Davide Palma

Lol that's not a fix. Anyway there is active fork i use that has it fixed.

> active fork https://github.com/newhinton/extRact

> How did you fix the llvm issue?  However, things become outdated very fast in the gentoo world, so I have no idea if it still works

https://github.com/andreas-mausch/whatsapp-viewer/commit/7035b9c505f5582df70e5a2d33bcac9acd5719cc This contains a C++ implementation of .crypt14 decrypt Take also a look here: https://github.com/andreas-mausch/whatsapp-viewer/issues/114#issuecomment-835267643 So you are right, no implementation change, just offsets.

@aldennisa15 Do you need to get the key file again from wa's data folder?

@aldennisa15 can you make a patch please? I can't manage to patch it on my own for some reason.

I'm stupid lol, I made a pull request https://github.com/EliteAndroidApps/WhatsApp-Crypt12-Decrypter/pull/13

@aldennisa15 not working anymore with latest dump.

IV now starts at byte 67, but don't know about the rest.

I found the offsets. Since the project seems dead, i'll keep updating offsets in my fork.