Silence of Sleep - extract sots.exe

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
AlphaTwentyThree
Posts: 909
Joined: Sat Aug 09, 2014 11:21 am

Silence of Sleep - extract sots.exe

Post by AlphaTwentyThree »

Hello! Can anybody help me to extract the contents of the main executable? I've cut the first and last 2mb of the file: http://neygeoy6bo.1fichier.com/
Thanks!
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Silence of Sleep - extract sots.exe

Post by aluigi »

Use other file hosters or the forum uploads, that hoster is limited.
AlphaTwentyThree
Posts: 909
Joined: Sat Aug 09, 2014 11:21 am

Re: Silence of Sleep - extract sots.exe

Post by AlphaTwentyThree »

Sorry, didn't know. Here's a new link: http://*USE_ANOTHER_FILEHOSTING*/72637f2 ... 5d/sots.7z
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Silence of Sleep - extract sots.exe

Post by aluigi »

There are two different formats in the parts of the file you provided.

In sots2mbstart from offset 0x16ac3c the format is:
NAMESZ short
unicode NAME (NAMESZ * 2)
ZSIZE
zlib data (without the uncompressed size field)

Instead in the end one there is a 0x20 bytes header that contains both ZSIZE and SIZE but no names.

Probably it's a good idea ot use offzip -a.
AlphaTwentyThree
Posts: 909
Joined: Sat Aug 09, 2014 11:21 am

Re: Silence of Sleep - extract sots.exe

Post by AlphaTwentyThree »

aluigi wrote:There are two different formats in the parts of the file you provided.

In sots2mbstart from offset 0x16ac3c the format is:
NAMESZ short
unicode NAME (NAMESZ * 2)
ZSIZE
zlib data (without the uncompressed size field)

Instead in the end one there is a 0x20 bytes header that contains both ZSIZE and SIZE but no names.

Probably it's a good idea ot use offzip -a.
Hm, what does the NAMESZ variable contain? I've decompressed the whole exe into one big 3GB file but I'm missing a TOC and the names.
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Silence of Sleep - extract sots.exe

Post by aluigi »

NAMESZ is just my way to specify the field containing the length of the NAME string, in this case you have NAMESZ which is the length of the string but the string is stored as unicode utf16 and so NAMESZ * 2.