search

brianpow / mitmproxy-addon-rockman-x-dive

GNU General Public License v3.0
0 stars 0 forks source link

About further research #1

Open s099064146 opened 1 year ago

s099064146 commented 1 year ago

May I ask how to dig into the source code of this game and get future info on the operation or design? Besides, is there any way to get this game's model (Weapon, Character, ...etc.)? Thanks for your help in advance!

brianpow commented 1 year ago

You need to have some knowledge in assembly. The game is based on unity engine so you can look into libil2cpp.so and global-metadata.dat (for android version)

All model files are being listed in abconfig, but they are encrypted using xor encryption. You may brute force to decrypt them easily (*each file uses different key)

s099064146 commented 1 year ago

Thanks a lot for your reply!!

  1. Could you please give me an example of a decryption script in python? (I tried to use "quickbms" when I searched google, but I failed to understand how it works)

  2. By the way, do you have any idea how to get the info in the shop (Like the items in Rush store, Eddie's Shop)?

Thank you so much again for your reply. I really appreciated it.

s099064146 commented 1 year ago

May I ask how did you bypass the certification of the app?

When I try to connect my local PC with my android phone (through proxy setting manually), the app's network will be shut down with a warning "unauthorized network".

(It can ideally get my web browser's traffic, but only the android app will pop out that warning and reject my connection.)

(I have searched on Google, and some websites said I should root my device and set the certificate as a system certificate. I am not sure if it actually works. Could you please provide me with your solution to this situation?)

brianpow commented 1 year ago

Afaik, there is no bms script for this game.

For items in shop, you may run this decryption script when vising the shop. It should give you the details.

To bypass the certificate, you have to root your phone. The website of mitmproxy has the details. Just follow the steps and should work.