Important information: this site is currently scheduled to go offline indefinitely by December 1st 2023.
If you wish to donate to attempt the preservation of tools and software somewhere else before it goes down, check the GoFundMe

Search found 1910 matches

by aluigi
Wed Aug 01, 2012 8:49 am
Forum: Code Talk
Topic: Making memory file as "file 0"
Replies: 2
Views: 1861

Re: Making memory file as "file 0"

and why you use a memory_file?

filexor "stuff"
get DUMMY long
getdstring DUMMY 0x10
...

you don't need a memory_file
by aluigi
Wed Aug 01, 2012 8:48 am
Forum: Code Talk
Topic: Need tips to analyze hacked memory pointers
Replies: 1
Views: 1775

Re: Need tips to analyze hacked memory pointers

oh well, I wrote a reply but the timedout login deleted it.

in short that thing it's caused by relocations (like aslr) and heap memory (allocations) so the solution is tracking the functions that read/create the memory and referring to the module base address for the relocations
by aluigi
Thu Jul 26, 2012 4:03 pm
Forum: Game Archive
Topic: grand prix evolution compressed files, encrypted?
Replies: 14
Views: 3055

Re: grand prix evolution compressed files, encrypted?

the only difference between demo and full version is that this second one doesn't use the additional scrambling/encryption on the files
by aluigi
Thu Jul 26, 2012 3:15 pm
Forum: Game Archive
Topic: grand prix evolution compressed files, encrypted?
Replies: 14
Views: 3055

Re: grand prix evolution compressed files, encrypted?

job done, script updated.

in short the additional encryption (gpe_decrypt_file.c) is applied only when "TYPE & 1"
by aluigi
Thu Jul 26, 2012 3:07 pm
Forum: Compressed files and methods
Topic: Persona 4 Arena .PAC archive extracting
Replies: 2
Views: 1710

Re: Persona 4 Arena .PAC archive extracting

are you sure this is not related to this thread?
viewtopic.php?f=10&t=9349
by aluigi
Thu Jul 26, 2012 10:10 am
Forum: Game Archive
Topic: grand prix evolution compressed files, encrypted?
Replies: 14
Views: 3055

Re: grand prix evolution compressed files, encrypted?

that key is the result of an expansion (it's just a concatenation) and scrambling of the 0x84 bytes long key 98ru91nb98fH98ufkfQkRAnf09i09kmvVnSjzAc9iu28rir09akdnBCn289ua9f09aRFnf029ur09akQRtanmzlkAvjb983ur9jaopVAkfmlzrWknlRzxc90i3r09uqtARankfnQdf to a 1024 one using an algorithm similar to an rc4. ...
by aluigi
Wed Jul 25, 2012 7:40 pm
Forum: Game Archive
Topic: grand prix evolution compressed files, encrypted?
Replies: 14
Views: 3055

Re: grand prix evolution compressed files, encrypted?

that one is only a part of the job (it's just a simple xor that thing), anyway I did the job:
http://aluigi.org/papers/bms/gpeg.bms
by aluigi
Wed Jul 25, 2012 6:19 pm
Forum: Game Archive
Topic: Project Cars
Replies: 42
Views: 29146

Re: Project Cars

sure but not in the standard structure of the archive (the one used from NFS Shift), they may be contained in another file or even in the executable.
maybe even in the archive but probably in one of the files, not in its structure (I didn't see them)
by aluigi
Wed Jul 25, 2012 5:12 pm
Forum: Game Archive
Topic: Project Cars
Replies: 42
Views: 29146

Re: Project Cars

those are the names contained in the archive, personally I can't extract files with other names that I don't have or don't exist since it's not technically possible.
by aluigi
Wed Jul 25, 2012 5:08 pm
Forum: Code Talk
Topic: quickbms byte alignment
Replies: 8
Views: 3116

Re: quickbms byte alignment

isn't the Padding command enough for this job?
padding 4

note that the alignment calculation is made from offset 0.
the math command has the 'x' operator that does alignment works, for example:
math TMP = 7
math TMP x= 4
print "%TMP%"
by aluigi
Mon Jul 23, 2012 2:00 pm
Forum: Game Archive
Topic: Simraceway MAS
Replies: 20
Views: 9579

Re: Simraceway MAS

give me the name of one of these MAS, I have tried with evox.mas and everything worked correctly.
I'm using the latest simraceway.bms released some days ago: 0.2
by aluigi
Sat Jul 21, 2012 3:23 pm
Forum: Game Archive
Topic: Battle Hearts (*.DAT)
Replies: 1
Views: 703

Re: Battle Hearts (*.DAT)

you can make the last part smaller removing filexor "" because doesn't get used and using do while: ... do filexor KEY NULLS get NSIZE byte getdstring NAME NSIZE get OFFSET long get SIZE long log NAME OFFSET SIZE savepos TMP while TMP < TABLESIZE I know that a "while {} do" would...
by aluigi
Sat Jul 21, 2012 3:19 pm
Forum: Game Archive
Topic: Dead Rising 2 Off-the-record (0x03040506)
Replies: 4
Views: 1858

Dead Rising 2 Off-the-record (0x03040506)

just seen this new format with the signature 0x03040506 (probably used to control the endianess of the file):
http://aluigi.org/papers/bms/deadrising2_otr.bms