(Topic ID: 127117)

Now cracked: Stern's SPIKE package tool

By misentropy

8 years ago


Topic Heartbeat

Topic Stats

  • 95 posts
  • 37 Pinsiders participating
  • Latest reply 6 years ago by shimoda
  • Topic is favorited by 19 Pinsiders

You

Linked Games

Topic Gallery

View topic image gallery

Spike2.png
Spike1.png
RGB565test.jpg

You're currently viewing posts by Pinsider oga83.
Click here to go back to viewing the entire thread.

12
#72 8 years ago
Quoted from Aurich:

No, it doesn't currently support Spike games, which WWE is.

Work on progress
Spike1.pngSpike1.png
Spike2.pngSpike2.png

#76 8 years ago
Quoted from Wolfmarsh:

Hey oga, did you find anything that might help with the SPV files?

Not yet, I've been focused on dmd frames and sounds until now.
I've just seen that the video tables are in the code, that the code is written in the same style than the one used for dmd animations in the Sam firmware. The code also makes intensive use of AES encryption with informations stored into e2prom.

#77 8 years ago
Quoted from Wolfmarsh:

Hey oga, did you find anything that might help with the SPV files?

I've also spent some time to write some code that read/write the files from the .spk (I did not run the spk command and did not want to patch it because I need PB to read/write in it automatically).

#79 8 years ago

Need access to the machine to read the key.
With OFB, if we know the beginning of a frame for sure, we can reverse the key.

#81 8 years ago
Quoted from Sonny_Jim:

Who the hell downvoted your post lol?

Pinballerchef. Don't know what I did wrong. First time I've been downvoted

#84 8 years ago
Quoted from Sonny_Jim:

Oh and super lols:
void sys_random_init(void)
{
rand_seed = 69696969;
}

Spike is NSA-tainted

#85 8 years ago

Can anyone post a WWE video starting or ending with black frames ?

[EDIT]

Quoted from Sonny_Jim:

Also, FWIW I'm almost positive the last 8 bytes per frame are a SHA1 checksum based on hmac key that's been truncated to 8 bytes, so that clears that up for me.

The video frames are RC4-encrypted and SHA1-signed.
The RC4 key is modified for each frame (to remove a well-known RC4 weakness)
The RC4 intial key is stored into e2prom.
Brut force on the RC4, even with well known video frames, is not realistic.
Which means that the content of an e2prom is needed to display the original videos.

Anyway, what would be the point of displaying these videos on a PC ?

More interesting : there is a workaround to replace the existing videos, without knowing the keys...

#89 8 years ago
Quoted from Wolfmarsh:

Are you subbing in pixel data in the file and somehow modifying the header bits to indicate that it's not encrypted using that key? Are you just bypassing the key check by using a modified game binary?

The code can process spv without encryption. No need to modify the binary.

1 week later
#92 8 years ago
Quoted from Sonny_Jim:

Are you sure? Because it looks to me that it'll only play single frame files unless the binary is modified.

Yes, no need to modify the code, it can work without encryption.
See this post (and the previous ones) :
https://pinside.com/pinball/forum/topic/acdc-display-and-modify-dot-matrix-images/page/35#post-2500445

#94 8 years ago
Quoted from Wolfmarsh:

Did you uncover what RGB byte format they use?

Yes, rgb565

Promoted items from Pinside Marketplace and Pinside Shops!
$ 99.99
Lighting - Other
Lighted Pinball Mods
 
$ 24.95
Playfield - Protection
ULEKstore
 
$ 30.00
Playfield - Other
YouBentMyWookie
 
8,600
Machine - For Sale
Minneapolis, MN
4,200 (OBO)
Machine - For Sale
Bay Shore, NY
$ 110.00
Cabinet - Shooter Rods
Super Skill Shot Shop
 
$ 100.00
Playfield - Other
JuanSolo's modshop
 
$ 99.99
Lighting - Other
Lighted Pinball Mods
 
$ 54.99
Cabinet - Shooter Rods
Lighted Pinball Mods
 
$ 35.00
Cabinet Parts
Rocket City Pinball
 
$ 16.95
Playfield - Toys/Add-ons
ULEKstore
 
$ 79.99
Cabinet - Armor And Blades
PinGraffix Pinside Shop
 
$ 20.00
Playfield - Protection
Pinhead mods
 
$ 99.00
Cabinet - Toppers
Slipstream Mod Shop
 
$ 19.00
Cabinet - Other
Pin Monk
 
$ 12.50
$ 24.95
Playfield - Toys/Add-ons
ULEKstore
 
$ 11.95
Playfield - Toys/Add-ons
ULEKstore
 
$ 29.95
Great pinball charity
Pinball Edu

You're currently viewing posts by Pinsider oga83.
Click here to go back to viewing the entire thread.

Reply

Wanna join the discussion? Please sign in to reply to this topic.

Hey there! Welcome to Pinside!

Donate to Pinside

Great to see you're enjoying Pinside! Did you know Pinside is able to run without any 3rd-party banners or ads, thanks to the support from our visitors? Please consider a donation to Pinside and get anext to your username to show for it! Or better yet, subscribe to Pinside+!


This page was printed from https://pinside.com/pinball/forum/topic/now-cracked-sterns-spike-package-tool?tu=oga83 and we tried optimising it for printing. Some page elements may have been deliberately hidden.

Scan the QR code on the left to jump to the URL this document was printed from.