and why you use a memory_file?
filexor "stuff"
get DUMMY long
getdstring DUMMY 0x10
...
you don't need a memory_file
Important information: this site is currently scheduled to go offline indefinitely by December 1st 2023.
If you wish to donate to attempt the preservation of tools and software somewhere else before it goes down, check the GoFundMe
If you wish to donate to attempt the preservation of tools and software somewhere else before it goes down, check the GoFundMe
Search found 1910 matches
- Wed Aug 01, 2012 8:49 am
- Forum: Code Talk
- Topic: Making memory file as "file 0"
- Replies: 2
- Views: 1861
- Wed Aug 01, 2012 8:48 am
- Forum: Code Talk
- Topic: Need tips to analyze hacked memory pointers
- Replies: 1
- Views: 1775
Re: Need tips to analyze hacked memory pointers
oh well, I wrote a reply but the timedout login deleted it.
in short that thing it's caused by relocations (like aslr) and heap memory (allocations) so the solution is tracking the functions that read/create the memory and referring to the module base address for the relocations
in short that thing it's caused by relocations (like aslr) and heap memory (allocations) so the solution is tracking the functions that read/create the memory and referring to the module base address for the relocations
- Wed Aug 01, 2012 8:25 am
- Forum: Game Archive
- Topic: [PC]KONAMI Jubeat Ripples (.pak)
- Replies: 1
- Views: 1376
- Thu Jul 26, 2012 4:03 pm
- Forum: Game Archive
- Topic: grand prix evolution compressed files, encrypted?
- Replies: 14
- Views: 3055
Re: grand prix evolution compressed files, encrypted?
the only difference between demo and full version is that this second one doesn't use the additional scrambling/encryption on the files
- Thu Jul 26, 2012 3:15 pm
- Forum: Game Archive
- Topic: grand prix evolution compressed files, encrypted?
- Replies: 14
- Views: 3055
Re: grand prix evolution compressed files, encrypted?
job done, script updated.
in short the additional encryption (gpe_decrypt_file.c) is applied only when "TYPE & 1"
in short the additional encryption (gpe_decrypt_file.c) is applied only when "TYPE & 1"
- Thu Jul 26, 2012 3:07 pm
- Forum: Compressed files and methods
- Topic: Persona 4 Arena .PAC archive extracting
- Replies: 2
- Views: 1710
Re: Persona 4 Arena .PAC archive extracting
are you sure this is not related to this thread?
viewtopic.php?f=10&t=9349
viewtopic.php?f=10&t=9349
- Thu Jul 26, 2012 1:03 pm
- Forum: Game Archive
- Topic: grand prix evolution compressed files, encrypted?
- Replies: 14
- Views: 3055
Re: grand prix evolution compressed files, encrypted?
exe+file in pm
- Thu Jul 26, 2012 10:10 am
- Forum: Game Archive
- Topic: grand prix evolution compressed files, encrypted?
- Replies: 14
- Views: 3055
Re: grand prix evolution compressed files, encrypted?
that key is the result of an expansion (it's just a concatenation) and scrambling of the 0x84 bytes long key 98ru91nb98fH98ufkfQkRAnf09i09kmvVnSjzAc9iu28rir09akdnBCn289ua9f09aRFnf029ur09akQRtanmzlkAvjb983ur9jaopVAkfmlzrWknlRzxc90i3r09uqtARankfnQdf to a 1024 one using an algorithm similar to an rc4. ...
- Wed Jul 25, 2012 7:40 pm
- Forum: Game Archive
- Topic: grand prix evolution compressed files, encrypted?
- Replies: 14
- Views: 3055
Re: grand prix evolution compressed files, encrypted?
that one is only a part of the job (it's just a simple xor that thing), anyway I did the job:
http://aluigi.org/papers/bms/gpeg.bms
http://aluigi.org/papers/bms/gpeg.bms
- Wed Jul 25, 2012 6:19 pm
- Forum: Game Archive
- Topic: Project Cars
- Replies: 42
- Views: 29146
Re: Project Cars
sure but not in the standard structure of the archive (the one used from NFS Shift), they may be contained in another file or even in the executable.
maybe even in the archive but probably in one of the files, not in its structure (I didn't see them)
maybe even in the archive but probably in one of the files, not in its structure (I didn't see them)
- Wed Jul 25, 2012 5:12 pm
- Forum: Game Archive
- Topic: Project Cars
- Replies: 42
- Views: 29146
Re: Project Cars
those are the names contained in the archive, personally I can't extract files with other names that I don't have or don't exist since it's not technically possible.
- Wed Jul 25, 2012 5:08 pm
- Forum: Code Talk
- Topic: quickbms byte alignment
- Replies: 8
- Views: 3116
Re: quickbms byte alignment
isn't the Padding command enough for this job?
padding 4
note that the alignment calculation is made from offset 0.
the math command has the 'x' operator that does alignment works, for example:
math TMP = 7
math TMP x= 4
print "%TMP%"
padding 4
note that the alignment calculation is made from offset 0.
the math command has the 'x' operator that does alignment works, for example:
math TMP = 7
math TMP x= 4
print "%TMP%"
- Mon Jul 23, 2012 2:00 pm
- Forum: Game Archive
- Topic: Simraceway MAS
- Replies: 20
- Views: 9579
Re: Simraceway MAS
give me the name of one of these MAS, I have tried with evox.mas and everything worked correctly.
I'm using the latest simraceway.bms released some days ago: 0.2
I'm using the latest simraceway.bms released some days ago: 0.2
- Sat Jul 21, 2012 3:23 pm
- Forum: Game Archive
- Topic: Battle Hearts (*.DAT)
- Replies: 1
- Views: 703
Re: Battle Hearts (*.DAT)
you can make the last part smaller removing filexor "" because doesn't get used and using do while: ... do filexor KEY NULLS get NSIZE byte getdstring NAME NSIZE get OFFSET long get SIZE long log NAME OFFSET SIZE savepos TMP while TMP < TABLESIZE I know that a "while {} do" would...
- Sat Jul 21, 2012 3:19 pm
- Forum: Game Archive
- Topic: Dead Rising 2 Off-the-record (0x03040506)
- Replies: 4
- Views: 1858
Dead Rising 2 Off-the-record (0x03040506)
just seen this new format with the signature 0x03040506 (probably used to control the endianess of the file):
http://aluigi.org/papers/bms/deadrising2_otr.bms
http://aluigi.org/papers/bms/deadrising2_otr.bms
