The young monkey Mobile Games package.was

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
ghost
Posts: 54
Joined: Tue Aug 19, 2014 10:30 am

The young monkey Mobile Games package.was

Post by ghost »

The young monkey Mobile Games package.was

package.was
sample:https://mega.nz/#!C08nXQIa!230-A-8Ozgr1fZpHvRis3LZj9gVMGA9pbH0lPwPc3tw
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: The young monkey Mobile Games package.was

Post by aluigi »

Unknown compression algorithm, so no useful extraction.
Ekey
Posts: 1383
Joined: Sat Aug 09, 2014 2:34 pm

Re: The young monkey Mobile Games package.was

Post by Ekey »

Game name?
ghost
Posts: 54
Joined: Tue Aug 19, 2014 10:30 am

Re: The young monkey Mobile Games package.was

Post by ghost »

Ekey wrote:Game name?

Game site:http://xy.youzu.com/
Ekey
Posts: 1383
Joined: Sat Aug 09, 2014 2:34 pm

Re: The young monkey Mobile Games package.was

Post by Ekey »

Encrypted with XXTea

Code: Select all

      v10 = (cocos2d::FileUtils *)cocos2d::FileStorage::setXXTEAKey(v9, "27efb289-bc7f-3636-ae74-e747b1bea17c", 36);
      v21 = (unsigned __int8 *)cocos2d::FileStorage::getXXTEAKey(v20);
      v22 = cocos2d::FileStorage::getXXTEAKeyLen(*(cocos2d::FileStorage **)(v6 + 32));
      v23 = xxtea_decrypt((unsigned __int8 *)v19, v18, v21, v22, (unsigned int *)&destLen);
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: The young monkey Mobile Games package.was

Post by aluigi »

xxtea uses a key composed by 4 integers of 32bit (16 bytes in total), if you have the final key may be possible to put it in a script on the fly.
Ekey
Posts: 1383
Joined: Sat Aug 09, 2014 2:34 pm

Re: The young monkey Mobile Games package.was

Post by Ekey »

Here source's. Works fine. Maybe make additional encryption algorithm for QuickBMS - something like cocos_crypt :)?
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: The young monkey Mobile Games package.was

Post by aluigi »