flat assembler
Message board for the users of flat assembler.

Index > Heap > Reverse engineering an abandonware Stratego (DOS)

Author
Thread Post new topic Reply to topic
Raedwulf



Joined: 13 Jul 2005
Posts: 375
Location: United Kingdom
Raedwulf
I got hold of a game that I used to play many years ago. Its an old stratego game done by a now defunct Accolade.
As this is kinda before my programming time, i.e. i started on 32-bits.

With research, I've discovered it is a 16-bit DOS Program with LZEXE compression. However, on decompressing (UNLZEXE) I only managed to get 160kb of the 1Mb compressed file :S. I can only guess that the data was somehow stored in the original EXE but wasn't compressed. UNLZEXE seems incapable of dumping this data with the uncompressed EXE.

Does anyone have any experience and knowledge about going about this?

Cheers Very Happy.

---

Found a copy of the stratego here:
http://www.pc-download-games.com/games/Board%20games/Stratego.zip

LZEXE:
fabrice.bellard.free.fr/lzexe.html

_________________
Raedwulf
Post 21 May 2007, 07:41
View user's profile Send private message MSN Messenger Reply with quote
Goplat



Joined: 15 Sep 2006
Posts: 181
Goplat
The EXE header in STRATEGO.EXE says that it's 93 sectors long with 108 bytes in the last sector, for a total length of 47212 bytes. The rest of the file is not loaded by DOS - presumably the program re-opens its own file to access it. UNLZEXE can't do anything about it because it wasn't compressed with LZEXE in the first place (it was concatenated to the .EXE after compression).
Post 21 May 2007, 15:11
View user's profile Send private message Reply with quote
Raedwulf



Joined: 13 Jul 2005
Posts: 375
Location: United Kingdom
Raedwulf
Ah I guessed that but wasn't sure Very Happy.
Thanks Goplat - so assuming that I reconcatenate it, it should work?

And do you have any idea what compiler was used :S.

Damn, and I thought this was going to be easy :S.

_________________
Raedwulf
Post 21 May 2007, 16:53
View user's profile Send private message MSN Messenger Reply with quote
vid
Verbosity in development


Joined: 05 Sep 2003
Posts: 7105
Location: Slovakia
vid
i think old borland compilers knew how to do this.

Examine strings in unpacked executable, compilers often leave some messages in executable
Post 21 May 2007, 19:36
View user's profile Send private message Visit poster's website AIM Address MSN Messenger ICQ Number Reply with quote
HyperVista



Joined: 18 Apr 2005
Posts: 691
Location: Virginia, USA
HyperVista
Yep, vid, you are right. IDA Pro reveals Borland Turbo C.
Post 21 May 2007, 21:47
View user's profile Send private message Visit poster's website Reply with quote
vid
Verbosity in development


Joined: 05 Sep 2003
Posts: 7105
Location: Slovakia
vid
so next step should be finding routine that opens the executable file for data reading.

Maybe it's possible to workaround it by renaming unpacked executable and providing packed executable under original name for data.
Post 21 May 2007, 23:27
View user's profile Send private message Visit poster's website AIM Address MSN Messenger ICQ Number Reply with quote
Raedwulf



Joined: 13 Jul 2005
Posts: 375
Location: United Kingdom
Raedwulf
ahh nice I'll try this later.

Have I been a bit moronic? I've just realised the zip-link i sent you was not the same as the stratego I was using :S.

I need to check if this is any different to the other one I have because it does appear to be only 350kb and has a stratego.dat while mine is 1mb without a stratego.dat...

Ok found 2 other versions lol
http://www.victorclaessen.nl/redirect.asp?file=stratego.zip

http://jeuxanciens.free.fr/download/stratego.zip

Same program - different sizes apparently. No time to check now, will have a look later Wink.
Post 22 May 2007, 10:58
View user's profile Send private message MSN Messenger Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  


< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Copyright © 1999-2020, Tomasz Grysztar. Also on YouTube, Twitter.

Website powered by rwasa.