Topic: Help With Indentifying And Unpacking File Format (Read 84 times)

Xombe · « **Reply #1 on:** October 17, 2005, 03:16:00 AM »

What game? Maybe there is relavent game-specific info to be had.

supertrolly · « **Reply #2 on:** October 17, 2005, 04:42:00 PM »

I dont know it it will work but its worth a shot
Dragon unpacker

if it dosent work first look in the credits for the game they uselly will have to put who supplyed the program they used to compress (if not there own)

google ".dat files" (.dat seems pretty common though probly wount get far)

and if you want to get dirty you can open it up with a hex editor and look begining of the file. Compressed files uselly have header info what they were compressed with and so on...

those r just some ideas

hope this helps

foxxfella · « **Reply #3 on:** October 17, 2005, 07:03:00 PM »

I also forgot to mention in my last post that I used WAttos game extracter and that does not work for me.

XBE information generated by CXBX (Version 0.7.8c)

Dumping XBE file header...

Magic Number : XBEH
Digitial Signature : <Hex Dump>
61E1E220401F71C37100266D09927A41
84D4532B6BD76FD4D0E0BC717E3108F6
F71CEEA09ACE3C996BD58D7D17997E1A
28742F27023C0543E25B372BC9B7833B
65C09F3922AFC9EF486731780E0A64FA
89F7F6A901EB1CEC11AAA5CB095A4888
F6187780ED200AAA892880712F82B049
F69625A40A33C49E3786A1DDAD94066F
01AC1A9A99E29332E28364965BDFD283
6ECFCF5722F04BA8ED964E5C684CB24D
1D04FE53AB69450C93E38D38BE91CAF1
44995778893FFAEDDFB0303A82CE72CF
40B8FE753BCA85A8EF3979B46F460959
97F732402349FBFDF498ECF7A51A5DA1
7DB72ACC20F244C710804B70A05A237E
AFDA3EB14222B979179E319F3C1DDF5D
</Hex Dump>
Base Address : 0x00010000
Size of Headers : 0x00000B0C
Size of Image : 0x006D4D40
Size of Image Header : 0x00000184
TimeDate Stamp : 0x40E45B09 (Thu Jul 01 14:42:17 2004)
Certificate Address : 0x00010178
Number of Sections : 0x00000010
Section Headers Address : 0x00010348
Init Flags : 0x00000004 [Limit Devkit Run Time Memory to 64MB] [Setup Harddisk]
Entry Point : 0x94AF7247 (Retail: 0x3C5325EC, Debug: 0x002AEF0C)
TLS Address : 0x000106C8
(PE) Stack Commit : 0x00010000
(PE) Heap Reserve : 0x00100000
(PE) Heap Commit : 0x00001000
(PE) Base Address : 0x00010B00
(PE) Size of Image : 0x00726760
(PE) Checksum : 0x00000000
(PE) TimeDate Stamp : 0x40E45B08 (Thu Jul 01 14:42:16 2004)
Debug Pathname Address : 0x000107D6 ("f:\proj\Madden05\Project\Xbox\Final Release\madden05.exe")
Debug Filename Address : 0x0001080F ("madden05.exe")
Debug Unicode filename Address : 0x0001081C (L"madden05.exe")
Kernel Image Thunk Address : 0xEFE1F5D2 (Retail: 0xB48CB564, Debug: 0x00500480)
NonKernel Import Dir Address : 0x00000000
Library Versions : 0x00000009
Library Versions Address : 0x000106E0
Kernel Library Version Address : 0x000107A4
XAPI Library Version Address : 0x00010774
Logo Bitmap Address : 0x00010836
Logo Bitmap Size : 0x000002B2

Dumping XBE Certificate...

Size of Certificate : 0x000001EC
TimeDate Stamp : 0x40F2DEBC (Mon Jul 12 14:55:56 2004)
Title ID : 0x4541004D
Title : L"Madden NFL 2005"
Alternate Titles IDs : 0x45410051
0x45410044
0x45410038
0x4541003A
0x45410035
0x4541004B
0x45410031
0x45410030
0x45410036
0x45410045
0x4541FFFF
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
Allowed Media : 0x00000202
Game Region : 0x00000001
Game Ratings : 0x00000004
Disk Number : 0x00000000
Version : 0x00000003
LAN Key : AE6F6582AA2AE9F7ECE304E6A848A5B8
Signature Key : 44FF3B07D6A9A843C6F3470E33DD922B
Title Alternative Signature Keys : <Hex Dump>
E7704F7E2AA0FBAD9905C14676E08692
FE61D1ACDEF10A5277DF12F42F1A61E6
45FEE08A62E0CB25358D48143BA504C5
B88936E72AF9059462998C557EB03F1F
9E5FD0B217B8DAD48D5914F8CB0D43B9
BF592B25CD191410321E407F089DC58C
C8F50C3067FEA68FF5C469A2A0B722A5
81F6D0B2E7375763E507E012F3FA7D21
CAB471FB32A5CB0AC2C3B36A607B1E96
B9ED6E2D39339C77C0FE9FD370608B71
6A396F1840A6A223705647BEDECBBB37
C7A3370872FCE3F701FA7F352916C2F3
485A7EDE37FB391F1B4A400057BB796E
E0FFE024C915C61F93D58E631B03B488
3C37A65854BD7E2FA788262752A2AEAD
EB3DDCD7C77DC44241081ACE32C161EE
</Hex Dump>

Dumping XBE Section Headers...

Section Name : 0x00010770 (".text")
Flags : 0x00000016 (Preload) (Executable) (Head Page RO)
Virtual Address : 0x00011000
Virtual Size : 0x0047AC9C
Raw Address : 0x00001000
Size of Raw : 0x0047AC9C
Section Name Address : 0x00010770
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x000106F0
Tail Shared Reference Count Addr : 0x000106F2
Section Digest : 2FE0E7F55BB157589454270314A3081B8BF8BA2E

Section Name : 0x00010776 ("D3D")
Flags : 0x00000007 (Writable) (Preload) (Executable)
Virtual Address : 0x0048BCA0
Virtual Size : 0x00014148
Raw Address : 0x0047C000
Size of Raw : 0x00010880
Section Name Address : 0x00010776
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x000106F2
Tail Shared Reference Count Addr : 0x000106F4
Section Digest : 49528AD7F4177582EDF49486344FA18B0B993007

Section Name : 0x0001077A ("XGRPH")
Flags : 0x00000007 (Writable) (Preload) (Executable)
Virtual Address : 0x0049FE00
Virtual Size : 0x000020DC
Raw Address : 0x0048D000
Size of Raw : 0x000020DC
Section Name Address : 0x0001077A
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x000106F4
Tail Shared Reference Count Addr : 0x000106F6
Section Digest : E7EEAB14B81B4F419B80E3AE567A69A32CD3010B

Section Name : 0x00010780 ("DSOUND")
Flags : 0x00000007 (Writable) (Preload) (Executable)
Virtual Address : 0x004A1EE0
Virtual Size : 0x0000A86C
Raw Address : 0x00490000
Size of Raw : 0x0000A604
Section Name Address : 0x00010780
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x000106F6
Tail Shared Reference Count Addr : 0x000106F8
Section Digest : 4E06E5E6A8ABA3501FC7E9E566F3AC3B8022E0E4

Section Name : 0x00010787 ("WMADEC")
Flags : 0x00000007 (Writable) (Preload) (Executable)
Virtual Address : 0x004AC760
Virtual Size : 0x0001907C
Raw Address : 0x0049B000
Size of Raw : 0x0001907C
Section Name Address : 0x00010787
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x000106F8
Tail Shared Reference Count Addr : 0x000106FA
Section Digest : D6D22B5BC3261C38ABF1DBF315FECC4FECD00D40

Section Name : 0x0001078E ("XONLINE")
Flags : 0x00000026 (Preload) (Executable) (Tail Page RO)
Virtual Address : 0x004C57E0
Virtual Size : 0x0001E7B8
Raw Address : 0x004B5000
Size of Raw : 0x0001E7B8
Section Name Address : 0x0001078E
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x000106FA
Tail Shared Reference Count Addr : 0x000106FC
Section Digest : 366C086982548AB25F5BDA426D47FACFFB808C05

Section Name : 0x00010796 ("XNET")
Flags : 0x00000016 (Preload) (Executable) (Head Page RO)
Virtual Address : 0x004E3FA0
Virtual Size : 0x00013160
Raw Address : 0x004D4000
Size of Raw : 0x00013160
Section Name Address : 0x00010796
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x000106FC
Tail Shared Reference Count Addr : 0x000106FE
Section Digest : B757AA30A7F79BB5AB4523E7675B47C485ED25ED

Section Name : 0x0001079B ("D3DX")
Flags : 0x00000007 (Writable) (Preload) (Executable)
Virtual Address : 0x004F7100
Virtual Size : 0x00000240
Raw Address : 0x004E8000
Size of Raw : 0x00000240
Section Name Address : 0x0001079B
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x000106FE
Tail Shared Reference Count Addr : 0x000106FE
Section Digest : 35CFC641E1A8293FFF3A6F9F70E638AC132D368A

Section Name : 0x000107A0 ("XPP")
Flags : 0x00000007 (Writable) (Preload) (Executable)
Virtual Address : 0x004F7340
Virtual Size : 0x00009128
Raw Address : 0x004E9000
Size of Raw : 0x00009128
Section Name Address : 0x000107A0
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x000106FE
Tail Shared Reference Count Addr : 0x00010700
Section Digest : FEC5E02441A87F8FC631663EC909F29F77A58523

Section Name : 0x000107A4 (".rdata")
Flags : 0x00000006 (Preload) (Executable)
Virtual Address : 0x00500480
Virtual Size : 0x000B355C
Raw Address : 0x004F3000
Size of Raw : 0x000B354C
Section Name Address : 0x000107A4
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x00010700
Tail Shared Reference Count Addr : 0x00010702
Section Digest : 323284ACDA9AE2BC34CCB1D4F0BAC7EBE6AACF88

Section Name : 0x000107AB (".data")
Flags : 0x00000007 (Writable) (Preload) (Executable)
Virtual Address : 0x005B39E0
Virtual Size : 0x00125AC8
Raw Address : 0x005A7000
Size of Raw : 0x00057BD0
Section Name Address : 0x000107AB
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x00010702
Tail Shared Reference Count Addr : 0x00010704
Section Digest : 041FECD458F2B451142B75E03D28BD9F99F71BA9

Section Name : 0x000107B1 ("DOLBY")
Flags : 0x00000026 (Preload) (Executable) (Tail Page RO)
Virtual Address : 0x006D94C0
Virtual Size : 0x00007180
Raw Address : 0x005FF000
Size of Raw : 0x0000716C
Section Name Address : 0x000107B1
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x00010704
Tail Shared Reference Count Addr : 0x00010706
Section Digest : C8C9142DCCBD31BDCA9A2D94E0ACC47C2048D615

Section Name : 0x000107B7 ("XON_RD")
Flags : 0x00000016 (Preload) (Executable) (Head Page RO)
Virtual Address : 0x006E0640
Virtual Size : 0x00001560
Raw Address : 0x00607000
Size of Raw : 0x00001560
Section Name Address : 0x000107B7
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x00010706
Tail Shared Reference Count Addr : 0x00010708
Section Digest : BAD3DCDB491266CE098635AA3B01C1261C31AD80

Section Name : 0x000107BE (".data1")
Flags : 0x00000007 (Writable) (Preload) (Executable)
Virtual Address : 0x006E1BA0
Virtual Size : 0x000000E0
Raw Address : 0x00609000
Size of Raw : 0x000000B0
Section Name Address : 0x000107BE
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x00010708
Tail Shared Reference Count Addr : 0x00010708
Section Digest : 7F154B1A51860A1447B77E7BA73968FD275EC053

Section Name : 0x000107C5 ("$$XTIMAG")
Flags : 0x00000028 (Inserted File) (Tail Page RO)
Virtual Address : 0x006E1C80
Virtual Size : 0x00002800
Raw Address : 0x0060A000
Size of Raw : 0x00002800
Section Name Address : 0x000107C5
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x00010708
Tail Shared Reference Count Addr : 0x0001070A
Section Digest : 540F13F20B9860F20C1A922F2B03A58F4B082826

Section Name : 0x000107CF (".XTLID")
Flags : 0x00000038 (Inserted File) (Head Page RO) (Tail Page RO)
Virtual Address : 0x006E4480
Virtual Size : 0x000008C0
Raw Address : 0x0060D000
Size of Raw : 0x000008C0
Section Name Address : 0x000107CF
Section Reference Count : 0x00000000
Head Shared Reference Count Addr : 0x0001070A
Tail Shared Reference Count Addr : 0x0001070A
Section Digest : E6FF0F43C5ABDE5B04BB1D9F942E6D6EF37D7CB1

Dumping XBE Library Versions...

Library Name : XAPILIB
Version : 1.0.5849
Flags : QFEVersion : 0x0001, Retail, Approved

Library Name : D3D8
Version : 1.0.5849
Flags : QFEVersion : 0x0001, Retail, Approved

Library Name : XGRAPHC
Version : 1.0.5849
Flags : QFEVersion : 0x0001, Retail, Approved

Library Name : XBOXKRNL
Version : 1.0.5849
Flags : QFEVersion : 0x0001, Retail, Approved

Library Name : DSOUND
Version : 1.0.5849
Flags : QFEVersion : 0x0001, Retail, Approved

Library Name : LIBCMT
Version : 1.0.5849
Flags : QFEVersion : 0x0001, Retail, Approved

Library Name : XONLINES
Version : 1.0.5849
Flags : QFEVersion : 0x0006, Retail, Possibly Approved

Library Name : XVOICE
Version : 1.0.5849
Flags : QFEVersion : 0x0004, Retail, Approved

Library Name : D3DX8
Version : 1.0.5849
Flags : QFEVersion : 0x0001, Retail, Approved

Dumping XBE TLS...

Data Start Address : 0x004F7344
Data End Address : 0xBEF88B57
TLS Index Address : 0x004F734C
TLS Callback Address : 0xFE3BDB32
Size of Zero Fill : 0x730002C6
Characteristics : 0x85388B13

Xombe · « **Reply #4 on:** October 17, 2005, 10:17:00 PM »

QUOTE(foxxfella @ Oct 18 2005, 10:07 AM)

I dont want to get in trouble but I'm asking anyone out there if they have any time and Knowlege could have a look at one of these .dats or perhaps the XBE itself, I could send you one but not the WHOLE GAME! Just a file to inspect.

aruaru · « **Reply #5 on:** October 24, 2005, 07:38:00 PM »

QUOTE(foxxfella @ Oct 17 2005, 10:07 PM)

I opened all the .DATS from the football game in a hex editor and found this at the start of every file; [email protected]; The racing games have this ; CUBEMAS 4.10. I have IDA pro and have tried Dissasembling the .XBE but I'm not sure what to look for, perhaps someone could point me in the right direction?

supertrolly · « **Reply #6 on:** November 05, 2005, 03:34:00 PM »

QUOTE(foxxfella @ Oct 18 2005, 02:03 AM)

I; [email protected]; The racing games have this ; CUBEMAS 4.10.

Author Topic: Help With Indentifying And Unpacking File Format (Read 84 times)