Cracking Symphony

[-Insane-]

Hello.

Me and a few other people on irc are trying to crack the symphony.dll encryption (which is similar to but simpler than harmony.dll).
So far I've decompiled the dll and I'm trying to locate the encryption. I'll post again when I find out more.
For now, I've mirrored the most important files:

Symphony.dll
Symphony.dll in Disassembled ASM
Symphony.dll in Pseudo-C

-Insane

[sli]

Gasp, what decomp did you use? It's one of those ones that just creates assembly that runs inside C.

[hal9000]

he just used REC http://www.backerstreet.com/rec/rec.htm


here's another decompile in pseudo C
http://openkore.pastebin.com/f2d945001

[sli]

Yeah, I figured. Rec doesn't generate helpful code.

[darkfate]

search for "1337" in the pseudo-c decompile which hal9k posted.
that's probaby the encryption function (since it gets a socket as parameter..)

[sli]

This?

Code: Select all

//----- (1000D830) --------------------------------------------------------
int __stdcall sub_1000D830(SOCKET s, char *buf, int len, int flags)
{
  int v4; // edi@1
  int v6; // esi@5
  SOCKET v7; // [sp+Ch] [bp-4h]@2

  v4 = 0;
  if ( len > 0 )
  {
    v7 = s;
    do
    {
      if ( !*(_DWORD *)sub_100011E0((int)&unk_10013C40, (int)&v7) )
        *(_DWORD *)sub_100011E0((int)&unk_10013C40, (int)&v7) = dword_10013C30;
      v6 = (unsigned __int16)(23 * *(_WORD *)sub_100011E0((int)&unk_10013C40, (int)&v7) + 1337);
      *(_DWORD *)sub_100011E0((int)&unk_10013C40, (int)&v7) = v6;
      buf[v4] = *(_BYTE *)sub_100011E0((int)&unk_10013C40, (int)&v7) ^ (unsigned __int8)buf[v4];
      ++v4;
    }
    while ( v4 < len );
  }
  return send(s, buf, len, flags);
}

For some reason that reminds me of TEA.

[-Insane-]

So I was banned from RebirthRO now.. I guess it's war.
I'll probably switch to a different server either way, but I'll keep on developing my RebirthRO bot and packet editors, and give them hell.

Too bad they took away the Kaho-spawning npc, that was hell loads of fun.

Back on topic, I'll try figuring out the encryption function.

-Insane

[jensinx]

any progress yet?
how did you come up with the pseudo c source? what program did you use?

[erok]

hi guys,
any progress on this yet?