Page 1 of 1
Unknown Compression Method
Posted: Tue Jan 03, 2006 11:18 pm
by friendsofwatto
Hi guys,
Someone sent me an archive to look at from the game Black Magic. The archive format it easy enough, but the files are compressed using an unknown algorithm. However, I was hoping someone would know the method, as the compressed files (not the archive itself) all seem to have a 2-byte header with values (09,0B) in hex, or (9,11) in decimal.
I thought that it may simply have been a PKZip file that had been encrypted somehow, but it doesn't seem to be anything nice if this is the case.
If anyone could shed some light on this, it'd be great. I have attached a zip with some sample compressed files in it.
WATTO
watto@watto.org
http://www.watto.org
PS - I have tried to run it through some generic algorithms like gzip, zlib, LZSS, LZW, etc but didn't have any success
Hi there.
Posted: Wed Jan 04, 2006 1:02 am
by Strobe
Is there a possibility that you could post the exe file for this game?
maybe the answer lies in there.
Posted: Wed Jan 04, 2006 2:45 am
by friendsofwatto
Sorry no, I don't have access to it - someone send me the archive - otherwise I would have given it a go.
Oh, and the name of the game was wrong - it is BLOOD MAGIC.
Thanks mate.
WATTO
watto@watto.org
http://www.watto.org
Posted: Wed Jan 04, 2006 4:04 am
by Rahly
hehe, i thought that was wrong, unless its an Activision game, they would be sued for that game name
Posted: Wed Jan 04, 2006 12:04 pm
by dimi
Posted: Wed Jan 04, 2006 12:38 pm
by Mr.Mouse
Some listed functions and dependancies below: (the first one seems interesting and also the LuaStateMachine. Lua is a scripting language.
Check out this:
http://lua-users.org/wiki/LuaModuleLzo
LZO compression could be the one we're after, but I'm sure there are more methods for Lua. I think LZO is mostly used for text.
Check this:
http://luaforge.net/softwaremap/trove_l ... orm_cat=42
Code: Select all
?AddSubfoldersToHash@@YAXPAV?$String_T@$0BAA@@@_N1@Z
6 (0x0006)
7 (0x0007)
?CreateGlobalVariable@LuaStateMachine_c@@QAEXPBDH@Z
?CreateGlobalVariable@LuaStateMachine_c@@QAEXPBDM@Z
10 (0x000A)
11 (0x000B)
?DeterminePlayerSpawnplace@ServerWorld_c@@QAE_NPAVrpgCharacter_c@@@Z
13 (0x000D)
14 (0x000E)
15 (0x000F)
?LandRegionInit@@YAXXZ
17 (0x0011)
18 (0x0012)
?MoveToMap@Game_c@@IAE_NABVFileName_c@@ABV?$String_T@$0BAA@@@@Z
20 (0x0014)
21 (0x0015)
?RenderInit@@YA_NXZ
23 (0x0017)
24 (0x0018)
25 (0x0019)
26 (0x001A)
?SendCharacterInfo@ServerWorld_c@@IBEXHPAVrpgCharacter_c@@@Z
?SendItemInfo@ServerWorld_c@@QBEXHPAVrpgItem_c@@_NHHW4ItemDropType_e@@@Z
?Serialize@rpgCharacter_c@@QAEXAAVSerializeable_c@@@Z
30 (0x001E)
?SinCosTableInit@@YAXXZ
32 (0x0020)
?WerksWaterInit@@YAXXZ
The dependancies:
Code: Select all
ADVAPI32.DLL
AVIFIL32.DLL
BINKW32.DLL
BLOODMAGIC.EXE
COMCTL32.DLL
D3D8THK.DLL
D3D9.DLL
D3DX9_26.DLL
DINPUT8.DLL
GDI32.DLL
KERNEL32.DLL
MSACM32.DLL
MSVCRT.DLL
MSVFW32.DLL
NTDLL.DLL
OLE32.DLL
OLEAUT32.DLL
PROTECT.DLL
RPCRT4.DLL
SHELL32.DLL
SHLWAPI.DLL
USER32.DLL
VERSION.DLL
WINMM.DLL
WS2HELP.DLL
WS2_32.DLL
WSOCK32.DLL
Posted: Wed Jan 04, 2006 1:00 pm
by friendsofwatto
Ah yes, I've heard of LUA and know kinda what its all about - never seen any compressed LUA files though.
Thanks, I will see if I can find some LZO decompressors.
WATTO
watto@watto.org
http://www.watto.org
Posted: Wed Jan 04, 2006 1:26 pm
by Mr.Mouse
Can we also see the archive in total?
Posted: Wed Jan 04, 2006 1:42 pm
by friendsofwatto
The contents of this post was deleted because of possible forum rules violation.
Just a thought
Posted: Wed Jan 04, 2006 3:51 pm
by Strobe
The exefile is protected with starforce. is it possible
that the datafiles is protected with this too?
Posted: Wed Jan 04, 2006 10:34 pm
by friendsofwatto
I guess it would be possible, but not probable. In all the starforce games I've encountered, either the archive is totally protected, or it has no protection at all. I don't think that they would protect the individual files in the archive (is that even possible using starforce) ?
Nice possibility though, good thinking - I'd be interested to see if you were correct or not.
Oh, not that I think of it, i don't think this would be the issue - the files are compressed, not encrypted. I don't think starforce does compression??
WATTO
watto@watto.org
http://www.watto.org
Posted: Wed Jan 04, 2006 11:11 pm
by Silver
Hello in regards to LZO compression, I've seen it compress many things in game before. Look at Fable tons of LZO compressed chunks. With that the compression was noticeable by the tail of the compressed data. I imagine there are probably differences from different type. The only thing I noticed was 09 0B at start of each file. The .wavs were initially the same but the dds the next two bytes changed.
Posted: Thu Jan 05, 2006 9:40 pm
by aluigi
For help on LZO, try to use minilzo (available on the same website):
len = lzo1x_decompress_safe(in, len, out, outsz, LZO1X_MEM_DECOMPRESS);
where in is the buffer containing the compressed data, len is the lenght of this data, out is the output buffer which will contain the decompressed data and outsz is its max size.
Posted: Thu Jan 05, 2006 11:25 pm
by friendsofwatto
Thanks for that. Yeah I tried the LZO decompression but it didn't decompress - complained that the headers of the archive were not correct
Shame - cause now we are back to square one. Never mind.
WATTO
watto@watto.org
http://www.watto.org