Variant9 holly-hacker

Alientek ATK-XTOOL BLE Protocol

Wire protocol for Alientek's BLE test/measurement devices (DM40 multimeter, ND1 dosimeter, EL15 electronic load, HP15/HP20 hot plates, C2 USB tester), reverse-engineered from the official Android apps. Sufficient to implement a from-scratch client for all six devices; per-device sections note remaining gaps explicitly.

Sources: v1.8 (ATK-XTOOL 1.82.apk, .NET MAUI, IL-decompiled — exact) and v2.0.12 (atk-xtool 2.0.12.apk, Flutter/Dart AOT, decompiled via blutter +

Cytus 2 chart dump

Explains how to dump decrypted chart data from Cytus 2.

Requirements

Rooted android device (or emulator) capable of running GameGuardian
IDA Pro 7.0+
RoslynPad or LinqPad for .csx scripts

Steps

Dump libil2cpp from memory (.so in apk is packed) and open it in IDA Pro. You can use something like GameGuardian for this. Keep in mind that there are 2 memory regions that make up the full binary.

	#pragma author Variant9
	#pragma description Parses SoundFont2 (v2.04) files
	#pragma magic [52 49 46 46 ?? ?? ?? ?? 73 66 62 6B]
	#pragma endian little

	/*!
	Describes the SF2 soundfont format.
	For more info on SF2:
	- Specification: https://www.synthfont.com/sfspec24.pdf
	- alt: https://www.polyphone.io/doc/files/sf_specifications_v2.04.pdf

	{
	"experimental.theme_overrides": {
	"editor.invisible": "#484848",
	"panel.background": "#1d2228", // idk what this is and how it should convert from vsc
	"syntax": {
	"property": { "color": "#ef596f" } // probably converted wrong
	}
	}
	}

	use std::{borrow::Cow, collections::BTreeMap};

	use color_eyre::eyre::Context;
	use serde::{de::DeserializeOwned, Deserialize, Serialize};

	pub struct DatabaseInstance {
	content: DatabaseContent,
	}

	impl DatabaseInstance {

	import json as json_lib
	import os
	import re
	import sys

	import requests

	# find json link of latest version
	game_url = "https://www.crazygames.com/game/bullet-force-multiplayer"
	iframe_pattern = re.escape("https://www.crazygames.com/gameframe/bullet-force-multiplayer/CHANGE_ME/index.html").replace("CHANGE_ME", "\\d+")

	using System;
	using System.Globalization;
	using System.IO;
	using System.Linq;
	using System.Net;
	using System.Text;
	using Newtonsoft.Json;
	using Newtonsoft.Json.Converters;
	using PokeApiDefinitionGenerator;
	using QuickType;

	namespace HoLLy.DiscordBot.Sandwich.Tools {
	public static class GoogleTranslate
	{
	private const string TranslateEndpoint = "https://translate.google.com/translate_a/single";
	private const string TtsEndpoint = "https://translate.google.com/translate_tts";
	public static readonly Dictionary<string, string> Languages = new Dictionary<string, string> {
	{"auto", "Automatic"}, {"af", "Afrikaans"}, {"sq", "Albanian"}, {"am", "Amharic"}, {"ar", "Arabic"}, {"hy", "Armenian"},
	{"az", "Azerbaijani"}, {"eu", "Basque"}, {"be", "Belarusian"}, {"bn", "Bengali"}, {"bs", "Bosnian"}, {"bg", "Bulgarian"},
	{"ca", "Catalan"}, {"ceb", "Cebuano"}, {"ny", "Chichewa"}, {"zh-cn", "Chinese Simp."}, {"zh-tw", "Chinese Trad."},
	{"co", "Corsican"}, {"hr", "Croatian"}, {"cs", "Czech"}, {"da", "Danish"}, {"nl", "Dutch"}, {"en", "English"}, {"eo", "Esperanto"},

	using System;
	using System.Collections.Generic;
	using System.Diagnostics;
	using System.IO;
	using System.Net;
	using System.Text.RegularExpressions;
	using System.Threading.Tasks;
	using Newtonsoft.Json;

	namespace KHDownload

	using System;
	using System.Collections.Generic;
	using System.Diagnostics.CodeAnalysis;
	using System.IO;
	using System.Linq;
	using System.Text;
	using System.Xml;
	using AnkiSharp; // Import form NuGet package

	namespace TeachConvert