Forecast Channel forecast.bin File

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
Larsenv
Posts: 137
Joined: Thu Jun 04, 2015 11:20 pm

Forecast Channel forecast.bin File

Post by Larsenv »

aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Forecast Channel forecast.bin File

Post by aluigi »

Half file is indexed text, maybe you want to translate/localize it?
Larsenv
Posts: 137
Joined: Thu Jun 04, 2015 11:20 pm

Re: Forecast Channel forecast.bin File

Post by Larsenv »

No, I just need to print some u32 values and anything there if QuickBMS can do that, they are at the start of the file (after crc and whatever).

I'm working on a project to make my own data from this so I need to be able to understand everything in the file first.
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Forecast Channel forecast.bin File

Post by aluigi »

This is my idea, basically it can be probably mixed with the script of the other post:

Code: Select all

endian big
get ZERO long
get BIN_SIZE long
get VAR long
get VAR long
get VAR long
get VAR long
get VAR long
get VAR long

get ENTRIES1 long
get OFFSET1 long
get ENTRIES2 long
get OFFSET2 long
get ENTRIES3 long
get OFFSET3 long
get ENTRIES4 long
get OFFSET4 long
get ENTRIES5 long
get OFFSET5 long
get ENTRIES6 long
get OFFSET6 long
get ENTRIES7 long
get OFFSET7 long

goto OFFSET1
for i = 0 < ENTRIES1
    getdstring DATA 0x80
next i

goto OFFSET2
for i = 0 < ENTRIES2
    getdstring DATA 0x48
next i

goto OFFSET3
for i = 0 < ENTRIES3
    getdstring DATA 8
next i

goto OFFSET4
for i = 0 < ENTRIES4
    getdstring DATA 8
next i

goto OFFSET5
for i = 0 < ENTRIES5
    getdstring DATA 8
next i

goto OFFSET6
for i = 0 < ENTRIES6
    getdstring DATA 8
next i

goto OFFSET7
for i = 0 < ENTRIES7
    getdstring DATA 0x18
next i
Larsenv
Posts: 137
Joined: Thu Jun 04, 2015 11:20 pm

Re: Forecast Channel forecast.bin File

Post by Larsenv »

Could you please make it so it can print the data it finds as well? :)
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Forecast Channel forecast.bin File

Post by aluigi »

Ah right, use quickbms -V script.bms file.bin from the command-line and it will dump the hexadecimal numbers and hexdump of everything it reads from the file
Larsenv
Posts: 137
Joined: Thu Jun 04, 2015 11:20 pm

Re: Forecast Channel forecast.bin File

Post by Larsenv »

OK I tried that, it outputted a lot of stuff...

Can the output it gave me be saved to a file/copied to my clipboard?
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Forecast Channel forecast.bin File

Post by aluigi »

No.
Dump it to file with redirection: quickbms ... > dump.txt
Larsenv
Posts: 137
Joined: Thu Jun 04, 2015 11:20 pm

Re: Forecast Channel forecast.bin File

Post by Larsenv »

I forgot about the text output thing...

The script gives some big chunks of hex I'd like to break down into smaller pieces (like the script for short.bin), how can I do so?

Also, I also need help decrypting this as well since I don't know much about RSA...
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Forecast Channel forecast.bin File

Post by aluigi »

It looks like what you want is the full format of that file, field by field.
The script is that. That's all from me.

And regarding that encryption stuff, a signature is a signature and not encrypted text.
Larsenv
Posts: 137
Joined: Thu Jun 04, 2015 11:20 pm

Re: Forecast Channel forecast.bin File

Post by Larsenv »

aluigi wrote:The script is that. That's all from me.


OK.

aluigi wrote:And regarding that encryption stuff, a signature is a signature and not encrypted text.


I've been researching a LOT on this, and it seems that the signature is actually an encrypted SHA1 hash block.

The reason why I'm trying to decrypt this is to see how this is formed (my Wii verifies the RSA signature in the data) so I can use custom data, how can I do this?