ZenHAX

Free Game Research Forum | Official QuickBMS support | twitter @zenhax | SSL HTTPS://zenhax.com
It is currently Tue Aug 14, 2018 8:04 pm

All times are UTC




Post new topic  Reply to topic  [ 10 posts ] 
Author Message
PostPosted: Sat Dec 09, 2017 11:01 am 

Joined: Sat Dec 09, 2017 10:53 am
Posts: 15
Hi all,

Thanks to luigi for his great work :)

i've tried many script to decrypt this file but nothing.

Any help will be really great.

Regards.


Attachments:
File comment: csv file crypted with xxtea
stage.csv [80.27 KiB]
Downloaded 61 times
Top
   
PostPosted: Sat Dec 09, 2017 11:04 am 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 8598
Name of the game/software?


Top
   
PostPosted: Sat Dec 09, 2017 11:07 am 

Joined: Sat Dec 09, 2017 10:53 am
Posts: 15
Hi,

Thank you very much for your quick response.

the game is word charm , built with coco2d.

Need the apk ?

Regards.


Top
   
PostPosted: Sat Dec 09, 2017 12:06 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 8598
If someone will work on that, he needs at least the lib that contains the xxtea key


Top
   
PostPosted: Mon Dec 11, 2017 8:17 am 

Joined: Sat Dec 09, 2017 10:53 am
Posts: 15
Hi ,

i upload the libgame.so to ida and search xxtea and found this :

_DWORD __fastcall cocos2d::CCLuaStack::setXXTEAKeyAndSign(size_t size, const char *, int, const char *, int)
EXPORT _ZN7cocos2d10CCLuaStack18setXXTEAKeyAndSignEPKciS2_i
ZN7cocos2d10CCLuaStack18setXXTEAKeyAndSignEPKciS2_i

I don't know how to use it.

Luigi, did you need the libgame.so file ?

Thanks for help.

Regards.


Top
   
PostPosted: Tue Dec 12, 2017 8:06 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 8598
I guess the key is "8VVTJ-UC2R1" but the xxtea_decrypt functions available online fail miserably for some unknown reasons, didn't investigate.


Top
   
PostPosted: Wed Dec 13, 2017 8:03 am 

Joined: Sat Dec 09, 2017 10:53 am
Posts: 15
Hi,

Thank you for your help.

did you have any script ( quickbms ) that can be used to decrypt this ?

Regards


Top
   
PostPosted: Wed Dec 13, 2017 10:52 am 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 8598
no


Top
   
PostPosted: Mon Jan 15, 2018 2:38 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 8598
http://aluigi.org/bms/word_charm.bms


Top
   
PostPosted: Mon Jan 15, 2018 5:31 pm 

Joined: Sat Dec 09, 2017 10:53 am
Posts: 15
Hi man,

Thank you very much . it work like a charm :)


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 10 posts ] 

All times are UTC


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited