ZenHAX

Free Game Research Forum | Official QuickBMS support | twitter @zenhax | SSL HTTPS://zenhax.com
It is currently Sat Dec 15, 2018 11:52 am

All times are UTC




Post new topic  Reply to topic  [ 12 posts ] 
Author Message
PostPosted: Sat Dec 09, 2017 11:01 am 

Joined: Sat Dec 09, 2017 10:53 am
Posts: 15
Hi all,

Thanks to luigi for his great work :)

i've tried many script to decrypt this file but nothing.

Any help will be really great.

Regards.


Attachments:
File comment: csv file crypted with xxtea
stage.csv [80.27 KiB]
Downloaded 69 times
Top
   
PostPosted: Sat Dec 09, 2017 11:04 am 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 9473
Name of the game/software?


Top
   
PostPosted: Sat Dec 09, 2017 11:07 am 

Joined: Sat Dec 09, 2017 10:53 am
Posts: 15
Hi,

Thank you very much for your quick response.

the game is word charm , built with coco2d.

Need the apk ?

Regards.


Top
   
PostPosted: Sat Dec 09, 2017 12:06 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 9473
If someone will work on that, he needs at least the lib that contains the xxtea key


Top
   
PostPosted: Mon Dec 11, 2017 8:17 am 

Joined: Sat Dec 09, 2017 10:53 am
Posts: 15
Hi ,

i upload the libgame.so to ida and search xxtea and found this :

_DWORD __fastcall cocos2d::CCLuaStack::setXXTEAKeyAndSign(size_t size, const char *, int, const char *, int)
EXPORT _ZN7cocos2d10CCLuaStack18setXXTEAKeyAndSignEPKciS2_i
ZN7cocos2d10CCLuaStack18setXXTEAKeyAndSignEPKciS2_i

I don't know how to use it.

Luigi, did you need the libgame.so file ?

Thanks for help.

Regards.


Top
   
PostPosted: Tue Dec 12, 2017 8:06 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 9473
I guess the key is "8VVTJ-UC2R1" but the xxtea_decrypt functions available online fail miserably for some unknown reasons, didn't investigate.


Top
   
PostPosted: Wed Dec 13, 2017 8:03 am 

Joined: Sat Dec 09, 2017 10:53 am
Posts: 15
Hi,

Thank you for your help.

did you have any script ( quickbms ) that can be used to decrypt this ?

Regards


Top
   
PostPosted: Wed Dec 13, 2017 10:52 am 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 9473
no


Top
   
PostPosted: Mon Jan 15, 2018 2:38 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 9473
http://aluigi.org/bms/word_charm.bms


Top
   
PostPosted: Mon Jan 15, 2018 5:31 pm 

Joined: Sat Dec 09, 2017 10:53 am
Posts: 15
Hi man,

Thank you very much . it work like a charm :)


Top
   
PostPosted: Sun Sep 16, 2018 3:42 am 

Joined: Thu Aug 23, 2018 5:44 pm
Posts: 17
aluigi wrote:
http://aluigi.org/bms/word_charm.bms

# Word Charm XXTEA decrypter
# script for QuickBMS http://quickbms.aluigi.org

set KEY string "8VVTJ-UC2R1"
encryption xxtea KEY "0x9e3779b9 0" 0 16 # cocos2d

idstring "XXTEA"
savepos OFFSET
get SIZE asize
math SIZE - OFFSET
get NAME filename
log NAME OFFSET SIZE

how to encrypt it again? thank so much


Top
   
PostPosted: Sun Sep 16, 2018 11:10 am 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 9473
Code:
get NAME filename
string NAME + ".encrypt"
set MEMORY_FILE string "XXTEA"
log NAME 0 5 MEMORY_FILE
set KEY string "8VVTJ-UC2R1"
encryption xxtea KEY "0x9e3779b9 0" 1 16    # cocos2d
get SIZE asize
append
log NAME OFFSET SIZE
append


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 12 posts ] 

All times are UTC


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited