at 4:34 PM EST on February 16, 2018
some group claims they crack the ump and drm in games on the MS store, dunno if this is real or faked, i dunno

Link


Go to Page 0

Search this thread

Show all threads

Reply to this thread:

User Name Tags:

bold: [b]bold[/b]
italics: [i]italics[/i]
emphasis: [em]emphasis[/em]
underline: [u]underline[/u]
small: [small]small[/small]
Link: [url=http://www.google.com]Link[/url]

[img=https://www.hcs64.com/images/mm1.png]
Password
Subject
Message

HCS Forum Index
Halley's Comet Software
forum source