Page 1 of 1
5244465A - Natalie Brooks - The Treasures of the Lost Kin
Posted: Mon Apr 06, 2009 3:53 pm
by ubrax
I will appreciate any help or guidance to unpack the "data" archive from Adventures of Natalie Brooks.
The database can be downloaded here:
http://pretorius.za.com/brooks/data.rar ("data" file packed as rar)
Best Regards
Hendrik Pretorius
Re: 5244465A - Natalie Brooks - The Treasures of the Lost Kin
Posted: Tue May 05, 2009 3:47 pm
by aluigi
not the max of the simplicity but works (-o option suggested because some files have the same names):
Code: Select all
# Adventures of Natalie Brooks
# script for QuickBMS http://aluigi.org/papers.htm#quickbms
idstring "RDFZ"
get SIZE long
getdstring NAME SIZE
if NAME != "Zlib" # I have tested only this archive
cleanexit
endif
get ZSIZE long # block size
math ZSIZE -= 4
get SIZE long
savepos INFO_OFFSET
clog MEMORY_FILE INFO_OFFSET ZSIZE SIZE
goto 0x10 MEMORY_FILE # quick way
get FOLDERS long MEMORY_FILE
savepos FOLDERS_OFFSET MEMORY_FILE
for i = 0 < FOLDERS
get NAMESZ long MEMORY_FILE
getdstring NAME NAMESZ MEMORY_FILE
next i
get FILES long MEMORY_FILE
savepos FILES_OFFSET MEMORY_FILE
math INFO_OFFSET += ZSIZE
goto INFO_OFFSET
get FILES long
savepos INFO_OFFSET
for i = 0 < FILES
goto INFO_OFFSET
get OFFSET long
get ZSIZE long
get FOLDERID long
get FILEID long
get ZIP long
savepos INFO_OFFSET
set FULLNAME ""
goto FOLDERS_OFFSET MEMORY_FILE
for j = 0 <= FOLDERID
get NAMESZ long MEMORY_FILE
getdstring NAME NAMESZ MEMORY_FILE
next j
string FULLNAME += NAME
goto FILES_OFFSET MEMORY_FILE
for j = 0 <= FILEID
get NAMESZ long MEMORY_FILE
getdstring NAME NAMESZ MEMORY_FILE
next j
string FULLNAME += \
string FULLNAME += NAME
if ZIP == 0
log FULLNAME OFFSET ZSIZE
else
goto OFFSET
get SIZE long
math OFFSET += 4
math ZSIZE -= 4
clog FULLNAME OFFSET ZSIZE SIZE
endif
next i
Re: 5244465A - Natalie Brooks - The Treasures of the Lost Kin
Posted: Sun Dec 27, 2009 2:05 am
by ubrax
Thx aluigi!