ZenHAX

Free Game Research Forum | Official QuickBMS support | twitter @zenhax | SSL HTTPS://zenhax.com
It is currently Mon Jan 27, 2020 12:23 am

All times are UTC




Post new topic  Reply to topic  [ 11 posts ] 
Author Message
PostPosted: Fri Dec 14, 2018 10:46 pm 
User avatar

Joined: Fri Apr 20, 2018 12:41 am
Posts: 466
I want to view Angry Birds GO and Transformers save data files outside the game, but the files are encrypted in some way, the header isn't always the same and constantly changes when the game writes or reads to them. I'm guessing they are encrypted with XXTEA as I found a ton of mentions of XXTEA multiple times in the game libraries when mentioning save data, any advice on finding the encryption key or will someone do so? If so thanks so much. I also have a dump of lots of memory addresses if that helps... https://pastebin.com/n7m5Rxkb


Attachments:
SaveDataABGO.zip [27.83 KiB]
Downloaded 102 times

_________________
Hacking Angry Birds since 2016
Top
   
PostPosted: Sun Aug 11, 2019 4:33 pm 
User avatar

Joined: Fri Apr 20, 2018 12:41 am
Posts: 466
I tried to make the game debuggable on ABGO v1 but it crashes when I try, other versions are fine but I cannot get anywhere with debugging it... Oh yeah, I'm on Android BTW.

_________________
Hacking Angry Birds since 2016


Top
   
PostPosted: Wed Dec 25, 2019 10:14 am 

Joined: Sun Aug 17, 2014 5:50 pm
Posts: 24
Angry Birds Go! and Transformers Tools.
Converts files back and forth:
save.dat <-> .xml
XOX2 <-> .xml
AnalyticsSave.xds <-> .json
encrypts and decrypts json files

Use command-line options quickbms.exe -o -C <script.BMS> <input_archive/folder> [output_folder] if you don't want to confirm permission every time.
Attachment:
Angry_Birds_GO_Transformers_v1.1.bms [17.97 KiB]
Downloaded 49 times


Last edited by ssh on Fri Dec 27, 2019 5:35 am, edited 3 times in total.

Top
   
PostPosted: Thu Dec 26, 2019 8:42 pm 
User avatar

Joined: Fri Apr 20, 2018 12:41 am
Posts: 466
Holy crap dude, thank you so much! I already almost know the XOXx format, viewtopic.php?f=9&t=9042&p=41337

_________________
Hacking Angry Birds since 2016


Top
   
PostPosted: Thu Dec 26, 2019 8:54 pm 
User avatar

Joined: Fri Apr 20, 2018 12:41 am
Posts: 466
Doesn't work for this V1 savegame (ABGO).

Code:
Error: the requested amount of bytes to allocate is negative (0xe7011508)

Last script line before the error or that produced the error:
  18  clog MEMORY_FILE10 0x2C ZSIZE SIZE 0 XSIZE
 


Attachments:
ABGO_OLDSAVES.zip [8.18 KiB]
Downloaded 35 times

_________________
Hacking Angry Birds since 2016
Top
   
PostPosted: Fri Dec 27, 2019 2:57 am 

Joined: Sun Aug 17, 2014 5:50 pm
Posts: 24


Last edited by ssh on Sat Dec 28, 2019 7:12 pm, edited 1 time in total.

Top
   
PostPosted: Fri Dec 27, 2019 7:36 am 
User avatar

Joined: Fri Apr 20, 2018 12:41 am
Posts: 466
Thank you, now I can see ABGO savedata from V1.

_________________
Hacking Angry Birds since 2016


Top
   
PostPosted: Fri Dec 27, 2019 7:56 pm 
User avatar

Joined: Fri Apr 20, 2018 12:41 am
Posts: 466
For Angry Birds: Transformers, "Experience" internally refers to Pigs and "Prestige" refers to Plasma similarly.

_________________
Hacking Angry Birds since 2016


Top
   
PostPosted: Fri Dec 27, 2019 9:10 pm 
User avatar

Joined: Fri Apr 20, 2018 12:41 am
Posts: 466
The script works fine on all my savegame DATs for Angry Birds: Transformers, however fails to rip JSON data from the file below one of my savegames for ABT. UPDATE: Ignore map.xml, I deserialized it fine, I must've misplaced my manual deserialized version in the original XML directory. This script also decrypts deviceconfig JSONs/TXTs too from ABGO from random testing, Rovio got lazy and likely used the same encryption key and compression (https://www.zenhax.com/viewtopic.php?f=9&t=9048 is where I started to ask).


Attachments:
analyticssave.xds.txt [6.69 KiB]
Downloaded 24 times

_________________
Hacking Angry Birds since 2016
Top
   
PostPosted: Sat Dec 28, 2019 7:11 pm 

Joined: Sun Aug 17, 2014 5:50 pm
Posts: 24
@LolHacksRule
Remove the .txt extension or add new condition in the script. Initially, script was separate for each file (save_guest.dat, AnalyticsSave.xds, .json files in the deviceconfigs folder and .xml files with XOX2 header) I just combined them into one.
eligo.xml is also a json format just with .xml extension for some reason, and encryption key for save and .json file is different.


Top
   
PostPosted: Sun Dec 29, 2019 12:02 am 
User avatar

Joined: Fri Apr 20, 2018 12:41 am
Posts: 466
Oh ok

_________________
Hacking Angry Birds since 2016


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 11 posts ] 

All times are UTC


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited