This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=1598

Larsenv, posted Mon Oct 19, 2015 1:39 am (8620)

---

Here.

aluigi, posted Mon Oct 19, 2015 12:05 pm (8636)

---

Half file is indexed text, maybe you want to translate/localize it?

Larsenv, posted Mon Oct 19, 2015 4:10 pm (8645)

---

No, I just need to print some u32 values and anything there if QuickBMS can do that, they are at the start of the file (after crc and whatever).

I'm working on a project to make my own data from this so I need to be able to understand everything in the file first.

aluigi, posted Mon Oct 19, 2015 5:25 pm (8647)

---

This is my idea, basically it can be probably mixed with the script of the other post:

Code:

endian big
get ZERO long
get BIN_SIZE long
get VAR long
get VAR long
get VAR long
get VAR long
get VAR long
get VAR long

get ENTRIES1 long
get OFFSET1 long
get ENTRIES2 long
get OFFSET2 long
get ENTRIES3 long
get OFFSET3 long
get ENTRIES4 long
get OFFSET4 long
get ENTRIES5 long
get OFFSET5 long
get ENTRIES6 long
get OFFSET6 long
get ENTRIES7 long
get OFFSET7 long

goto OFFSET1
for i = 0 < ENTRIES1
    getdstring DATA 0x80
next i

goto OFFSET2
for i = 0 < ENTRIES2
    getdstring DATA 0x48
next i

goto OFFSET3
for i = 0 < ENTRIES3
    getdstring DATA 8
next i

goto OFFSET4
for i = 0 < ENTRIES4
    getdstring DATA 8
next i

goto OFFSET5
for i = 0 < ENTRIES5
    getdstring DATA 8
next i

goto OFFSET6
for i = 0 < ENTRIES6
    getdstring DATA 8
next i

goto OFFSET7
for i = 0 < ENTRIES7
    getdstring DATA 0x18
next i

Larsenv, posted Tue Oct 20, 2015 11:03 pm (8714)

---

Could you please make it so it can print the data it finds as well?

aluigi, posted Tue Oct 20, 2015 11:06 pm (8715)

---

Ah right, use quickbms -V script.bms file.bin from the command-line and it will dump the hexadecimal numbers and hexdump of everything it reads from the file

Larsenv, posted Wed Oct 21, 2015 1:02 pm (8725)

---

OK I tried that, it outputted a lot of stuff...

Can the output it gave me be saved to a file/copied to my clipboard?

aluigi, posted Wed Oct 21, 2015 1:12 pm (8726)

---

No.
Dump it to file with redirection: quickbms ... > dump.txt

Larsenv, posted Wed Oct 21, 2015 9:49 pm (8750)

---

I forgot about the text output thing...

The script gives some big chunks of hex I'd like to break down into smaller pieces (like the script for short.bin), how can I do so?

Also, I also need help decrypting this as well since I don't know much about RSA...

aluigi, posted Wed Oct 21, 2015 10:15 pm (8751)

---

It looks like what you want is the full format of that file, field by field.
The script is that. That's all from me.

And regarding that encryption stuff, a signature is a signature and not encrypted text.

Larsenv, posted Wed Oct 21, 2015 11:29 pm (8752)

---

aluigi wrote:

The script is that. That's all from me.

OK.

aluigi wrote:

And regarding that encryption stuff, a signature is a signature and not encrypted text.

I've been researching a LOT on this, and it seems that the signature is actually an encrypted SHA1 hash block.

The reason why I'm trying to decrypt this is to see how this is formed (my Wii verifies the RSA signature in the data) so I can use custom data, how can I do this?