Luigi Auriemma

hi aluigi,

I didnt see an explanation of how your Xfirepwd.exe program works

i have two questions:
1) how can i use it?
2) what are the features of the decryption if i want to convert it to delphi

1)
you can:
- drag your XfireUser.ini file over the xfirepwd.exe file and it will be automatically parsed and each string containing "encrypted" or "EPW" (the only encrypted strings and password as far as I know) will be automatically decrypted and showed on the screen
- from the command-line you can type directly the password to decrypt as argument: xfirepwd.exe

2)
the decryption is trivial:
- convert the input hex string to bytes (for example "010002" to 3 bytes 0x01 0x00 0x02)
- take each 32bit value in the sequence of bytes and invert its order so if you have "0x01 0x02 0x03 0x04 0x05 0x06 0x07 0x08" it will become "0x04 0x03 0x02 0x01 0x08 0x07 0x06 0x05"
- decrypt it with blowfish using the key "05c58aa143ecd48889d9fba58069ec54" and a keysize of 33
- re-perform the previous "order inverting"

I can't seem to get this work, I drag the XfireUser.ini over the xfirepwd file, but the EPW is just a long list of numbers and letters. Why is this? Thanks

if I'm not in error EPW is the hash of the password or something else, I don't remember exactly but it's enough that you check the length of the string if changes if you change the length of your pass.

hello
does this tool decrypt the xfire account password or does it decrypt the game accounts saved by xfire or both?

in my case it seemed to decrypt my bf2 account data username and pw but not my xfire password


is it possible to decrypt the xfire login password to?

my output:


thx in advance

the EPW1 is already decrypted by xfirepwd but it's an hash of the password, Xfire doesn't save the password in clear-text

40 hex chars = 20 bytes = sha1 (probably)

thank you for clearing this up and sharing all this knowledge



gn8