Difference between revisions of "DAT (Ever17)"
Jump to navigation
Jump to search
| Line 30: | Line 30: | ||
Extracting images straight from the container file will produce broken images. There is nothing wrong with the extraction process but rather the files themselves. Starting from offset 4352 and ending at 4608 in every single JPG, this 256 byte has been modified in some way. | Extracting images straight from the container file will produce broken images. There is nothing wrong with the extraction process but rather the files themselves. Starting from offset 4352 and ending at 4608 in every single JPG, this 256 byte has been modified in some way. | ||
2014/07/10 Currently looking into this with a dissembler and debugger. Looking like XOR was used in some way. | 2014/07/10 Currently looking into this with a dissembler and debugger. Looking like XOR was used in some way. Actually. no, I'm an idiot. "xor ecx, ecx" Just zeros the register. | ||
Revision as of 00:55, 11 July 2014
Seen/used in the follow game(s):
- Ever17
Structure
| Header | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Size | Content | Description | ||||||||||||
| 4Bytes | Magic/ID | |||||||||||||
| 4Bytes | File Count | |||||||||||||
| 8Bytes | 0x00 Filler | |||||||||||||
| Index | ||||||||||||||
| Size | Content | Description | ||||||||||||
| 4Bytes | Offset | Starts from zero. | ||||||||||||
| 4Bytes | File Size | Stored value is actual size doubled | ||||||||||||
| 24Bytes | File name | |||||||||||||
Notes for 'wallpaper.dat' Extracting images straight from the container file will produce broken images. There is nothing wrong with the extraction process but rather the files themselves. Starting from offset 4352 and ending at 4608 in every single JPG, this 256 byte has been modified in some way.
2014/07/10 Currently looking into this with a dissembler and debugger. Looking like XOR was used in some way. Actually. no, I'm an idiot. "xor ecx, ecx" Just zeros the register.