Skip to content

Instantly share code, notes, and snippets.

View seifhassine's full-sized avatar
🎯
Focusing

Battlezone seifhassine

🎯
Focusing
View GitHub Profile

Getting RE Engine file extension/versions

There is a single function in RE engine that is called with the file extension (UTF16 string), and version (int): image

Finding the function

  1. Dump game with x64dbg+scylla, open with IDA Pro/Ghidra/Binja/Radare/whatever and let the auto analysis finish.
  2. Search for a common file type string (e.g. motlist) as UTF16: