Hexing help, Version string location

asianpolarbear · 2013-08-27T23:09:39.000Z

I've followed the Yogda guide to hexing and tried it another method via rabcdasm however I can't find the actual string where the version number is stored If anyone could point me towards the true location of the Version string I'l be gratefull. I have checked the the Parameters.class and no luck :| God damn Obfuscation

Originally Posted by IziLife

HEXING :

\RABCDAsm_v1.13\xxxx-1\com\company\assembleegameclient\parameters

-Parameters.class.asasm

Code:

    findproperty        QName(PackageNamespace(""), "_q7")
    pushstring          "15"

Code:

    findproperty        QName(PackageNamespace(""), "_q7")
    pushstring          "16.1"

or

xx = version

Code:

    findproperty        QName(PackageNamespace(""), "_q7")
    pushstring          "xx"

Or simply use Yogda ..

you should really change both instances, not just one.

Highlighted RED

class
refid "com.company.assembleegameclient.parameters:Pa rame ters"
instance QName(PackageNamespace("com.company.assembleegamec lient.parameters"), "Parameters")
extends QName(PackageNamespace("", "#0"), "Object")
flag SEALED
flag PROTECTEDNS
protectedns ProtectedNamespace("_-1WH")
iinit
refid "com.company.assembleegameclient.parameters:Pa rame ters/instance/init"
body
maxstack 3
localcount 3
initscopedepth 4
maxscopedepth 5
code
pushfalse
pushtrue
swap
jump L10

pushscope

bitor
add
convert_o
multiply_i
popscope
L10:
setlocal1

setlocal2

getlocal0
pushscope

getlocal2
dup
iftrue L20

pop
getlocal1
convert_b
L20:
iffalse L23

getlocal0
constructsuper 0

L23:
returnvoid
end ; code
end ; body
end ; method
end ; instance
cinit
refid "com.company.assembleegameclient.parameters:Pa rame ters/class/init"
body
maxstack 5
localcount 3
initscopedepth 3
maxscopedepth 4
code
pushfalse
pushtrue
setlocal1

jump L10

multiply
pushtrue
rshift
decrement_i
increment
nextname
L10:
setlocal2

getlocal0
pushscope

findproperty QName(PackageNamespace("", "#0"), "_-1U4")
pushstring "16" <<<<<<<<<<<<<<<<<<<<<<
initproperty QName(PackageNamespace("", "#0"), "_-1U4")

findproperty QName(PackageNamespace("", "#0"), "_-hd")
pushstring "0"
initproperty QName(PackageNamespace("", "#0"), "_-hd")

findproperty QName(PackageNamespace("", "#0"), "_-1Ex")
pushtrue
initproperty QName(PackageNamespace("", "#0"), "_-1Ex")

getlocal2
dup
iffalse L28

pop
getlocal0
convert_b
L28:
iftrue L44

findproperty QName(PackageNamespace("", "#0"), "_-0UK")
pushshort 2050
initproperty QName(PackageNamespace("", "#0"), "_-0UK")

findproperty QName(PackageNamespace("", "#0"), "_-17b")
pushfalse
initproperty QName(PackageNamespace("", "#0"), "_-17b")

findproperty QName(PackageNamespace("", "#0"), "_-0zL")
pushint 10944349
initproperty QName(PackageNamespace("", "#0"), "_-0zL")

findproperty QName(PackageNamespace("", "#0"), "_-1W1")
pushint 16572160
initproperty QName(PackageNamespace("", "#0"), "_-1W1")

findproperty QName(PackageNamespace("", "#0"), "_-fx")
pushdouble 0.003
initproperty QName(PackageNamespace("", "#0"), "_-fx")

L44:
findproperty QName(PackageNamespace("", "#0"), "_-0Yd")
pushbyte 20
initproperty QName(PackageNamespace("", "#0"), "_-0Yd")

findproperty QName(PackageNamespace("", "#0"), "_-0TX")
pushstring ""
initproperty QName(PackageNamespace("", "#0"), "_-0TX")

getlocal2
dup
iffalse L56

pop
getlocal1
convert_b
L56:
iftrue L153

findproperty QName(PackageNamespace("", "#0"), "_-qp")
pushstring "*Client*"
initproperty QName(PackageNamespace("", "#0"), "_-qp")

findproperty QName(PackageNamespace("", "#0"), "_-1da")
pushstring "*Error*"
initproperty QName(PackageNamespace("", "#0"), "_-1da")

findproperty QName(PackageNamespace("", "#0"), "_-01L")
pushstring "*Help*"
initproperty QName(PackageNamespace("", "#0"), "_-01L")

getlocal1
iffalse L134

findproperty QName(PackageNamespace("", "#0"), "_-kB")
pushstring "*Guild*"
initproperty QName(PackageNamespace("", "#0"), "_-kB")

findproperty QName(PackageNamespace("", "#0"), "_-1N6")
pushshort 1000
initproperty QName(PackageNamespace("", "#0"), "_-1N6")

findproperty QName(PackageNamespace("", "#0"), "_-0bf")
pushshort 1000
initproperty QName(PackageNamespace("", "#0"), "_-0bf")

getlocal2
dup
iffalse L83

pop
getlocal0
convert_b
L83:
iftrue L231

findproperty QName(PackageNamespace("", "#0"), "data_")
pushnull
setproperty QName(PackageNamespace("", "#0"), "data_")

findproperty QName(PackageNamespace("", "#0"), "_-19T")
pushbyte 1
setproperty QName(PackageNamespace("", "#0"), "_-19T")

findproperty QName(PackageNamespace("", "#0"), "_-Eg")
pushbyte 0
setproperty QName(PackageNamespace("", "#0"), "_-Eg")

findproperty QName(PackageNamespace("", "#0"), "_-MZ")
pushtrue
setproperty QName(PackageNamespace("", "#0"), "_-MZ")

findproperty QName(PackageNamespace("", "#0"), "_-1Sn")
pushfalse
setproperty QName(PackageNamespace("", "#0"), "_-1Sn")

findproperty QName(PackageNamespace("", "#0"), "_-0NH")
pushfalse
setproperty QName(PackageNamespace("", "#0"), "_-0NH")

findproperty QName(PackageNamespace("", "#0"), "_-1Rd")
pushtrue
setproperty QName(PackageNamespace("", "#0"), "_-1Rd")

getlocal2
dup
iffalse L118

pop
jump L116

dup
lshift
convert_b
urshift
checkfilter
popscope
L116:
getlocal2
convert_b
L118:
iftrue L134

findproperty QName(PackageNamespace("", "#0"), "_-17O")
pushbyte 255
initproperty QName(PackageNamespace("", "#0"), "_-17O")

findproperty QName(PackageNamespace("", "#0"), "_-0zH")
pushbyte 254
initproperty QName(PackageNamespace("", "#0"), "_-0zH")

findproperty QName(PackageNamespace("", "#0"), "_-1Pn")
pushbyte 253
initproperty QName(PackageNamespace("", "#0"), "_-1Pn")

findproperty QName(PackageNamespace("", "#0"), "_-4J")
pushbyte 250
initproperty QName(PackageNamespace("", "#0"), "_-4J")

findproperty QName(PackageNamespace("", "#0"), "_-1JU")
pushbyte 18
initproperty QName(PackageNamespace("", "#0"), "_-1JU")

L134:
findproperty QName(PackageNamespace("", "#0"), "_-1Mn")
pushstring "https://www.kabam.com/corporate/terms-of-service"
initproperty QName(PackageNamespace("", "#0"), "_-1Mn")

findproperty QName(PackageNamespace("", "#0"), "_-Vs")
pushstring "https://www.kabam.com/corporate/privacy-policy"
initproperty QName(PackageNamespace("", "#0"), "_-Vs")

getlocal1
dup
iftrue L146

pop
getlocal2
convert_b
L146:
iffalse L153

findproperty QName(PackageNamespace("", "#0"), "RANDOM1")
pushstring "311f80691451c71b09a13a2a6e"
initproperty QName(PackageNamespace("", "#0"), "RANDOM1")

findproperty QName(PackageNamespace("", "#0"), "RANDOM2")
pushstring "72c5583cafb6818995cbd74b80"
initproperty QName(PackageNamespace("", "#0"), "RANDOM2")

L153:
findproperty QName(PackageNamespace("", "#0"), "_-1M8")
pushstring "-----BEGIN PUBLIC KEY-----\n"
getlocal1
dup
iftrue L161

pop
getlocal0
convert_b
L161:
iffalse L217

pushstring "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEmgEmQ cgLd 0mvWqL6AKmhzj"
getlocal2
dup
iffalse L169

pop
getlocal2
convert_b
L169:
iftrue L225

add
getlocal1
dup
iftrue L177

pop
getlocal2
convert_b
L177:
iffalse L217

pushstring "JfZoAmZC0PUmG8K9CB1Ml68P00S3eU+TSL5aG8Mg3Tipv s02g C2veC10knRi7r"
getlocal2
dup
iffalse L185

pop
getlocal2
convert_b
L185:
iftrue L202

add
getlocal1
dup
iftrue L193

pop
getlocal2
convert_b
L193:
iffalse L230

pushstring "EsUwL8+h22EsjnpKZ/7K5YV9cefryTMnS0x4QGZbSkdPz/rLh0uGwk8Zu0cEKb"
getlocal1
dup
iftrue L201

pop
getlocal2
convert_b
L201:
iffalse L229

L202:
add
getlocal1
dup
iftrue L216

pop
getlocal2
jump L215

hasnext
getlocal0
decrement_i
pushscope

decrement_i
multiply
L215:
convert_b
L216:
iffalse L228

L217:
pushstring "xQyvd3+pSmqZ5/ZQGaFjm9TQIDAQAB\n"
getlocal1
dup
iftrue L224

pop
getlocal2
convert_b
L224:
iffalse L229

L225:
add
getlocal1
iffalse L230

L228:
pushstring "-----END PUBLIC KEY-----"
L229:
add
L230:
initproperty QName(PackageNamespace("", "#0"), "_-1M8")

L231:
findproperty QName(PrivateNamespace("*", "com.company.assembleegameclient.parameters:Pa rame ters/class#0"), "_-LP")
pushnull
setproperty QName(PrivateNamespace("*", "com.company.assembleegameclient.parameters:Pa rame ters/class#0"), "_-LP")

findproperty QName(PrivateNamespace("*", "com.company.assembleegameclient.parameters:Pa rame ters/class#0"), "_-1dp")
findpropstrict QName(PackageNamespace("flash.utils"), "Dictionary")
constructprop QName(PackageNamespace("flash.utils"), "Dictionary"), 0
setproperty QName(PrivateNamespace("*", "com.company.assembleegameclient.parameters:Pa rame ters/class#0"), "_-1dp")

returnvoid
end ; code
end ; body
end ; method
trait const QName(PackageNamespace("", "#0"), "_-1U4") slotid 1 type QName(PackageNamespace("", "#0"), "String") value Utf8("16") end <<<<<<<<<<<<<<<<<<
trait const QName(PackageNamespace("", "#0"), "_-hd") slotid 2 type QName(PackageNamespace("", "#0"), "String") value Utf8("0") end
trait const QName(PackageNamespace("", "#0"), "_-1Ex") slotid 3 type QName(PackageNamespace("", "#0"), "Boolean") value True() end
trait const QName(PackageNamespace("", "#0"), "_-0UK") slotid 4 type QName(PackageNamespace("", "#0"), "int") value Integer(2050) end
trait const QName(PackageNamespace("", "#0"), "_-17b") slotid 5 type QName(PackageNamespace("", "#0"), "Boolean") value False() end
trait const QName(PackageNamespace("", "#0"), "_-0zL") slotid 6 type QName(PackageNamespace("", "#0"), "uint") value Integer(10944349) end
trait const QName(PackageNamespace("", "#0"), "_-1W1") slotid 7 type QName(PackageNamespace("", "#0"), "uint") value Integer(16572160) end
trait slot QName(PackageNamespace("", "#0"), "root") slotid 8 type QName(PackageNamespace("flash.display"), "DisplayObject") end
trait const QName(PackageNamespace("", "#0"), "_-fx") slotid 9 type QName(PackageNamespace("", "#0"), "Number") value Double(0.003) end
trait const QName(PackageNamespace("", "#0"), "_-0Yd") slotid 10 type QName(PackageNamespace("", "#0"), "int") value Integer(20) end
trait const QName(PackageNamespace("", "#0"), "_-0TX") slotid 11 type QName(PackageNamespace("", "#0"), "String") value Utf8("") end
trait const QName(PackageNamespace("", "#0"), "_-qp") slotid 12 type QName(PackageNamespace("", "#0"), "String") value Utf8("*Client*") end
trait const QName(PackageNamespace("", "#0"), "_-1da") slotid 13 type QName(PackageNamespace("", "#0"), "String") value Utf8("*Error*") end
trait const QName(PackageNamespace("", "#0"), "_-01L") slotid 14 type QName(PackageNamespace("", "#0"), "String") value Utf8("*Help*") end
trait const QName(PackageNamespace("", "#0"), "_-kB") slotid 15 type QName(PackageNamespace("", "#0"), "String") value Utf8("*Guild*") end
trait const QName(PackageNamespace("", "#0"), "_-1N6") slotid 16 type QName(PackageNamespace("", "#0"), "int") value Integer(1000) end
trait const QName(PackageNamespace("", "#0"), "_-0bf") slotid 17 type QName(PackageNamespace("", "#0"), "int") value Integer(1000) end
trait slot QName(PackageNamespace("", "#0"), "data_") slotid 18 type QName(PackageNamespace("", "#0"), "Object") value Null() end
trait slot QName(PackageNamespace("", "#0"), "_-19T") slotid 19 type QName(PackageNamespace("", "#0"), "int") value Integer(1) end
trait slot QName(PackageNamespace("", "#0"), "_-Eg") slotid 20 type QName(PackageNamespace("", "#0"), "int") value Integer(0) end
trait slot QName(PackageNamespace("", "#0"), "_-MZ") slotid 21 type QName(PackageNamespace("", "#0"), "Boolean") value True() end
trait slot QName(PackageNamespace("", "#0"), "_-1Sn") slotid 22 type QName(PackageNamespace("", "#0"), "Boolean") value False() end
trait slot QName(PackageNamespace("", "#0"), "_-0NH") slotid 23 type QName(PackageNamespace("", "#0"), "Boolean") value False() end
trait slot QName(PackageNamespace("", "#0"), "_-1Rd") slotid 24 type QName(PackageNamespace("", "#0"), "Boolean") value True() end
trait const QName(PackageNamespace("", "#0"), "_-17O") slotid 25 type QName(PackageNamespace("", "#0"), "int") value Integer(-1) end
trait const QName(PackageNamespace("", "#0"), "_-0zH") slotid 26 type QName(PackageNamespace("", "#0"), "int") value Integer(-2) end
trait const QName(PackageNamespace("", "#0"), "_-1Pn") slotid 27 type QName(PackageNamespace("", "#0"), "int") value Integer(-3) end
trait const QName(PackageNamespace("", "#0"), "_-4J") slotid 28 type QName(PackageNamespace("", "#0"), "int") value Integer(-6) end
trait const QName(PackageNamespace("", "#0"), "_-1JU") slotid 29 type QName(PackageNamespace("", "#0"), "Number") value Integer(18) end
trait const QName(PackageNamespace("", "#0"), "_-1Mn") slotid 30 type QName(PackageNamespace("", "#0"), "String") value Utf8("https://www.kabam.com/corporate/terms-of-service") end
trait const QName(PackageNamespace("", "#0"), "_-Vs") slotid 31 type QName(PackageNamespace("", "#0"), "String") value Utf8("https://www.kabam.com/corporate/privacy-policy") end
trait const QName(PackageNamespace("", "#0"), "RANDOM1") slotid 32 type QName(PackageNamespace("", "#0"), "String") value Utf8("311f80691451c71b09a13a2a6e") end
trait const QName(PackageNamespace("", "#0"), "RANDOM2") slotid 33 type QName(PackageNamespace("", "#0"), "String") value Utf8("72c5583cafb6818995cbd74b80") end
trait const QName(PackageNamespace("", "#0"), "_-1M8") slotid 34 type QName(PackageNamespace("", "#0"), "String") end
trait slot QName(PrivateNamespace("*", "com.company.assembleegameclient.parameters:Pa rame ters/class#0"), "_-LP") slotid 35 type QName(PackageNamespace("flash.net"), "SharedObject") value Null() end

Hexing help, Version string location

Post a Reply

Similar Threads

Tags for this Thread