Is this file compressed?

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
prixone
Posts: 12
Joined: Sun Mar 25, 2018 7:24 pm

Is this file compressed?

Post by prixone »

I tried to run a scan on it but I kept getting errors, any chance you guys could take a look?

The directly URL is as follow:

Code: Select all

aurakingdom.patch.aeriagames.com/release/20131002145600bz2/_GameDataFileList.txt?201806070154


Not sure if required but the requests usually have the current date/hour at the end "?201806070154"

I can read the header of the above file but from 0x374 it seems to be compressed and I would like to figure out how to read it, if any one could help out!

Thanks.
Last edited by prixone on Fri Aug 10, 2018 1:13 pm, edited 1 time in total.
prixone
Posts: 12
Joined: Sun Mar 25, 2018 7:24 pm

Re: Is this file encrypted at 0x370 or compressed?

Post by prixone »

Maybe I am going crazy, I can see it have the header 78 DA at 0x374 however using zlibx and zlib it will not decompress the file.

From the header I assume

22 af 0d 00 compressed size?
a3 37 3b 00 uncompressed size?
Last edited by prixone on Wed Aug 08, 2018 2:05 am, edited 1 time in total.
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Is this file encrypted at 0x370 or compressed?

Post by aluigi »

Why reinventing the wheel?
http://aluigi.org/bms/packver01.bms
prixone
Posts: 12
Joined: Sun Mar 25, 2018 7:24 pm

Re: Is this file encrypted at 0x370 or compressed?

Post by prixone »

From what I understood the packvver01 is to generate the file with the URL list, which is not what I am trying to do, I want to read the file from the URL to extract a single line from it for comparison on the checksum, without having to download any game files or have those files locally.
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Is this file encrypted at 0x370 or compressed?

Post by aluigi »

Mah, here it works perfectly and successfully decompressed the file
prixone
Posts: 12
Joined: Sun Mar 25, 2018 7:24 pm

Re: Is this file encrypted at 0x370 or compressed?

Post by prixone »

is it using zlibx on it?

Oh boy I must be drunk...
prixone
Posts: 12
Joined: Sun Mar 25, 2018 7:24 pm

Re: Is this file encrypted at 0x370 or compressed?

Post by prixone »

Well I get:

Code: Select all

  offset   filesize   filename
--------------------------------------
  00000374 3880867    20180724105812\20180724105812src\/GameDataFileList.txt

Error: the compressed zlib/deflate input is wrong or incomplete (-3)
Info:  algorithm   1
       offset      00000374
       input size  0x000dabae 895918
       output size 0x003b37a3 3880867
       result      0xffffffff -1

Error: the uncompressed data (-1) is bigger than the allocated buffer (3880867)
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Is this file encrypted at 0x370 or compressed?

Post by aluigi »

Don't know, here it's perfect.
I have attached the generated file as proof.
The md5 hash of the downloaded file was d4f00dd5c05fc6fdd2c1aee27013c57c, just in case there is some ip/region difference.
prixone
Posts: 12
Joined: Sun Mar 25, 2018 7:24 pm

Re: Is this file encrypted at 0x370 or compressed?

Post by prixone »

What command are you running with quickbms? maybe I am doing something wrong.

I was downloading the above file and then running:

Code: Select all

quickbms.exe packver01.bms _GameDataFileList.txt output


And it would give me that error.
prixone
Posts: 12
Joined: Sun Mar 25, 2018 7:24 pm

Re: Is this file encrypted at 0x370 or compressed?

Post by prixone »

OK, I have found the issue, for some reason my file was corrupted, sorry about the trouble, and thank you very much for answering quickbms is a GREAT tool thank you for creating it as well as the other many tools u have shared!