Traderain

Source engine save files:  //Version 115
-----------------------------
struct Header
{
	char[4] MagicWord == "J","S","A","V";
	int SaveVersion; //int32
	int TokenTableFileTableOffset; //int32 
	int TokenCount; //int32 
	int TokenTableSize; //int32 
	

Traderain

using System;
using System.Collections.Generic;
using System.IO;
using System.Text;
using System.Windows.Forms;

namespace Redscript
{
    class Program
    {

Traderain

using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Windows.Forms;

namespace Cache
{

Traderain

using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Windows.Forms;
using WolvenKit.W3Strings;

namespace TestStuff

Traderain

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.IO;
using System.Windows.Forms;
using System.Xml.Linq;
using System.Security.Cryptography;

Traderain

using System;
using System.Diagnostics;
using System.IO;
using System.Linq;
using System.Windows.Forms;

namespace wcclitedumper
{
    class Program
    {

Traderain

/*
	Yara ruleset for "The Witcher 3: The Wild Hunt"
*/

rule CR2W
{
    meta:
        author = "Traderain"
        description = "Finds the magic of CR2W files."
        version = "0.1"		

Traderain

using System;
using System.Collections.Generic;
using System.Diagnostics;
using System.IO;
using System.Linq;
using System.Windows.Forms;

namespace wcclitedumper
{
    class Program

Traderain

Type: entities 
Values: 
	name
	layerid
	class
	componentsCount
	componentsClassNames
	templatePath
	posx
	posy

Traderain

"####"
"$any"
"$single"
"%i"
"%s_%s_%s"
"..\\wcc.log"
".w3strings"
".wav"
"2DArrayModified"
"<="