Extracting Files from Unknown Archives - Urgent Help

Discussion in 'Programming' started by Hitterman, Sep 4, 2009.

  1. Hitterman

    Hitterman New Member

    Joined:
    Sep 4, 2009
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    0
    Hello guys,

    Nice to be here. I need some help. There is a game made by codemasters Ashes Cricket 2009. In it, there is a file with format .big.w32. It's a totally new format. I have tried all possible archive openers to open it.

    Now I need help from you. Is there any way by which we can extract files from the offsets or any hard way?

    Please help me. I'll be really thankful to you.:crazy:
     
  2. pradeep

    pradeep Team Leader

    Joined:
    Apr 4, 2005
    Messages:
    1,645
    Likes Received:
    87
    Trophy Points:
    0
    Occupation:
    Programmer
    Location:
    Kolkata, India
    Home Page:
    http://blog.pradeep.net.in
    It seems to be some custom format. Did you try opening the file in a hex editor and see the first few bytes??
     
  3. SaswatPadhi

    SaswatPadhi ~ Б0ЯИ Τ0 С0δЭ ~

    Joined:
    May 5, 2009
    Messages:
    1,342
    Likes Received:
    55
    Trophy Points:
    0
    Occupation:
    STUDENT !
    Location:
    Orissa, INDIA
    Home Page:
    http://www.crackingforfun.blogspot.com
    Hmm... .big.w32, could that be the same .big format ?!
    If yes, this can help you : http://www.watto.org/extract/info.html.

    If not, you will have to code your own custom extractor.
    As pradeep said, try to look at the first few hex bytes to see if your recognize the pattern.

    You might also try dumping the memory .. :thinking:
     
  4. Hitterman

    Hitterman New Member

    Joined:
    Sep 4, 2009
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    0
    It's about 2.5GB so it doesn't opens in Hex Editor. I am using XVI32. Can you tell me a good way to recognize bytes pattern?

    I have tried this extractor. It's also not the .big format. It's a totally new format. Do you know easiest way to dump memory?

    Should I post here a small portion of that file? Will it be helpful?
     
  5. xpi0t0s

    xpi0t0s Mentor

    Joined:
    Aug 6, 2004
    Messages:
    3,009
    Likes Received:
    203
    Trophy Points:
    63
    Occupation:
    Senior Support Engineer
    Location:
    England
    Just write a small program to fopen() the file in binary mode, then get the first 32 characters from the file and print the hex code and the character in standard hex dump format, similar to how it appears in xvi32.
    It may be possible to determine the file type from that.
    If not then you will need to write your own extractor, which will require you to know the file format.
     
  6. mayjune

    mayjune New Member

    Joined:
    Jun 14, 2009
    Messages:
    814
    Likes Received:
    33
    Trophy Points:
    0
    Occupation:
    Student
    Location:
    Pune,Delhi
    Why you want to extract it anyway?
     
  7. Seema786

    Seema786 New Member

    Joined:
    Jul 29, 2009
    Messages:
    66
    Likes Received:
    0
    Trophy Points:
    0
    Occupation:
    IT Professional
    Location:
    Banglore
    he might want to use it in somewhere mayjune
     
  8. SaswatPadhi

    SaswatPadhi ~ Б0ЯИ Τ0 С0δЭ ~

    Joined:
    May 5, 2009
    Messages:
    1,342
    Likes Received:
    55
    Trophy Points:
    0
    Occupation:
    STUDENT !
    Location:
    Orissa, INDIA
    Home Page:
    http://www.crackingforfun.blogspot.com
    Yeah, I too have the same question as mayjune .

    I think he is the same hitterman, found here. ;)

    @ hitterman :

    There can be several ways to dump/read memory.
    (1) Use some advanced Hex-Editor like WinHex Editor which can directly read the system RAM.
    (2) Generate a complete memory dump of your RAM. Refer this : http://support.microsoft.com/kb/316450
    (3) Use a virtual machine like VMWare, then freeze the machine and read the VM data contents.

    I hope that would be helpful :)
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice