Page 1 of 1

XBrave Online user Gamebryo Version 20.3.0.9

Posted: Fri Sep 03, 2010 3:32 pm
by buang007
The contents of this post was deleted because of possible forum rules violation.

Re: XBrave Online user Gamebryo Version 20.3.0.9

Posted: Sat Sep 04, 2010 12:49 am
by pixellegolas
I get this with signsearch:
00f24350 309 padding used in hashing algorithms <0x80 0 ... 0> [..64]
0086a559 2269 DMC compression [32.le.16&]

Re: XBrave Online user Gamebryo Version 20.3.0.9

Posted: Sat Sep 04, 2010 4:49 pm
by WRS
odd that sigsearch didnt pickup the deflate algo. either way -

Code: Select all

# -- WRS
#    xentax.com
#    .dho BMS script

get FSIZE asize

for

  get BLOCKSIG long

  if BLOCKSIG == 0x01797268 # hry\x1

    get FLAGS long
    get CTYPE short
    get UNKNOWN long
    get CRC32 long
    get ZSIZE long
    get SIZE long
    get FNAMESIZE long

    getdstring FNAME FNAMESIZE

    if FILESIZE > 0

      savepos POS

      if CTYPE == 0

        log FNAME POS ZSIZE       

      elif CTYPE == 8

        comtype deflate
        clog FNAME POS ZSIZE SIZE

      else

        print "Unknown compression type for '%FNAME%'"
        cleanexit

      endif

      math POS += ZSIZE
      goto POS

    endif


  elif BLOCKSIG == 0x04797268 # hry\x4

    getdstring UNKNOWN 36

    get FNAMESIZE long
    get UNKNOWN short # should test this is always 0

    getdstring FNAME FNAMESIZE


  elif BLOCKSIG == 0x07797268 # hry\x7

    getdstring UNKNOWN 24

  else

    print "unrecognised block header (%BLOCKSIG%)"
    cleanexit

  endif

  savepos POS

  if POS == FSIZE

    cleanexit

  endif

next

Re: XBrave Online user Gamebryo Version 20.3.0.9

Posted: Sun Sep 05, 2010 12:48 am
by pixellegolas
good stuff :)