File hacking

Discussion in 'NDS - ROM Hacking and Translations' started by floral, Nov 15, 2009.

Nov 15, 2009

File hacking by floral at 5:21 PM (1,012 Views / 0 Likes) 2 replies

  1. floral
    OP

    Newcomer floral Newbie

    Joined:
    Oct 4, 2009
    Messages:
    2
    Country:
    Canada
  2. FAST6191

    Reporter FAST6191 Techromancer

    pip
    Joined:
    Nov 21, 2005
    Messages:
    21,711
    Country:
    United Kingdom
    You realise you are asking quite a lot of a passing hacker. I will not be doing the whole of the reverse engineering but I am more than happy to point you in the right direction.

    The .bin is a utility.bin which is usually wifi or download play related. For the most part they are mini DS roms (in fact you can open them up in crystaltile2 and parse the filesystem).
    I am afraid I am far too lazy to pull apart an entire rom for you (even a small one like that) but I shall press on, most of the extensions I saw/pulled from it were standard formats or simple formats anyhow.

    As a simple test all three do compress a fair bit on the most basic compression and running a compression search (not the most accurate of things) says some compression in addition to the stuff in utility.bin as you would expect. I will have to investigate further though.

    The .sad is a standard looking file, I have a feeling I have seen the extension before (more specifically the magic stamp sadl) but can not recall where. I see nothing special in the file from a graphics perspective although compression will do that and it might just be text.

    the .iear, not quite standard format but there does appear to be a pointer table (straight up, no relative stuff, base offset is at the start of the file (no need to chop parts off)) in the start of the file from 20 hex onwards to 01e8 hex.
    each entry 8 byes split in two sections, once flipped (32 bit) the first 4 are location and the next 4 are size. This combined with the magic stamps at locations "predicted" by the pointers that I do recognise later in the file after said table means I am going to call packing format like NARC but somewhat simpler.
    Most of the files I am seeing after that are graphics which have been documented here:
    http://tahaxan.arcnor.com/index.php?option...ult&lang=en


    CODE
    0000000 | 4D41 494E 3900 0000 MAIN9...
    0000008 | 0000 0000 0000 0000 ........
    0000010 | 4A54 424C 7400 0000 JTBLt...
    0000018 | 0000 0000 0000 0000 ........
    0000020 | 0000 01F0 0000 0240 .......@
    0000028 | 0000 0430 0000 0640 ...0...@
    0000030 | 0000 0A70 0000 1D70 ...p...p
    0000038 | 0000 27E0 0000 0240 ..'....@
    0000040 | 0000 2A20 0000 0640 ..* ...@
    0000048 | 0000 3060 0000 2350 ..0`..#P
    0000050 | 0000 53B0 0000 0240 ..S....@
    0000058 | 0000 55F0 0000 0640 ..U....@
    0000060 | 0000 5C30 0000 3F80 ....?.
    0000068 | 0000 9BB0 0000 0240 .......@
    0000070 | 0000 9DF0 0000 0640 .......@
    0000078 | 0000 A430 0000 4880 ...0..H.
    0000080 | 0000 ECB0 0000 0240 .......@
    0000088 | 0000 EEF0 0000 0640 .......@
    0000090 | 0000 F530 0000 55B0 ...0..U.
    0000098 | 0001 4AE0 0000 0240 ..J....@
    00000A0 | 0001 4D20 0000 0640 ..M ...@
    00000A8 | 0001 5360 0000 0A30 ..S`...0
    00000B0 | 0001 5D90 0000 0240 ..]....@
    00000B8 | 0001 5FD0 0000 0640 .._....@
    00000C0 | 0001 6610 0000 4E80 ..f...N.
    00000C8 | 0001 B490 0000 0240 .......@
    00000D0 | 0001 B6D0 0000 0640 .......@
    00000D8 | 0001 BD10 0000 2DE0 ......-.
    00000E0 | 0001 EAF0 0000 0240 .......@
    00000E8 | 0001 ED30 0000 0640 ...0...@
    00000F0 | 0001 F370 0000 5520 ...p..U
    00000F8 | 0002 4890 0000 0240 ..H....@
    0000100 | 0002 4AD0 0000 0640 ..J....@
    0000108 | 0002 5110 0000 3310 ..Q...3.
    0000110 | 0002 8420 0000 0240 ... ...@
    0000118 | 0002 8660 0000 0640 ...`...@
    0000120 | 0002 8CA0 0000 4770 ......Gp
    0000128 | 0002 D410 0000 0240 .......@
    0000130 | 0002 D650 0000 0640 ...P...@
    0000138 | 0002 DC90 0000 32D0 ......2.
    0000140 | 0003 0F60 0000 0240 ...`...@
    0000148 | 0003 11A0 0000 0640 .......@
    0000150 | 0003 17E0 0000 6360 ......c`
    0000158 | 0003 7B40 0000 0240 ..{@...@
    0000160 | 0003 7D80 0000 0640 ..}....@
    0000168 | 0003 83C0 0000 3190 ......1.
    0000170 | 0003 B550 0000 0240 ...P...@
    0000178 | 0003 B790 0000 0640 .......@
    0000180 | 0003 BDD0 0000 1550 .......P
    0000188 | 0003 D320 0000 0240 ... ...@
    0000190 | 0003 D560 0000 0640 ...`...@
    0000198 | 0003 DBA0 0000 1F60 .......`
    00001A0 | 0003 FB00 0000 0240 .......@
    00001A8 | 0003 FD40 0000 0640 ...@...@
    00001B0 | 0004 0380 0000 43B0 ......C.
    00001B8 | 0004 4730 0000 0240 ..G0...@
    00001C0 | 0004 4970 0000 0640 ..Ip...@
    00001C8 | 0004 4FB0 0000 41C0 ..O...A.
    00001D0 | 0004 9170 0000 0240 ...p...@
    00001D8 | 0004 93B0 0000 0640 .......@
    00001E0 | 0004 99F0 0000 4000 ......@.
    00001E8 | 0000 0000 0000 0000 ........
    00001F0 | 4E43 4C52 3002 0000 NCLR0...
    00001F8 | 0000 0000 0000 0000 ........
    0000200 | 524C 434E FFFE 0001 RLCN....
    0000208 | 2802 0000 1000 0100 (.......
    0000210 | 5454 4C50 1802 0000 TTLP....
    0000218 | 0400 0000 0000 0000 ........
    0000220 | 0002 0000 1000 0000 ........
     
  3. hyparx

    Newcomer hyparx Member

    Joined:
    Jun 15, 2009
    Messages:
    17
    Location:
    internet
    Country:
    United States
    I must say, it would be helpful if you said what game these are from . . .
     

Share This Page