03-17-2015, 01:59 AM
You can decompress those BCH files with ntcompress (you need to use the -x option) or this QuickBMS script:
Code:
comtype ntcompress
get ZSIZE asize
get NAME basename
math SIZE = ZSIZE
math SIZE *= 20
clog NAME 0 ZSIZE SIZE