/r/REGames

Photograph via snooOG

A subreddit for those of us who enjoy reverse engineering games, figuring out how they work, defeating cheat detection, and all of the other fine things in life.

/r/REGames

13,056 Subscribers

4

Decompiler question

I’m trying to fix a game for my wife and I’ve been using Ghidra to decompile. The problem is that Ghidra is taking forever to decompile a 126 MB DLL. I’m currently sitting at 18 hours, and I’ve read posts about it taking days or weeks. I followed a guide that was supposed to help by running analyzeHeadless but here I am. Any decompiler suggestions or do they all take this much time?

24 Comments
2024/05/19
21:20 UTC

7

Lego Creator: Knight's Kingdom - tracing specific files using x32dbg

Hello,

I hope you all are doing well and staying safe.

I am trying to understand how I can capture calls pertaining to a user module string, such as the instantiation of &"import.lca" and then the other two files named "_l329900.lca" and "figqueenleonora01.lca"

Photo reference:

https://preview.redd.it/5y88jzyrz91d1.png?width=1632&format=png&auto=webp&s=a5efe845cc0f39f5ec5444f60151ecd1ad5fc650

When I add a model to the ss3dlego2000 it takes the data which is passed in from CreatorKK and changes it to import . lca which is stored in the Temp folder (only active while game is active). The CreatorKK gets the actual model data from I presume the CD, with associated items like VRT, SHP, PAL, etc. I am trying to capture the data from the models so I can then instantiate Ghidra to hopefully understand what the logic is, to extract the SHP data and then using Noesis, recreate the data in Blender.

  1. Does this make sense, what I am hoping to accomplish?

  2. Would this even work? Or is there more to do, in your opinion?

  3. Would it be better for me to simply look at the raw model files (.lca) and then using the SDK try and come up with a means to capture the data using IMHEX or some other Hex Editor? (I am doing this already, but shape data is not immediately written)

I have the SDK of the original software (which LCKK used a modified version). Am slowly cross-referencing the information to get all of the data, so I can modernize the game.

Any help would be appreciated - please and thank you.

0 Comments
2024/05/19
00:23 UTC

1

recompiling il2cpp

I was wondering if its possible to basically recompile il2cpp generated dummy dll,
what my goal is,
dump like normal, open dnspy, find a function i want to change and edit it using dnspy c#, recompile, run the game, extract the new bytes to use as shellcode because making shellcode sucks and is not possible when dealing with more then 1 paramater. basically im just trying to cheat the way of crafting shellcode. Is this possible? im working on the game Rust.

3 Comments
2024/05/18
17:52 UTC

5

Polytopia Map Editor

This project is an open source map editor for Polytopia. The game generates random maps for each game, but there is no way to edit the maps. This editor solves this problem by giving users the ability to modify the save state containing the map. This is only to be used for singleplayer.

Screenshot

Polytopia Map Editor

0 Comments
2024/05/17
02:44 UTC

3

DNSpy autoload disable

Is there a way to disable autoloading reference assemblies? Or even hide them. All they're doing is mucking up my search results and providing me a buncha headaches.

0 Comments
2024/05/16
16:58 UTC

1

Good tools for Javascript webgl games?

I'm reversing and modding the js version of minecraft classic (https://classic.minecraft.net) Are there any good tools for analyzing, documenting, and in general helpful for reverse engineering large Javascript applications? I find working with the web browser console very bothersome to use. Thanks

2 Comments
2024/05/16
09:19 UTC

12

Looking for assistance in cracking an old game!

Call of the Kraken was a old 2009-2010s spin off extension game for the original Pirates of The Caribbean Online.
This game was an overhead view where you controlled The Kraken itself, with the story being that you're collecting souls and treasures for Davy Jones...while also basically decimating the Pirate Lords forces so that they're forced to assist Jones in binding calypso into a human form. You'd get abilities, upgrades and such to assist as well while playing.
This game ran on Virtools 4 and 3DVIA mainly...
However, the game itself is locked behind this

https://preview.redd.it/3ijguzvplg0d1.png?width=1417&format=png&auto=webp&s=25690270fd78e6e34a7b3d88e035298ea4e18677

https://preview.redd.it/eu38qgs4mg0d1.png?width=778&format=png&auto=webp&s=25f5b0f2c1235170cadd8eebe038b20501ae76c7

The servers and website that you got this from have been long dead so there's no way of EVER getting this game to connect to the internet.
So I need to somehow get this game to think that it's the paid version, and I'm not a coder at all, so any assistance would be amazing!

8 Comments
2024/05/14
21:25 UTC

5

Dump memory and load in ghidra

Is there a way to start a game, and at some point dump the memory to a file and then load that into ghidra or other decompiler?

5 Comments
2024/05/14
08:58 UTC

0

Abandoned Card game MMO

Hello guys, I hope somebody here can give me advice/their opinion on, if this game could be reverse engineered based, on the following documentation on github + several client installers that were archived.

I'm especially interested in YGO2 which doesn't have any saved packages from back then but is still based on the reworked Lan multiplayer of the Power of Chaos triology

https://github.com/derplayer/YuGiOh-PoC-ModTools/wiki/YGO:-Server-API-table-overview-(v1&v2)

8 Comments
2024/05/13
23:30 UTC

12

How to crack this old game?

The game name is Deep Sea Adventures, and It has a time limit when it expires, you need to purchase the full version. Is there any way to crack and remove that window, to play this old game with no limitations?

https://preview.redd.it/lf4il36vb80d1.png?width=719&format=png&auto=webp&s=833652e7535fa3ba89df99ed912f706473818593

6 Comments
2024/05/13
17:34 UTC

1

How to Export or Extract Player Character Model From Dark Souls 2?

i want to use the ds2 player model for other things like importing it to blender but i have NO idea how to do that.. is there some kind of program that makes this process easy? I cant find anything about extracting player models specifically so id appreciate any guidance i can get!

6 Comments
2024/05/13
13:10 UTC

0 Comments
2024/05/12
11:08 UTC

2

Custom GSC Game Modes for servers HELP NEEDED! (Plutonium t6) Black Ops 2

I run some servers over on plutonium for SnD. I have recently been very intrigued with the custom GSC game modes for Black Ops 2 that have come out over the years. There are some very cool modes such as prop hunt, freeze tag, etc... I'm making this post to see if I can group up some people who know how to code GSC, know how to mod, love bo2, & wanna help revive the bo2 servers a bit. I've talked with some of the people who made these game modes way back then as well as talked to some of the people currently developing. Based on these talks I have started to collect some resources on how to rebuild these game modes. I'm putting everyone who wants to help into my discord with a private chat/role so that collaboration can happen and an easy place to share my resources. Especially with the added support and continued support of the development of mod tools & plugins for bo2 pluto I'd love to get an amazing group of people together and make some of the coolest custom stuff around for plutonium If you'd be interested in helping please add me on Discord @ Munnopoly or join the server @ Discord Server Link . Some of the custom game modes can be found in the screenshot I shared. There is more than that floating around as well. I will pay for all server hosting! Anyone is welcome to join!

https://preview.redd.it/h46k5zabuvzc1.png?width=579&format=png&auto=webp&s=ca3d00d387fd0462fecb93d57df8153a7f39eb7f

0 Comments
2024/05/11
23:34 UTC

0

I would like to know how can i decompile a Unity game with DnSpy and how can i export them into a folder

I just want to know how it works and how I can do it. I tried yesterday putting Assembly-CSharp.dll, but I didn't get what I wanted. I simply want to decompile a large cancelled Unity game. If I did wrong by putting Assembly-CSharp.dll in DnSpy, please let me know and tell me how to really decompile it and export everything into a folder so people can modify it. As for the creators note, about decompiling it, they haven't said anything since they left development in 2021 and they don't care anymore.

3 Comments
2024/05/11
16:10 UTC

3

Does anyone know a practical and quick way to determine the duration of a movement performed within a game?

Example: A jump, a punch, gun fire, the second punch of a combo, etc.

I'm new on it. I'd read the rules so I think this is the subreddit I was looking for. Pardon if I'm wrong and if you know a subreddit that fit my post the most please feel free to tell me here.

I like to use macros to explore how much a game can handle a very speedy input and output.

I mean: "How fast does a human need to be to achieve the maximum potential of a game?"

2 Comments
2024/05/11
15:48 UTC

0

How to decrypt a bytes file into a text file ?

Hi, I'm trying to extract data from a mobile game. I've managed to get the 2D assets using AssetStudioGUI but I can't get the skills or other information about the characters in the game.

These files are in this form (picture 1) and I would like to know if there is a way of decrypting the byte files into a readable text file?

I'm sharing a bytes file here if you want to try it out :
https://www.mediafire.com/file/06rbqz56tugw0f0/GachaRate.byte/file

Thanks

2 Comments
2024/05/10
19:04 UTC

3

Ideas needed: Game code only shows clearly in debugger, not in disassembler

Hello,

I have been working on reverse engineering the game Nioh 2 for a while now, and I got my own debug GUI running and such.

I encountered a weird issue right from the start though - the code of the game is only visible in the debugger, not the disassembler!

If I try to use Ghidra to do a offline disassembly of the game binary, there's almost no readable game code. For example, the debugger shows that the game clearly contains a windows message loop using the GetMessage function. I can break into that, and I also hooked it in order to modify input messages.

But in Ghidra, the code can't be found! There's no reference to GetMessage, and at the offset where the window message loop should be, there's just junk data.

What could be the reason? Some sort of runtime decompression of the game binary maybe?

Thanks so much!

6 Comments
2024/05/10
11:07 UTC

0 Comments
2024/05/10
10:48 UTC

0 Comments
2024/05/10
10:47 UTC

2

Help using QuickBMS to unpack .bin files

I saw a post where someone said they ripped texture/image data from a PS2 game's .bin files using QuickBMS, but the guide/plugin they linked went down with the Xenhax forums and isn't available anywhere as far as I can tell. I'm crossing my fingers that they'll get back to my message since they do commissions and have posted pretty recently (within the last 3 months), but in case they don't, can anyone help me out?
I've looked extensively, I have a few dozen tabs open to prove it. Most links are dead ends (some forums were removed from the internet archive at the owner's request) or download links are broken with no file title to use for tracking a new link down.

I'm pretty tech savvy so I don't need an "explain it to me like I'm 5" guide or anything. If you have a link that works, a script/plugin/program name, or a screencap of someone else's posts from dead sites, feel free to use those to answer.

I know that I can (and have) use a thing with PCSX2 to capture textures, but it requires you to be in the scene that the texture is in. I'll definitely re-start this game to get to that point and do that, but if there's some way to extract everything all at once I'd greatly appreciate the assistance!

(game is Xenosaga 3 btw, which I know is supposed to be difficult to rip from but people have done it in the past.)

1 Comment
2024/05/10
05:18 UTC

0

What is Nerf N Strike and Nerf N Strike Elite's game engines?

Although I found some of these concept art pieces to help me get a reference:

https://preview.redd.it/cinmujiysazc1.jpg?width=1400&format=pjpg&auto=webp&s=3f2956bb04fed624012c354551ac5e63b1de6ae8

https://preview.redd.it/3f93liiysazc1.jpg?width=1400&format=pjpg&auto=webp&s=5ef686c99e7c78bc877f677e6b2fe7e69a3f45cf

https://preview.redd.it/0z7j2liysazc1.jpg?width=1400&format=pjpg&auto=webp&s=a6b720532d3c124be986fbb1207894873847466e

https://preview.redd.it/zddzikiysazc1.jpg?width=1790&format=pjpg&auto=webp&s=a307488edc4eeaccd975da1ef440127789162273

it would be nice to know how they designed these things into their final 3D form.

This isn't going to be quite a simple "take an existing model and edit it". These games were made in 2008 and 2009. So like the first Crash Bandicoot PS1 games, the data and texture graphics will be different. In order for me to make my custom robots based off of the robots from these two games, I'll have to make them from scratch while in the process adding my aesthetics of accessories and weapons - just like how they made N Sane Trilogy: completely from scratch - while adding some improvements to their remastered game models.

So to do that, I'll need to screenshot this Nerf robot from 6 different angles (like a cube) via having the robot's model ported into Blender so I can get a reference and then as I reconstruct it from scratch, I'll add my own custom cosmetics like a revolving grenade launcher and Browning machine guns for the Gadfly, upscaled Skorpion SMGs for the Specter, a GShG-7.62 and a male and a female human head for the Sentry bot, and AKU-94 with 100 RD drum magazines and homing bullets for the Sentinel bot.

But the big question hits: what game engine does Nerf N-Strike and Nerf N-Strike Elite for the Wii from 2008 and 2009 use? This will help in the photographing of the game's models rather than hoping the AI in the game and emulator reacts the way you want it to while you try to screenshot it at the desired angle.

1 Comment
2024/05/09
01:47 UTC

7

Hero: 108 Online and possible reverse engineering

Hey, I know there's plenty of questions about reverse engineering various games. I'm inexperienced and do not plan to revive the game any soon, if that'd be possible in general.

There was the game called Hero: 108 online, an MMORPG based on the Cartoon Network show. The game was short-lived and somewhat popular, but the licensed games always go away (FusionFall, Monkey Quest, LEGO Universe...). The game was online for a year more in Taiwan but even on forums from there I could not find any information about getting into the games files.

I know that resurrecting the game from the ground up is difficult, but private servers/emulators always were interesting to me and I'd love this game to be my additional motivation to learn more programming languages, reverse engineering and networking.

The game was online from 2010 to April 2011 (2012 in Taiwan). I've got the client with all the files; however, they simply consist of d3d files, there's some mention of physX being used in the game and a bunch of .pak files that might be everything. There's nothing about the game's engine when starting up the launcher, there's only information about the publisher (Gamania) and the developer (RedGate Games, 2010).

While inspecting the client.exe with notepad++, I noticed various .txt mentions, such as: "EnchantLevel.txt." or "Combo_Skill1" and so on. It also mentioned (only in a few lines) something about scripts and a Lua script; however, 99.99% of the text is NULL and other stuff that's impossible to read.

I insist on C++ and Lua being involved, as I managed to find a person from Taiwan on LinkedIn who mentions that he worked on this game back in 2009-2011. His 2009-2011 linkedin update stated that he's using those. However, it is not 100% sure.

I'm wondering if the network format can be still detected with WireShark despite the game being shut down? You can only input the login and get the notification that it's incorrect (because servers are off). However, I believe that some information about connection should be established.

The game generates some log files in the %appdata%, involving server's original IP and port, but nothing more.

Would it be any possible to figure out this game's engine, programming language and network format?

18 Comments
2024/05/08
23:13 UTC

2

Getting Started

Hi, I'm new to all of this but I want to try extracting assets, mainly images, from a game. The game is called First Love Story and it's an online only game. I was wondering on what steps I should take?

I installed an apk of the game and made it a zip file to see if I can easily get those assets, but I was only able to obtain a couple of pngs that I didn't want. There are some other files that have CG as there name but I'm pretty sure there encrypted and I don't know how to bypass that -- those files also don't have any extensions ie .png and etc.

6 Comments
2024/05/05
00:44 UTC

0

Juiced (2005) - Crashes when doing a test drive

4BDC17: The instruction at 0x4BDC17 referenced memory at 0x1B. The memory could not be read -> 0000001B (exe.code c0000005, tid 9036)

I got a crash when trying to do a test drive. Why and can someone help me fix this crash when trying to do a test drive?

2 Comments
2024/05/02
07:11 UTC

3

How to extract 3D model from a game?

Hi everyone, right now I'm trying to extract a model from BG3 (I just want to make a model of my OC).

I saw a YT tutorial in which they told me to use Ninja Ripper. I followed the tutorial step by step but when I try to run BG3 thru Ninja Ripper, it says that it looks like I'm trying to run the game from Steam and that I should close Steam, run steam.exe thru Ninja Ripper and then launch the game. It doesn't matter if I ignore that message or do exactly what it says, when it lauches the game, Ninja Ripper doesn't work.

So I'm looking for someone that has any experience with that app that could help me or someone that knows of a better tool to extract a model from BG3.

Thanks!

5 Comments
2024/05/01
03:14 UTC

5

Disney Magic Kingdoms (Windows/Android) Decrypting Save File

Hey, I wouldn't say I'm entirely new to reverse engineering, however, this game has kind of stumped me. There's only one dll in the game folder (as it's a compiled UWP app) and I'm getting a whole lotta nothing from IDA, etc. What I have found out is that the game heavily relies on strings, and modifying these strings does change aspects of the game. For example, I can search for "moana_costume_basic.bdae" and change it to "moana_costume_comfy.bdae" which would change the actual in-game model to that limited time costume. The same can be done from inside of the costume menu, a combination of the two will trick the game into thinking you have the costume equipped, but you cannot switch it back or you will have to repeat the process. You can do any of the special interactions that the costume provides, quests etc, but there's still something in the game that is storing the fact that you do not "own" the costume.

It's worth mentioning that there is an extra layer of complexity to reverse engineering any aspect of the savefile, as the game runs on a custom engine that Gameloft use. It's not Unity, Unreal or the usual ones. There's no way to compare two or more save files (even if you stay idle and do nothing), EVERYTHING changes between the savefile versions

The save file is located in appdata/local/packages/(disney magic kingdoms folder)/localstate

Gameloft are a greedy company... the limited time content is frustrating. Whoever is willing to help me investigate this process further, I appreciate you greatly. I'm sure this will be a fun challenge for some of you!

If you need gems... game guardian is the way to go. You can't edit it directly, you do so through the level up rewards. A quick google / youtube search should walk you through that.

Reverse engineer the savefile process, or a way to block the encryption from the dll entirely, through cheat engine (or such)

4 Comments
2024/05/01
00:11 UTC

Back To Top