Cosmi (?) PC Games InstallShield

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
Miles2345
Posts: 76
Joined: Thu Oct 16, 2014 3:05 am

Cosmi (?) PC Games InstallShield

Post by Miles2345 »

A bunch of old PC games I found have these installshield self-extracting EXEs for their setups, however running them requires a password (that I don't have) and there are no tools online to extract them manually.

Any info on these?

3D Brick Breaker Madness - http://puu.sh/kRu5l.zip
3D Caveman Rocks - http://puu.sh/kRu7W.zip
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Cosmi (?) PC Games InstallShield

Post by aluigi »

It's very simple.
This is the simplest step-by-step that anyone can follow:

1)
Run the the setup installer

2)
Run SysInternals Process Explorer and create a minidump of the setup process
Image

3)
Open the minidump with a hex editor and search the string you see in the installer, for example "This will".
The password is just the text under it, "journey" in the screenshot.
Image


That's all.
I don't know if exist tools or other ways, I simply did this test on the fly and it worked.


For reference, the passwords are rack and journey :D
Miles2345
Posts: 76
Joined: Thu Oct 16, 2014 3:05 am

Re: Cosmi (?) PC Games InstallShield

Post by Miles2345 »

oh awesome, good info to know as well :)