Skip to content
View in the app

A better way to browse. Learn more.

ResHax

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
Help us keep the site running.

Five Nights at Freddy's

Featured Replies

  • Author
  • Localization

aluigi, posted Sun Jan 04, 2015 1:31 pm (2442)


This game embeds all the files in the executable but not in the resource section.
The format is simple for the initial files (dlls) but then from the "PAMU" format it starts to not work as expected so the best solution is offzip.

It's enough to launch offzip on the executable to dump all the files compressed with zlib.

You can use the following script to convert/extract the audio files to wav by using quickbms on the whole folder where you extracted the files with offzip:
Code:
get SIZE asize
get NAME unicode
padding 8
savepos OFFSET
math SIZE -= OFFSET
if SIZE > 0
    getdstring SIGN 4
    if SIGN == "RIFF"
        string NAME = ".wav"
        log NAME OFFSET SIZE
    endif
endif
I can't help with other files.



If you want to dump all the executable sections and resources you can use this script:
http://aluigi.org/papers/bms/others/parse_exe.bms
(I wrote it just to test quickbms with the Windows PE files but it's useful)

Then you can use the following script to extract the format before the "PAMU" one, it contains just few dlls so it's not much useful but if you want to try:
Code:
comtype unzip_dynamic
idstring "wwww"
get DUMMY long
get DUMMY long
get SIZE long   # PAMU
get DUMMY long
get ZERO long
get ZERO long
get FILES long
for i = 0 < FILES
    get NAMESZ short
    math NAMESZ *= 2
    getdstring NAME NAMESZ
    set NAME unicode NAME
    get ZERO long
    get SIZE long
    savepos OFFSET
    clog NAME OFFSET SIZE SIZE
    math OFFSET = SIZE
    goto OFFSET
next i
It must be launched on the "LASTDATA*" file generated by parse_exe.bms (LASTDATA_000f8000_0db7b824.dat).
  • Author
  • Localization

aluigi, posted Sat Sep 05, 2015 6:27 pm (7227)


offzip is the only solution.
Guest
This topic is now closed to further replies.

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.