Skip to main content
6 votes
Accepted

Decrypting Lua Files

xxtea encrypt with KEY: sxpDM2018 result FightLogic.lua how find the KEY IDA look at Function window press CTRL+F and type xxtea_decrypt. double click first item and scroll up to see cocos2d::...
user29082's user avatar
  • 131
2 votes
Accepted

Need help decrypt xxtea encrypted Lua file from cocos2D game

xxteakey for decrypt lua: aaa xxtea_decrypt function jump to cocos2dx_lua_loader+F6 Press F5 (decompile to pseudocode) void * xxtea_decrypt(const void * data, size_t len, const void * key, size_t * ...
xax's user avatar
  • 311
2 votes

Decrypting Lua Files from game

v5 = (_BYTE *)(*(int (__fastcall **)(cocos2d::CCFileUtils *, const char *, const char *, unsigned int *))(*(_DWORD *)this + 16))( this, a2, "...
Minh Nguyen's user avatar
1 vote

How to decode lua files and resource files that are protected from Frida and IDA64?

As with other cocos2dx games there's a function called xxtea_decrypt which you can see being called via IDA, Ghidra, etc; - the third parameter is the key, s: Going to unk_117E730: The key is as ...
user7290573's user avatar
1 vote

HELP Decrypting Lua files

Update on this : I managed to get through the obfuscated lua files by hooking the luaL_loadbuffer exported function from libengine.so using frida, and managed to dump the game code. After that i built ...
TroPicz MoDzy's user avatar
1 vote
Accepted

How to found signature XTEA for Lua

You can try using the plugin: FindCrypt Available for free on the Hex-Rays website, there is also an implementation that uses yara findcrypt-yara I have tested both and they do the job very well, ...
Happy's user avatar
  • 366
1 vote

Decode lua scripts for cocos2d based game / frida, android

i have done something similar with another game before where i use frida to hook the function luaL_loadbuffer and dump the decrypted lua files from there. i wrote about it here https://github.com/...
Chris Li's user avatar
  • 111
1 vote

Decode lua scripts for cocos2d based game / frida, android

use ida pro or ghidra to find the decryption function. if you attach to the process on a real phone you can hook the xxtea function and the 16 bytes at the 3rd argument pointer will be the key.
guest's user avatar
  • 11
1 vote

Decrypting some possibly XXTEA encrypted lua/game files

Next time please include the original apk in your question. Luckily I'm working on the same game so I can help somewhat. Get the old apk (yzjlzl_2.80_1_20180918_170403_83de83.apk) from bilibili (...
Minh Nguyen's user avatar
1 vote

Finding lua C functions compiled binary

As you said, the Lua engine is embedded directly into the game. It's inside plugins/GameManagerVC.dll (or GameManagerVC64.dll in case of 64-bit). So, first step will be finding out, which version of ...
GAMELASTER's user avatar
1 vote
Accepted

Need help with reverse engineering camera-related information in a video game

After a lot of trial and error, and bits and pieces of the puzzle coming together from a lot of different sources and peoples' help, I'd like to answer my own questions to the extent I feel I'm able ...
dsasmblr's user avatar
  • 2,234
1 vote

Need help with reverse engineering camera-related information in a video game

Question 3 & 4 Answer: To move the camera/player in the direction you're facing you can use this function that works on eular angles. The only addresses you need to find are your current view ...
GuidedHacking's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible