New! Dark mode!

Browsing Pinside at night? Getting tired of all the white? Switch to dark mode using the button in the top right (or CTRL-B)!

(Topic ID: 127117)

Now cracked: Stern's SPIKE package tool


By misentropy

5 years ago



Topic Stats

  • 95 posts
  • 37 Pinsiders participating
  • Latest reply 2 years ago by shimoda
  • Topic is favorited by 19 Pinsiders

You

Linked Games

Topic Gallery

There have been 3 images uploaded to this topic. (View topic image gallery).

Spike2.png
Spike1.png
RGB565test.jpg

You're currently viewing posts by Pinsider oga83.
Click here to go back to viewing the entire thread.

12
#72 5 years ago
Quoted from Aurich:

No, it doesn't currently support Spike games, which WWE is.

Work on progress
Spike1.png
Spike2.png

#76 5 years ago
Quoted from Wolfmarsh:

Hey oga, did you find anything that might help with the SPV files?

Not yet, I've been focused on dmd frames and sounds until now.
I've just seen that the video tables are in the code, that the code is written in the same style than the one used for dmd animations in the Sam firmware. The code also makes intensive use of AES encryption with informations stored into e2prom.

#77 5 years ago
Quoted from Wolfmarsh:

Hey oga, did you find anything that might help with the SPV files?

I've also spent some time to write some code that read/write the files from the .spk (I did not run the spk command and did not want to patch it because I need PB to read/write in it automatically).

#79 5 years ago

Need access to the machine to read the key.
With OFB, if we know the beginning of a frame for sure, we can reverse the key.

#81 5 years ago
Quoted from Sonny_Jim:

Who the hell downvoted your post lol?

Pinballerchef. Don't know what I did wrong. First time I've been downvoted

#84 5 years ago
Quoted from Sonny_Jim:

Oh and super lols:
void sys_random_init(void)
{
rand_seed = 69696969;
}

Spike is NSA-tainted

#85 5 years ago

Can anyone post a WWE video starting or ending with black frames ?

[EDIT]

Quoted from Sonny_Jim:

Also, FWIW I'm almost positive the last 8 bytes per frame are a SHA1 checksum based on hmac key that's been truncated to 8 bytes, so that clears that up for me.

The video frames are RC4-encrypted and SHA1-signed.
The RC4 key is modified for each frame (to remove a well-known RC4 weakness)
The RC4 intial key is stored into e2prom.
Brut force on the RC4, even with well known video frames, is not realistic.
Which means that the content of an e2prom is needed to display the original videos.

Anyway, what would be the point of displaying these videos on a PC ?

More interesting : there is a workaround to replace the existing videos, without knowing the keys...

#89 5 years ago
Quoted from Wolfmarsh:

Are you subbing in pixel data in the file and somehow modifying the header bits to indicate that it's not encrypted using that key? Are you just bypassing the key check by using a modified game binary?

The code can process spv without encryption. No need to modify the binary.

1 week later
#92 5 years ago
Quoted from Sonny_Jim:

Are you sure? Because it looks to me that it'll only play single frame files unless the binary is modified.

Yes, no need to modify the code, it can work without encryption.
See this post (and the previous ones) :
https://pinside.com/pinball/forum/topic/acdc-display-and-modify-dot-matrix-images/page/35#post-2500445

#94 5 years ago
Quoted from Wolfmarsh:

Did you uncover what RGB byte format they use?

Yes, rgb565

Promoted items from the Pinside Marketplace
From: $ 42.00
Cabinet - Shooter Rods
ModFather Pinball Mods
$ 17.50
Cabinet - Other
Pin Monk
$ 11.95
$ 79.99
Cabinet - Armor And Blades
PinGraffix Pinside Shop

You're currently viewing posts by Pinsider oga83.
Click here to go back to viewing the entire thread.

Hey there! Got a moment?

Great to see you're enjoying Pinside! Did you know Pinside is able to run thanks to donations from our visitors? Please donate to Pinside, support the site and get anext to your username to show for it! Donate to Pinside