Skip to content
View in the app

A better way to browse. Learn more.

ResHax

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
Help us keep the site running.

Idle Heroes 1.18.0.p1 Decrypting Scripts

Featured Replies

  • Author
  • Localization

Arcr0s, posted Mon Jul 22, 2019 1:41 pm (49427)


Hello ZenHax community,

Game Version: 1.18.0.p1

I recently wanted to start working on a bot for one of my favorite games on mobile. I have read some guides online and figuered out that the game runs on Cocos2d and that its lua script files have been encrypted. I loaded the library .so file into ida pro and poked around. The game does not seem to use the typical xxteaSetSignAndKey function but rather CCMagic.get ? I was not able to identify any key that might have been used to encrypt the lua files with xxtea. All encrypted lua files start with the unencrypted string DHGAMES but ofcourse that does not seem to be the key. Any help would be appreciated, I mainly just want to see the scripts to decrypt the packet traffic of the game.

Example of encrypted lua file:

Code:
DHGAMES~x:?iAmw6~??}O[&nwAsi?>i?A7=Aozo?'PQo&??/??uUo?7 ?D?oOU?s?E?o???EDo?IE?o1Y"QYRS}ZI??&2u-OT??E~Enr>ar,Ew???Um j?qE??o
???AJ(|'a:8I "?u|a?Uo]XZz??u$I?aA8')I}Pn?A.?arIp.7"aRa?Y?-?
L??>H?>N?}UyEo|eE?a???yOqs??Iy%1lug?]?uBwea?yAiO?C'oB&POuN?E="?dz%W?T[?Oa-?v<,?o ?ouAK!?d?U"?U'??N-I-b?s6?U'Tao0Z7o?)x??OaRa.yinu *a)C?7??L4Do6?}W8?5&>H "UADo
???0?paU?-i,&?aJ(lLCSEA?c8>"o! AEZs   ?
X AAW'QAT?CU,?U"%??`
[????B?-A?-cqi&a/OpaUO;(a^ iK;?` sA.Iy3A?N"[&aVAAY?:c?   a{Iz?Zhu???sU?za?A=%Ouu|u?EY?VUug E[Q'R ?a <{'c
DioU-N;e?3ElJl%?oR?wUsu?o%y?5ULI?!R>   nuxaaGA>A?A?a"???I:UO?7l   ?q?<DF?h_ayA%iuUS oca1H{p^?aE@?OoN?nt?ltV7LU?quZu O?=?_yQ?U.o?fOO]}8DK=7?H' Au"aa?i???%i5a1uO?sARVOuW>?"Q n ec-<"IClUE?u".U2?c&?"j?%O'U9?*Ooc_E@??o?L>--i?]?:%?>?aUS?> k )ut??\ iga!Z??u*?YDie$
M?uE?'H:?N1"e?(2Cge7R?
'y2s3zaS'??"y?U
A.Jc%xeud <-4:[ ?vh8iSC'?6u?Jizu#?Sn~0?-?y"?>s{Ef(? q>?eAeu?O?cesO"QE%YvEU)sF?ZaU-0VRoUQu[?Eo&?_f?MS?sYA?O?_`?g~l?~y?ha=5yA?oxxI?ENE??o'nMOQ
?l~boO?e|"
?O?2?eeYD-
?T ?((tR)]E''???aNR?-)?[o'cotyGIS\e ?eP)AbQ?Up?"uy"b m?o\o'Bi?|;Eo?'$~U$3?H Ze?jn
-E@ezaO NA#~???W?*6>aX ?bo??Iu?R@I~?z?a/W7ti I?R&r5< GO?j? TSaO8{o>q6

q?AXY?-?<e"A?? ?;za&E?O    o?q?i??a?]AWU?J??Sa?WN??Vz ^2?4S75T:JNUO|d<''?Z*OY|
uZz?~aa?M AI8C?n\3O??a$oc?qh?:uS
?Z%nSNu?vA??j6{o?AucxO@
?wN-a?x??U#J*o:`?UD?@?OuN?0a)'aaN??Lr-?E~?'Ylo   ^' a?coC%dI?MA?a??A=a???>?v?a|AL?e?'8?m?t?_]A?'CSa:&w'IN?? ij2aucuo_xm" ?UAm?E?)5?o~&NBU, cjgG?"eca1?c$"-i'?m'^??sE??AAriOqxmrOy? 7a?Ui?{Ua\?X?SONq?Huo?-ii]"|s=K~?\y Rue?   aa?U?DSWUEEO?!PPU?UM?0p?E!rA
8:Aa??C?"CE?y'y:8dU??$LN'o-A.ql Iua{c>r$EP_!?-'lp%mEIl1?Ro/oI:o?Kq?>'Oo? ?Pd?L?/d'?I-'? 3e,U???w.OU?D?jExne'ACO??WU?aA?`?>I?A.?os2-?E9|fHBeu?%??a'9"_.I?\7Y1?eCz?"o?XU XteuA0?eJ<
FOKc}?- (I?VIoe(Ur7i?Oi?IiaE .%6$H]N"?3h
aue?Z}EAO<i-z`-xxi,Bu$UghJ{??Uf.A"Ao: mE9HGAnFoCYRkbzke?B0]   ???E?a??=Tp'"a5?\??yzdkAe-Unno
?i?]y?O'?z?E?un?i?>:??P{A9"`?e?
E7o5i??b >'"?z??uO~R?p?oC0 ??C?J-?c.oU oc?OC?i-ju'>OOIO?<1ofLN?iCYiO?Y ].?6$L[ZY}cgiUa:?QoNJim?oiY%hEuO2EN as-3?o7H<'l?U?eEB??u|?]?gET%CA>'?zxiaUo~^Ki??Uae4`l??n??R#$iiUa2uPAb?8'yxgm?3Y?AYe?AARY??wnO?UI{?]A%?njevy
  • Author
  • Localization

karas, posted Sat Sep 21, 2019 6:35 am (50833)


Any progress?
  • Author
  • Localization

aluigi, posted Thu Sep 26, 2019 11:29 am (50913)


Better if you upload the original file.
If it's encrypted there is nothing much we can do without spending time reverse engineering the game.
Guest
This topic is now closed to further replies.

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.