该工具可以将生化危机2重制版的re_chunk_000.pak文件进行拆包,
使用方法:
1.下载工具;
2.运行“quickbms_4gb_files.exe”文件;
3.第一次弹窗选择“re2_pak_unpack.bms”文件;
4.第二次弹窗选择要拆包的“re_chunk_000.pak”文件;
5.第三次弹窗选择要保存的位置;
6.最后等待拆包完成即可;
注:
压缩包中
“re2_pak_unpack.bms”是生化危机2:重制版的插件;
“re2_pak_names_release.list”是生化危机2:重制版拆包后的文件路径
视频讲解:
工具介绍:
(quickbms)
基于通用脚本的文件提取器和重新导入器。
QuickBMS支持大量游戏和文件格式,存档,加密,压缩,混淆和其他算法。
如果双击(正常启动)可执行文件,则QuickBMS使用简约GUI;如果从控制台启动,则使用命令行,通过使用第二种模式或可执行文件的链接,可以激活许多有用和高级的选项。
历史:
这个想法源于对处理大多数游戏所使用的档案的简单快速解决方案的需要,而不会浪费时间编写一个包含大量C代码的独立工具,仅用于基本文件格式。
所以这个工具主要是为自己创建的,可以快速创建我的提取器,其次是任何其他想要在不学习真正的编程语言的情况下做同样的用户。
BMS语言基本,易于使用且存在超过10年,我所做的只是根据我的个人需求进行增强,并在处理复杂的档案和文件格式时使生活更轻松。
特征:
开源和多平台,在Windows(甚至Win98)和GNU / Linux(x86和PPC)上测试
从命令行和GUI工作(仅限Windows,只需双击quickbms.exe)
重新导入和重新导入2模式,用于将修改后的文件重新注入存档
支持大量加密算法,甚至是一些专有算法
支持大量压缩算法(超过700),甚至是一些专有算法
支持大量的哈希算法
支持其他类型的算法(如base64)和/或混淆(xor,rot等)
支持使用几乎任何已知的调用约定调用DLL和原始转储函数
支持位操作和可切换的小/大端
简单和动态的语言,允许进行许多操作,减少无法轻易支持的档案和格式的百分比
详细选项(-V),用于在反转和测试文件格式期间显示所有需要的详细信息
HTML输出(-H)自动将颜色和名称应用于在脚本使用过程中解析的字段:
将该工具用作压缩,加密和crc /校验和算法的盲扫描器的可能性
支持网络套接字,SSL和 /
支持其他替代输入/输出接口,如进程(包括调试和自动断点恢复),音频,视频和Windows消息
支持可视化和创建各种类型的数据,如x86程序集,IP地址,time_t,FILETIME,ClassID等
支持类似C的结构和基本语法,以便轻松处理文件格式
通过EXECUTE方法支持任何命令行解压缩器/解密器/ anything_else(Comtype和Encryption命令)
读写操作
quickbms_4gb_files.exe是一个原生的32位程序,所有变量设置为64位在某些情况下都很有用
计划中的未来发展将涵盖逆向工程师和高级用户的更多高级功能
可定制的CRC引擎
大量脚本支持数百种文件格式和数千种游戏
实验游戏本地化(字符串编辑)
创建ISO映像和ZIP存档作为替代输出
嵌入式C编译器在运行时使用C函数
实验IPC接口:命名管道,邮件槽,web和DLL
支持
源代码/ Linux:
该工具的完整源代码,它与可执行文件分开,以减少下载的大小,避免混淆用户。
在Linux上,它足以进入src文件夹并启动make。
文档:
前3个部分适用于任何用户,其余部分仅适用于想要理解和编写QuickBMS脚本的开发人员和高级用户。
如何使用QuickBMS中嵌入的CRC计算引擎来计算自定义校验和。
包中有changelog.txt
支持,帮助,反馈和建议:
的官方支持论坛
搜索魔法和标志:
搜索关键字。
如果您不知道正确的脚本,请使用十六进制编辑器打开您的存档/文件,并检查开头是否有字符串(通常为4个字节)并将其插入搜索表单中。
使用最新脚本的源:
新增和更新的脚本
逆向工程的特殊脚本:( 如果您不知道自己在做什么,
请不要使用它们):
QuickBMS comtype scanner 2:原始未知压缩数据文件上的压缩算法扫描程序:
(0#1#1b)
如何使用:
使用grep搜索预期的字符串,例如,如果您希望wav文件使用grep -rs RIFF c:\ output_folder
从最大的文件开始验证过程
删除大小小于原始文件的文件
确定输出文件后,在源文件src \ defs.h中搜索其编号
comtype_scan2.bat comtype_scan2.bms dump.dat c:\ output_folder
如果您已经知道解压缩的大小(例如0x112233),请使用:
comtype_scan2.bat comtype_scan2.bms dump.dat c:\ output_folder 0x112233
有关图形的逐步检查此
将压缩数据转储到新文件中,可能使用十六进制编辑器(您可以将此文件称为dump.dat)
创建一个新文件夹(例如c:\ output_folder)
将comtype_scan2.bat,comtype_scan2.bms和quickbms.exe放在同一个文件夹中
从命令行类型:
在此过程中,当你看到quickbms停顿/冻结几秒钟时你必须按CTRL-C并在Windows会问你“终止批处理作业(Y / N)?”时回答N.
整个过程不到一分钟
进入输出文件夹并使用十六进制编辑器验证所有创建的文件
有一些技巧可以让这项工作变得更容易:
QuickBMS加密扫描器0.2:使用密钥和原始数据文件上的可选ivec提供的各种加密算法的扫描程序:
(0.2)
如何使用:
除了输出文件的可选大小之外,其用法与之前相同,因为没有这样的参数
CRC扫描仪:各种crc /校验和算法的扫描仪:
(0#1#2a)
如何使用:
quickbms crc_scan.bms dump.dat> crc.txt
转储要在新文件中计算校验和的数据,也许使用十六进制编辑器(可以调用此文件dump.dat)
从命令行类型:
打开文件crc.txt并搜索您期望的校验和以及生成它的相对设置,结果包括校验和和具有反向字节的相同校验和以便于搜索
ZIP密码扫描程序 - zipcrypto:
(0.1)
如果要使用游戏的zip密码,如何使用:
quickbms zip_pwd_scan.bms gamefile.zip
exestringz -q 1 game.exe passwords_list.txt
exestringz -b -q 1 game.exe passwords_list.txt
字符串game.exe> passwords_list.txt
解压缩游戏可执行文件如果它被打包/保护,你也可以转储进程(例如使用)
运行工具,将输出重定向到passwords_list.txt:
您也可以使用我的工具扫描可执行文件,如果第一个不起作用,您可以尝试两种方法:
从命令行类型:
如果找到密码,您将看到“找到密码”消息
QuickBMS的编译版本:
用法和示例:
此页面上提供的整个脚本集合:
包含此页面上所有脚本的每日ZIP存档。一条链接来统治它们!
QuickBMS对疯狂的想法和建议持开放态度,因此请随时与我联系并提供任何反馈。
EN:
(quickbms)
universal script based files extractor and reimporter.
QuickBMS supports tons of games and file formats, archives, encryptions, compressions, obfuscations and other algorithms.
QuickBMS uses a minimalistic GUI if the executable is double-clicked (launched normally) or from command-line if launched from the console, by using this second mode or a link to the executable it's possible to activate many useful and advanced options.
History:
the idea was born from the need of a simple and fast solution for handling the archives used by the majority of games without wasting time writing a stand-alone tool with tons of C code just for a basic file format.
so this tool has been created mainly for myself for creating my extractors quickly on the fly, and secondly for any other user who wants do the same without learning a real programming language.
the BMS language is basic, easy to use and exists from over 10 years, what I did was simply enhancing it for my personal requirements and making the life easier when handling complex archives and file formats.
Features:
open source and multiplatform, tested on Windows (even Win98) and GNU/Linux (x86 and PPC)
works from both command-line and GUI (Windows only, just double-click on quickbms.exe)
reimport and reimport2 modes for reinjecting the modified files back to the archives
support for tons of encryption algorithms, even some proprietary ones
support for tons of compression algorithms (over 700), even some proprietary ones
support for tons of hashing algorithms
support for other types of algorithms (like base64) and/or obfuscations (xor, rot and so on)
support for calling DLLs and raw dumped functions with almost any known calling convention
support for bits operation and switchable little/big endian
simple and dynamic language that allows to make many operations reducing the percentage of archives and formats that can't be supported easily
verbose option (-V) that displays all the needed details during reversing and testing of file formats
HTML output (-H) that automatically applies colors and names to the fields parsed during the usage of the scripts:
possibility to use the tool as a blind scanner of compression, encryption and crc/checksum algorithms
support for network sockets, SSL and
support for other alternative input/output interfaces like processes (included debugging and automatic breakpoint restoring), audio, video and Windows messages
support for the visualization and creation of various types of data like x86 assembly, IP addresses, time_t, FILETIME, ClassID and more
support for C-like structures and basic syntax for easy handling of file formats
support for any command-line decompressor/decrypter/anything_else via the EXECUTE method (Comtype and Encryption commands)
read and write operations
quickbms_4gb_files.exe is a native 32bit program with all the variables set as 64bit useful in some situations
planned future development that will cover more advanced features for reverse engineers and power users
customizable CRC engine
tons of scripts supporting hundreds of file formats and thousands of games
experimental games localization (strings editing)
creation of ISO images and ZIP archives as alternative outputs
embedded C compiler to use C functions at runtime
experimental IPC interfaces: named pipes, mailslot, web and dll
support for the WCX packer plugins of
Source Code / Linux:
the full source code of the tool, it's separated from the executables to reduce the size of the download and avoiding confusion to the users.
on Linux it's enough to go in the src folder and launch make.
Documentation:
the first 3 sections are intended for any user while the rest is ONLY for developers and advanced users who want to understand and write scripts for QuickBMS.
How to use the CRC calculation engine embedded in QuickBMS for calculating custom checksums.
(latest update: 18 Mar 2017)
a changelog.txt is available inside the package
Support, help, feedback and suggestions:
the official support forum for QuickBMS
Search magics and signs:
search keywords inside my BMS scripts.
if you don't know the correct script, open your archive/file with a hex editor and check if there is a string (usually 4 bytes) at the beginning and insert it in the search form.
Feeds with the latest scripts:
new and updated scripts
Special scripts for reverse engineering:
(do NOT use them if you don't know what you are doing!):
QuickBMS comtype scanner 2: scanner of compression algorithms on a raw unknown compressed data file:
(0#1#1b)
How to use:
search for an expected string with grep, for example if you expect a wav file use grep -rs RIFF c:\output_folder
start the verification process from the biggest files
remove the files that have a size smaller than the original file
when you have identified the output file, search its number in the source file src\defs.h
comtype_scan2.bat comtype_scan2.bms dump.dat c:\output_folder
if you already know the decompressed size (for example 0x112233), use:
comtype_scan2.bat comtype_scan2.bms dump.dat c:\output_folder 0x112233
for a graphical step-by-step check this
dump the compressed data in a new file, maybe using a hex editor (you can call this file dump.dat)
create a new folder (for example c:\output_folder)
put comtype_scan2.bat, comtype_scan2.bms and quickbms.exe in the same folder
from the command-line type:
during this process you must press CTRL-C when you see quickbms stalled/freezed for some seconds and answer N when Windows will ask you "Terminate batch job (Y/N)?"
the whole process will take less than one minute
go in the output folder and verify all the created file with a hex editor
there are some tricks to make this work easier:
QuickBMS encryption scanner 0.2: scanner of the various encryption algorithms available using a key and an optional ivec on a raw data file:
(0.2)
How to use:
The usage is the same as before, except for the optional size of the output file because there is no such parameter
CRC scanner: scanner of various crc/checksum algorithms:
(0#1#2a)
How to use:
quickbms crc_scan.bms dump.dat > crc.txt
dump the data on which you want to calculate the checksum in a new file, maybe using a hex editor (you can call this file dump.dat)
from the command-line type:
open the file crc.txt and search the checksum you were expecting and the relative settings to generate it, the result includes both the checksum and the same checksum with reversed endianess for easy search
ZIP password scanner - zipcrypto:
(0.1)
How to use, if you want to take the zip password of a game:
quickbms zip_pwd_scan.bms gamefile.zip
exestringz -q 1 game.exe passwords_list.txt
exestringz -b -q 1 game.exe passwords_list.txt
strings game.exe > passwords_list.txt
unpack the game executable if it's packed/protected, you can also dump the process (for example using )
run the tool over the executable redirecting the output to passwords_list.txt:
you can also use my tool for scanning the executable and you can try two methods in case the first doesn't work:
from the command-line type:
if it finds the password you will see a "password found" message
Compiled versions of QuickBMS:
Usage and examples:
Whole collection of scripts available on this page:
A daily made ZIP archive containing ALL the scripts on this page. One link to rule them all!
QuickBMS is ever open to crazy ideas and suggestions so feel free to contact me with any feedback.
昵称:
邮箱:
内容: