The NSMB Hacking Domain » I found some NARCs in arm9.Bin with interesting stuff

Pages: 1

Posted on 06-02-13, 11:35 pm

Link
ID: 23281
+0

Super Mario
( ͡° ͜ʖ ͡°)

Karma: 10020
Posts: 3359/4457
Since: 06-08-11

So yup. Decompress arm9.bin using NSMBe. Then export it and open it in an hex editor. Look for the string "NARC". There's many NARCs embedded in the binary.

If you extract them and look at them, they appear to have interesting stuff. There's the data for the MvsL loading screen, where Peach throws mushrooms and goombas at Mario. There's more stuff.

So yeah, I'm posting this here because I'm lazy to look at all the NARCs right now, I'm busy with disassembling. So if someone wants to have a look at this, please do so and post your findings in here!

CreativiPie	Posted on 06-03-13, 02:00 am Hi. Link ID: 23282 +0
Pokey me some orange juice my hand Karma: 674 Posts: 257/699 Since: 09-24-12	I'll try to look at them sometime, since I can't neither today nor tomorrow. Nice findings! I hope I'll find some more interesting stuff.

Hiccup	Posted on 06-03-13, 07:28 am Hi. Link ID: 23283 +0
Birdo Karma: 2754 Posts: 561/2091 Since: 06-26-11	Interesting... but how do I open them? or extract them?

Dirbaio

Posted on 06-03-13, 03:02 pm

Link
ID: 23293
+0

Super Mario
( ͡° ͜ʖ ͡°)

Karma: 10020
Posts: 3363/4457
Since: 06-08-11

Decompress arm9.bin
Then extract it and hex edit it.
Search for NARC. You'll find some results. Everytime there's that word, one NARC begins. That's the magic header for narcs.
Copy all the data from one magic header included to the next not included. Paste it in another file.
(If its the last narc you'll have to figure out the length somehow else.)
That file is now like any regular NARC. Import it in nsmbe on top of another narc and open it.

If you want to edit something and put the narc back into the arm9 you can only do that if the narc is the same size or smaller than the original... So it could be a bit hard to do so.

Hiccup	Posted on 09-15-13, 02:26 pm Hi. Link ID: 27920 +0
Birdo Karma: 2754 Posts: 704/2091 Since: 06-26-11	Sorry for the bump. But what hex editor do you recommend, that can find text, at the same time as selecting?

Piranhaplant	Posted on 09-15-13, 02:35 pm Hi. Link ID: 27924 +0
Fuzzy Full mod Karma: 1183 Posts: 685/785 Since: 06-28-11	Posted by Hiccup Sorry for the bump. But what hex editor do you recommend, that can find text, at the same time as selecting? I use Hex Editor Neo. It's a really nice hex editor that'll do what you're looking for. Layout design by ~alder-sketch

Hiccup	Posted on 09-17-13, 03:39 pm (rev. 1 by Hiccup on 09-17-13, 03:39 pm) Hi. Link ID: 28065 +0
Birdo Karma: 2754 Posts: 712/2091 Since: 06-26-11	How can I figure out the length of the last narc? It's the only one I can't check.

Dirbaio	Posted on 09-22-13, 04:54 pm (rev. 1 by Dirbaio on 09-22-13, 04:54 pm) Hi. Link ID: 28324 +0
Super Mario ( ͡° ͜ʖ ͡°) Karma: 10020 Posts: 3774/4457 Since: 06-08-11	I think one of the fields in the header contains the file length...? Anyway, you can simply copy from the header to the end of the binary, the extra data will be ignored, and you'll still be able to open the NARC.

Hiccup

Posted on 09-22-13, 06:24 pm

Link
ID: 28348
+0

Birdo

Karma: 2754
Posts: 736/2091
Since: 06-26-11

Nope.

Arithmetic operation resulted in an overflow.

See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.OverflowException: Arithmetic operation resulted in an overflow.
at NSMBe4.DSFileSystem.PhysicalFile.getContents()
at NSMBe4.DSFileSystem.NitroFilesystem.load()
at NSMBe4.DSFileSystem.NarcFilesystem.load()
at NSMBe4.DSFileSystem.FilesystemBrowser.fileTreeView_NodeMouseDoubleClick(Object sender, TreeNodeMouseClickEventArgs e)
at System.Windows.Forms.TreeView.WndProc(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)

************** Loaded Assemblies **************
mscorlib
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.6407 (Win8RTMGDR.050727-6400)
CodeBase: file:///C:/Windows/Microsoft.NET/Framework64/v2.0.50727/mscorlib.dll
----------------------------------------
NSMBe5
Assembly Version: 5.1.0.0
Win32 Version: 5.1.0.0
CodeBase: file:///C:/Users/David/Dropbox/nsmb-editor-375/NSMBe5.exe
----------------------------------------
System.Windows.Forms
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.6402 (Win8RTMGDR.050727-6400)
CodeBase: file:///C:/windows/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
----------------------------------------
System
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.6401 (Win8RTMGDR.050727-6400)
CodeBase: file:///C:/windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
----------------------------------------
System.Drawing
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.6401 (Win8RTMGDR.050727-6400)
CodeBase: file:///C:/windows/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
----------------------------------------
System.Configuration
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.6411 (Win8RTMGDR.050727-6400)
CodeBase: file:///C:/windows/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
----------------------------------------
System.Xml
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.6411 (Win8RTMGDR.050727-6400)
CodeBase: file:///C:/windows/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll
----------------------------------------

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

<configuration>
<system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

Dirbaio	Posted on 09-22-13, 06:32 pm Hi. Link ID: 28357 +0
Super Mario ( ͡° ͜ʖ ͡°) Karma: 10020 Posts: 3777/4457 Since: 06-08-11	Impossibru. You're doing something else wrong then.

Hiccup	Posted on 09-22-13, 06:44 pm Hi. Link ID: 28359 +0
Birdo Karma: 2754 Posts: 738/2091 Since: 06-26-11	Can you send me the last narc, extracting it your way?

Pages: 1