Extracting Files from Unknown Archives - Urgent Help

Hitterman's Avatar, Join Date: Sep 2009
Newbie Member
Hello guys,

Nice to be here. I need some help. There is a game made by codemasters Ashes Cricket 2009. In it, there is a file with format .big.w32. It's a totally new format. I have tried all possible archive openers to open it.

Now I need help from you. Is there any way by which we can extract files from the offsets or any hard way?

Please help me. I'll be really thankful to you.
0
pradeep's Avatar, Join Date: Apr 2005
Team Leader
It seems to be some custom format. Did you try opening the file in a hex editor and see the first few bytes??
0
SaswatPadhi's Avatar, Join Date: May 2009
~ Б0ЯИ Τ0 С0δЭ ~
Hmm... .big.w32, could that be the same .big format ?!
If yes, this can help you : http://www.watto.org/extract/info.html.

If not, you will have to code your own custom extractor.
As pradeep said, try to look at the first few hex bytes to see if your recognize the pattern.

You might also try dumping the memory ..
0
Hitterman's Avatar, Join Date: Sep 2009
Newbie Member
Quote:
It seems to be some custom format. Did you try opening the file in a hex editor and see the first few bytes??
It's about 2.5GB so it doesn't opens in Hex Editor. I am using XVI32. Can you tell me a good way to recognize bytes pattern?

Quote:
Hmm... .big.w32, could that be the same .big format ?!
If yes, this can help you : [link removed due to limit].

If not, you will have to code your own custom extractor.
As pradeep said, try to look at the first few hex bytes to see if your recognize the pattern.

You might also try dumping the memory ..
I have tried this extractor. It's also not the .big format. It's a totally new format. Do you know easiest way to dump memory?

Should I post here a small portion of that file? Will it be helpful?
0
xpi0t0s's Avatar, Join Date: Aug 2004
Mentor
Just write a small program to fopen() the file in binary mode, then get the first 32 characters from the file and print the hex code and the character in standard hex dump format, similar to how it appears in xvi32.
It may be possible to determine the file type from that.
If not then you will need to write your own extractor, which will require you to know the file format.
0
mayjune's Avatar, Join Date: Jun 2009
Invasive contributor
Why you want to extract it anyway?
0
Seema786's Avatar
Banned
he might want to use it in somewhere mayjune
0
SaswatPadhi's Avatar, Join Date: May 2009
~ Б0ЯИ Τ0 С0δЭ ~
Yeah, I too have the same question as mayjune .

I think he is the same hitterman, found here.

@ hitterman :

There can be several ways to dump/read memory.
(1) Use some advanced Hex-Editor like WinHex Editor which can directly read the system RAM.
(2) Generate a complete memory dump of your RAM. Refer this : http://support.microsoft.com/kb/316450
(3) Use a virtual machine like VMWare, then freeze the machine and read the VM data contents.

I hope that would be helpful