Help with extracting contents of autorun file

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
AlphaTwentyThree
Posts: 909
Joined: Sat Aug 09, 2014 11:21 am

Help with extracting contents of autorun file

Post by AlphaTwentyThree »

Hi guys!

The installer to Spider-Man: Web of Shadows has a music track playing in the background. However, the contents of the exe file don't extract into the temporary folder of Windows. Parsing the file with Luigi's script didn't help. Does anybody have an idea?
Here's the file: https://1fichier.com/?h4vt5r57l4 (don't worry about the exe file, it's not a virus...)
Thanks for your help!
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Help with extracting contents of autorun file

Post by aluigi »

Very quickly and without any check (sorry), first you have to decompress the executable with upx, then I found various zlib data in the resulted executable.
There is only one of these compressed data which is big and it contains a zlib compressed data (base64 of some probably-encrypted data) and a "swfdata" compressed data at the end.
I repeat, I did only a quick and lame check with offzip, I spent more time writing this post than doing the test :D
AlphaTwentyThree
Posts: 909
Joined: Sat Aug 09, 2014 11:21 am

Re: Help with extracting contents of autorun file

Post by AlphaTwentyThree »

Ok, so you basically say that the audio file isn't accessible, right?
Same with this one? https://1fichier.com/?agp7rmvpte
MerlinSVK
Posts: 165
Joined: Wed Aug 13, 2014 10:00 am

Re: Help with extracting contents of autorun file

Post by MerlinSVK »

Luigi was really close, that music is indeed in SWF file.

http://www68.zippyshare.com/v/GA6CpudX/file.html