I was just about to ask how to find file loading in an assembler. Every time I found references to the file i am looking for it was always in the data section so i cant debug it/break point On Windows, you'll typically want to place a breakpoint on kernel32.CreateFileA and kernel32.CreateFileW. Tho...

I recommend taking a tutorial on x86 assembly before digging too deep, just to make sure you get the basics right. The tutorial I looked at was Ketman's x86 assembly tutorial (you'll need to find an archived version, and DosBox). Also, OllyDbg 2.x has built in instruction help, if you're into that, ...

Just a guess: on Windows you may need to use DeviceIoControl() to send data directly to the DVD-ROM driver. Similarly on UNIX based systems, ioctl().

Interesting. Maybe I can finally finish the BMS for LzmaPack with that compression type.

It seems some newer Gameloft games, such as N.O.V.A. 3, use scrambled ZIP files instead of the traditional CustomPak. It took me forever banging my head against the CustomPak reader until I realized that it was probably not a CustomPak. Somehow it also escaped my attention until today that all files...

The hex editor I use on Windows, i.Hex, has a feature where you can define structures and it'll parse it out for you. It tends to crash if you make a mistake and load a large number of bytes, but in any other case it's a cinch if you don't want to spend time writing a parser. It doesn't show values ...

Microsoft Network Monitor is a lot nicer to look at than Wireshark, IMO. However, my go-to technique is to use Privoxy with URL logging enabled. That way you don't have to wait for some large program to start, and you get global (for programs that use IE proxy settings) ad blocking as well. If the p...

IDA Pro with Hex-Rays Decompiler will do that. Even better if you can provide the necessary structs so instead of the code dereferencing pointers it will actually tell you which members they're accessing. BTW, if you want to translate assembly back to code, the best way is to step through in OllyDbg...

I was consolidating my avatar on various forum sites so if I should decide to change it in the future it'll be less work for me to update it. In any case, the forum was a bit anal about the URL format for linking offsite. Fortunately, Gravatar isn't as anal, so I've managed to get it to work here. T...

hello,GMMan Sample .cache File http://www.uploadmb.com/dw.php?id=1390185969 Please test it,Pc game:Urban Trial Freestyle. thanks, That's not a game made by Digital Extremes. It probably doesn't use the same format. GMMan,you do not want to help me! You've already received a reply in your other thre...

I received this format specs quite a long time ago, and I thought I've lost it after the author removed it from his site. In any case, here it is. (Actually, I think he made the specs for me in particular, after I was asking about the model format. It wasn't very useful for me at the time, consideri...

reznov wrote:hello,GMMan
Sample .cache File http://www.uploadmb.com/dw.php?id=1390185969
Please test it,Pc game:Urban Trial Freestyle.
thanks,

That's not a game made by Digital Extremes. It probably doesn't use the same format.

Sorry for the extreme dig, but the file's actually laid out like this (per the demo Stargaze Framework SDK I found): struct pvrlzo { char lzodata[]; uint signature = 0x7d620abd; uint decompressed_length; }; So the compressed data length is (length of file)-8, and the actual size is from the last 4 b...

1. What game?
2. Sample no longer exists.

An observation I've made: isn't MultiEx Commander using a similar system, sans encryption, by withholding program data without valid login? Interesting observation, how did you make it ? I install Privoxy on all my machines for basic blanket filtering for anything that uses HTTP (and respects proxy...