What are /r/REGames' favorite Products & Services?

From 3.5 billion Reddit comments

Having the games, I'd just snoop around in the files with a hex editor, see if I can see anything identifying I could throw into Google. I don't have the games, so I took a different route: around that time, the software dev houses tended to use their own in-house engine. Not sure what Travellers Tales (ToyStory2) uses, but Croc 2 was developed by Argonaut Software, which according to Wikipedia had BRender as their in-house engine, according to https://www.moddb.com/engines/brender this was used in Croc 2 as well. Seemingly, Carmaggedon also used this engine, and there's some modding community support for that games, so my first thought would be to grab those tools and explanations and see if they apply to Croc 2.

There's also binary ninja: it's the newest of the bunch and still in beta (signup on the website), but we're building toward some longer term features like an interactive decompiler and collaborations and already have a solid set of features for many reversing needs. Heck, we already have a built in data flow based analysis that IDA explicitly doesn't have which makes analysis plugins a lot simpler.

https://binary.ninja

Also, Hopper does have a decompiler, it's just not as robust as IDAs. In particular its harder to manually inform it and fix it up the way you can with IDA.

Of course, the list also neglects to list the price for HexRays (which is per-architecture), and many of the other products are cross platform where IDA makes you pay to switch operating systems. When you add all that up, IDA gets /way/ more expensive than the listed price. At least they didn't quite the price for standard which is ridiculous for not including x64.

• Test with TrId http://mark0.net/soft-tridnet-e.html
• Try with hex editor that supports showing memory areas as images
• If you have any knowledge of the format kaitai struct may be useful for visualizing and parsing it

Often times (especially so for visual novels) there are ready made tools for reading custom image formats, like suzie image viewer and it's numerous plugins.

This sucks, I feel sorry for you.

But rejoice, you can still share your videos on peertube, or maybe bitchute if you feel adventurous.

Try running your capture file through a protocol disassembler like wireshark. Failing that you could attach a disassembler or a program like Process Monitor to see if the game is calling any encryption libraries or API which could give you some clues as to how to decrypt the data stream.

Well, personally I would start with ghidra, and check how it sends/receives data. since it is multi platform it would probably use bcrypt.dll to encrypt/decrypt data. this would also let you compare versions to see if chunks have been removed (provided you have old client.exes)

then i would use http://www.rohitab.com/apimonitor and see if i can either extract the encryption key, or failing that/skipping that monitoring the encrypt/decrypt data, before the client sends it. (you will have to change the settings to save all 4096bytes rather than the default 2500 api montior saves.)

this should give you the main menu/character loading, and will give you some idea of the match making protocol.

after that... it depends hugely on the game. some are like marvel, where the clients get matchmaked together and the client can be an authority.

You will want to pick up C++ and x64dbg tools (both are free, Visual Studio Community, and http://x64dbg.com/#start

Then I recommend various game cheating sites (uc), and codeproject and tuts4u. But instead of posting for help on those sites, just search your ass off. 99% of the time your question has been answered more than 10 times over already.

HEYOOOO! lol. Yeah, I'm just really passionate about this stuff, whether it's learning, helping others, etc. I've been subbed to REGames and lurking for quite awhile, but I figured many folks would enjoy this list of resources since I hadn't posted yet.

As for Pwn Adventure 3, I HIGHLY recommend working your way through this guy's presentation/workshop slide deck. He initially had a lot of that content up as a series of blog posts that were fantastic, but this slide deck looks like it greatly expands upon them.

I definitely plan on addressing some online game hacking techniques at some point on my channel, but I just have to make sure that it's all on the up-and-up. =)

I was half joking :) because in some point in time almost everybody was using it. There are some plugins for IDA to identify encryption algos e.g. https://www.aldeid.com/wiki/IDA-Pro/plugins/FindCrypt2

Speaking about network analysis I would recommend to take a look at Wireshark. It is a great tool to have under your belt, not just for RE.

Take care & good speed :)

Good job. Interesting. I like how you keep it mostly technical.

See my suite of IDA plug-ins here: https://sourceforge.net/u/sirmabus/

And some info on how to use some of them on my blog here: http://www.macromonkey.com/

ugtrain is the best and only working universal game trainer on Linux. It integrates scanmem, supports ASLR/PIC/PIE and comes with dynamic memory hacking. A GUI is planned but if you need one and only want to search in memory, then GameConqueror is what you're looking for.

Does it use the unity engine? If so, I'd recommend using Telerik Justdecompile and the reflexil plugin to modify the binaries. Provided that the game isn't obfuscated, you can straight up read the source code, and making changes is pretty easy. I've done this with Adventure Capitalist.

Could be checking the GWL_STYLE/GWL_EXSTYLE https://docs.microsoft.com/en-us/previous-versions/ms960886(v%3Dmsdn.10)

You could use something like http://www.rohitab.com/apimonitor and monitor all the APIs that might be used for window management, although this wont help if its the directx object.

First check is whether the game uses certificate pinning. Install Fiddler https://www.telerik.com/fiddler and run the SSL proxy setup. This generates a self-signed CA which you need to install on the device running the game.

Next, you set a proxy on the game device to point to your Fiddler install. Run the game and Fiddler will MITM the connection and let you see the traffic.

If the game uses certificate pinning it'll reject the Fiddler proxy SSL cert because it knows it's not the correct one. Then you'll need to maybe look at dumping the game's process space and hunting for the key. Pretty sure (not done this in a while) there are tools out there to find likely keys from a process memory dump.

PC version should be main focus but android might help us? idk but here: https://play.google.com/store/apps/details?id=com.square_enix.android_googleplay.mobiusff_ne&hl=en_US

and idk if ios would help but just including link since it is quicker to access that way: https://apps.apple.com/us/app/mobius-final-fantasy/id1091974564