This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=381

michalss, posted Sun Nov 16, 2014 12:09 am (1801)

---

Hi can anyone have a look pls ? I would like to get structure

Thank you

Code:

https://dl.dropboxusercontent.com/u/38234344/loctext.rar

michalss, posted Sun Nov 16, 2014 8:56 am (1806)

---

This script works to extract TOC SB, but files are compressed or something, anyone help pls ?

Look like compression used is LZ77.... : here is more info and some research : http://www.bfeditor.org/forums/index.ph ... opic=15844

Here is pyScrips LZ77 lib for decompression: https://www.dropbox.com/s/rhu9gjxs9087vn7/bf4dumper.zip

michalss, posted Sun Nov 16, 2014 10:21 am (1807)

---

Ok it is normal zlib but data are encrypted or something!

aluigi, posted Sun Nov 16, 2014 10:59 am (1808)

---

Script updated to automatically unpack these chunked archives (yeah they contain files inside):
http://aluigi.org/papers/bms/frostbite.bms

michalss, posted Sun Nov 16, 2014 11:31 am (1809)

---

aluigi wrote:

Script updated to automatically unpack these chunked archives (yeah they contain files inside):
http://aluigi.org/papers/bms/frostbite.bms

Nice ..See this files inside are encrypted ? Can u help pls? Not on pc righg now so if im wrong anf files are ok ten sorry

aluigi, posted Sun Nov 16, 2014 11:37 am (1810)

---

I don't think they are encrypted, in fact they can be compressed without problems.
Usually when archives implement encryption they perform it after the compression and not before.

michalss, posted Sun Nov 16, 2014 11:42 am (1811)

---

aluigi wrote:

I don't think they are encrypted, in fact they can be compressed without problems.
Usually when archives implement encryption they perform it after the compression and not before.

I ment i can see headers for texts but datablock with text is not readable this is what i mean..

michalss, posted Sun Nov 16, 2014 1:40 pm (1813)

---

It looks like another compression or encryption Anyone please ??

michalss, posted Sun Nov 16, 2014 3:06 pm (1815)

---

Also cannot extract this : https://dl.dropboxusercontent.com/u/38234344/X360.rar

michalss, posted Sun Nov 16, 2014 5:33 pm (1817)

---

ok so it looks like xor!!! Is there any chance to found xor key somehow ?

aluigi, posted Sun Nov 16, 2014 7:34 pm (1822)

---

Script updated to support that archive.

michalss, posted Sun Nov 16, 2014 8:33 pm (1824)

---

Thank you it works, have you try luck with this xor files pls ??

michalss, posted Sun Nov 23, 2014 9:16 pm (1949)

---

anyone can help with xor part pls ?? Thx

Ekey, posted Sun Nov 23, 2014 9:33 pm (1951)

---

I have no idea about this :/