فك ترميز ملفات الفيديو دون الحاجة إلى التقاط الصور من الفيديوهات التي يتم تشغيلها....

i think you should be start from this symetric encryption for this file :
"did" : "670525fa4a9abd431354d0ab",
"enc" : "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",

"key" : "hlC/l+8DEmMyxc9c7tnK6vynoD8omTnIBAcHL6vj/OQ=",

{ "did" : "670525fa4a9abd431354d0ab", "enc" : "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", "key" : "hlC/l+8DEmMyxc9c7tnK6vynoD8omTnIBAcHL6vj/OQ=" }

01137AA2 | 8B47 54 | mov eax,dword ptr ds:[edi+54] | 01137AA5 | 99 | cdq | 01137AA6 | F77D E8 | idiv dword ptr ss:[ebp-18] | 01137AA9 | 8B45 0C | mov eax,dword ptr ss:[ebp+C] | 01137AAC | 32D1 | xor dl,cl | this is the next XOR key 01137AAE | 8B4D F0 | mov ecx,dword ptr ss:[ebp-10] | 01137AB1 | 301403 | xor byte ptr ds:[ebx+eax],dl | this decrypts data 01137AB4 | 43 | inc ebx | 01137AB5 | FF47 54 | inc dword ptr ds:[edi+54] | 01137AB8 | 3BD9 | cmp ebx,ecx | 01137ABA | 7C 84 | jl spotplayer.1137A40 |

EDX = 00000000 => 0000009A EDX = 00000001 => 000000A7 EDX = 00000002 => 000000D8 EDX = 00000003 => 0000001F EDX = 00000004 => 00000077 EDX = 00000005 => 000000EF EDX = 00000006 => 000000B1 EDX = 00000007 => 00000052 EDX = 00000008 => 00000093 EDX = 00000009 => 00000097 EDX = 0000000A => 00000035 EDX = 0000000B => 000000D7 EDX = 0000000C => 00000019 EDX = 0000000D => 0000009E EDX = 0000000E => 000000E8 EDX = 0000000F => 00000097 EDX = 00000010 => 00000050 EDX = 00000011 => 000000F1 EDX = 00000012 => 000000B8 EDX = 00000013 => 000000E5 EDX = 00000014 => 000000DC EDX = 00000015 => 00000006 EDX = 00000016 => 0000007B EDX = 00000017 => 00000098 EDX = 00000018 => 00000008 EDX = 00000019 => 000000FF EDX = 0000001A => 000000A4 EDX = 0000001B => 00000095 EDX = 0000001C => 00000052 EDX = 0000001D => 00000036 EDX = 0000001E => 00000062 EDX = 0000001F => 000000B4 EDX = 00000020 => 0000004C EDX = 00000021 => 00000071 EDX = 00000022 => 000000F8 EDX = 00000023 => 00000092 EDX = 00000024 => 0000001F EDX = 00000025 => 0000009D EDX = 00000026 => 000000D4 EDX = 00000027 => 00000075 EDX = 00000028 => 00000045 EDX = 00000029 => 000000A2 EDX = 0000002A => 00000094 EDX = 0000002B => 00000031 EDX = 0000002C => 00000038 EDX = 0000002D => 000000FE EDX = 0000002E => 0000000C EDX = 0000002F => 0000007D EDX = 00000030 => 00000087 EDX = 00000031 => 000000DB EDX = 00000032 => 0000005E EDX = 00000033 => 000000CE EDX = 00000034 => 0000005A EDX = 00000035 => 000000DB EDX = 00000036 => 00000093 EDX = 00000037 => 0000007D EDX = 00000038 => 000000D5 EDX = 00000039 => 000000E3 EDX = 0000003A => 00000076 EDX = 0000003B => 0000004B EDX = 0000003C => 000000F1 EDX = 0000003D => 0000007F EDX = 0000003E => 000000D6 EDX = 0000003F => 0000008F EDX = 00000040 => 000000E8 EDX = 00000041 => 000000D0 EDX = 00000042 => 00000097 EDX = 00000043 => 0000002A EDX = 00000044 => 00000068 EDX = 00000045 => 000000D6 EDX = 00000046 => 00000037 EDX = 00000047 => 00000060 EDX = 00000048 => 000000B6 EDX = 00000049 => 00000088 EDX = 0000004A => 000000F1 EDX = 0000004B => 000000B4 EDX = 0000004C => 0000004D EDX = 0000004D => 000000DA EDX = 0000004E => 00000091 EDX = 0000004F => 000000FE EDX = 00000050 => 000000B2

.text:004A4AEF 8B 47 64 mov eax, [edi+64h] .text:004A4AF2 99 cdq .text:004A4AF3 F7 7D E8 idiv [ebp+var_18] .text:004A4AF6 8B 45 0C mov eax, [ebp+arg_4_buffer] .text:004A4AF9 32 D1 xor dl, cl ;------ this is the next XOR key .text:004A4AFB B9 7F 00 00 00 mov ecx, 7Fh .text:004A4B00 30 14 03 xor [ebx+eax], dl ;<----- this decrypts data .text:004A4B03 43 inc ebx .text:004A4B04 FF 47 64 inc dword ptr [edi+64h] .text:004A4B07 8B 47 64 mov eax, [edi+64h] .text:004A4B0A 3B 5D F0 cmp ebx, [ebp+buffer_size] .text:004A4B0D 7C 84 jl short loop_xor_all_bytes

.text:00000001400B5910 69 C2 FB 00 00 00 imul eax, edx, 0FBh .text:00000001400B5916 2B C8 sub ecx, eax .text:00000001400B5918 41 32 C8 xor cl, r8b <--- calculate next XOR key .text:00000001400B591B 41 30 0F xor [r15], cl <--- decrypt next byte