Bonsai Barber .dat Files

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
Larsenv
Posts: 137
Joined: Thu Jun 04, 2015 11:20 pm

Bonsai Barber .dat Files

Post by Larsenv »

Hi,

Could someone please make a QuickBMS Script for Bonsai Barber's .dat files?

I believe they are CFF archives.

I also decrypted the .pkg file the game uses with offzip, it's a zlib compressed file, and I now have this if anyone is willing to look at this and make a QuickBMS script for me.

Thank You.
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Bonsai Barber .dat Files

Post by aluigi »

Code: Select all

endian big
get DUMMY long
get DAT_SIZE long
get ZERO long
get DUMMY long
get FILES long
savepos BASE_OFF
xmath BASE_OFF "BASE_OFF + FILES * (0x20 + 4 + 4)"
math BASE_OFF x 0x100
for i = 0 < FILES
    getdstring NAME 0x20
    get OFFSET long
    get SIZE long
    math OFFSET + BASE_OFF
    log NAME OFFSET SIZE
next i
Larsenv
Posts: 137
Joined: Thu Jun 04, 2015 11:20 pm

Re: Bonsai Barber .dat Files

Post by Larsenv »

Thanks a lot for that, it worked. However, I'm also interested in extracting the stuff from TV Friend Channel as well, it looks similar to the Bonsai Barber .dat file, but I don't know how to extract from that one.

Could you please make a QuickBMS script for TV Friend Channel?
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Bonsai Barber .dat Files

Post by aluigi »

I see only linked stuff without sense and nothing to dump:

Code: Select all

endian big
get DAT_SIZE long
get INFO_OFF long
get FILES long
get DUMMY long
get ZERO long
getdstring DUMMY 4
get ZERO long
get ZERO long
savepos BASE_OFF
math INFO_OFF + BASE_OFF
goto INFO_OFF
for i = 0 < FILES
    get OFFSET long
    math OFFSET + BASE_OFF
    savepos TMP
    goto OFFSET
    get OFFSET long
    math OFFSET + BASE_OFF
    print "??? %OFFSET|X%"
    goto TMP
next i
Larsenv
Posts: 137
Joined: Thu Jun 04, 2015 11:20 pm

Re: Bonsai Barber .dat Files

Post by Larsenv »

Hmm, interesting, it didn't do anything but only printed the offset as seen on the second to last line, lol.

That's OK though, thanks a lot for your help and for making all of the tools, I'll be back here when I need something else decrypted.