Free Game Research Forum | Official QuickBMS support | twitter @zenhax | SSL HTTPS://zenhax.com
It is currently Tue Mar 02, 2021 11:02 am

All times are UTC

Post new topic  Reply to topic  [ 1 post ] 
Author Message
PostPosted: Fri Feb 05, 2021 3:01 am 
User avatar

Joined: Fri Apr 20, 2018 12:41 am
Posts: 759
On Windows, the game executables were packed and somewhat easy to extract from wrappers, they later went for external executable encryption which prevents direct extraction without execution but kept the same flaw.

On Mac, the game executables were super easy to get from the packaged wrappers even when lacking Mac experience, but as of 2007 (I think), a new form of DRM was used where the executable is a dummy with just a text line for a temporary directory to put it but the game executable is the .payload file. The file is not encrypted in any way but the bytes in it are swapped, making it not possible to pop into a disassembler. After the trial loader "decrypts" it, bytes are fixed and the file can be retrieved from the Mac as a proper executable.

The reason why I want the Mac executables is because all the Windows executables I can find (except ONE due to leaving a symbol file) have all programming symbols stripped while Mac builds often do not and/or leave developer files, which will make it easier to RE a game which I can relate it's code to the Windows ver.

Samples compressed with 7-Zip ZStandard.

Any way to fix these files without busting out a Mac to get them "disassembler-ready"?

File comment: Bejeweled 2 Deluxe PAYLOAD file (ZStandard compressed, slightly over 5MB) remove TXT and decompress
Bejeweled 2 Deluxe.payload.zst.txt [1.78 MiB]
Downloaded 37 times
File comment: Bejeweled 3 PAYLOAD file (ZStandard compressed, 11MB) remove TXT and decompress
Bejeweled 3.payload.zst.txt [2.14 MiB]
Downloaded 36 times
File comment: Zuma's Revenge (Multilingual) PAYLOAD file (ZStandard compressed, 18MB) remove TXT and decompress
Zuma's Revenge!.payload.zst.txt [3.24 MiB]
Downloaded 32 times

Hacking Angry Birds since 2016

Last bumped by LolHacksRule on Fri Feb 05, 2021 3:01 am.
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 1 post ] 

All times are UTC

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited