Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
-
onelove1210
- Posts: 58
- Joined: Thu Jun 16, 2016 11:02 am
Post
by onelove1210 »
Name: Heroes Evolved
Extension: 7z + password
Since I didn't know what I had to upload as samples, so I decided to upload 2 kinds of file that I got after extracting "nifs" header file.
.7z is actually 7z archive with header "7z", and .bhk with "BHKD" header ( as known as BNK sound )

. 7z files have a protection password.
Sample:
https://drive.google.com/open?id=1NaQIb ... evTPY9fX58
-
aluigi
- Site Admin
- Posts: 12984
- Joined: Wed Jul 30, 2014 9:32 pm
Post
by aluigi »
Those hexadecimal filenames with guessed extensions seem generated by quickbms or offzip, am I right?
For BKH:
http://aluigi.org/bms/armyoftwo.bmsIn the past the 7z files of Heroes Evolved had the "cosgo" password:
viewtopic.php?t=3884I guess they changed it.
-
onelove1210
- Posts: 58
- Joined: Thu Jun 16, 2016 11:02 am
Post
by onelove1210 »
aluigi wrote:Those hexadecimal filenames with guessed extensions seem generated by quickbms or offzip, am I right?]
Yes, I used your script to extract a header "nifs" file

I think so, or maybe each region has a separated password. My files are from Chinese version.
-
aluigi
- Site Admin
- Posts: 12984
- Joined: Wed Jul 30, 2014 9:32 pm
Post
by aluigi »
Do you see any password posted in this topic?

-
onelove1210
- Posts: 58
- Joined: Thu Jun 16, 2016 11:02 am
Post
by onelove1210 »
aluigi wrote:Do you see any password posted in this topic?

No, that's why I asked if there were any update

I mean a new password based on my file, not the old one "cosgo", it doesn't work anymore