IFO Files

From 11B-X-1371
Jump to: navigation, search

IFO files are included on DVDs to supply the DVD player with information about the video and audio format it needs to use to play the content. The structure of an IFO file is described here. Inspecting the two IFO files in the iso container using a hex editor, some strange patterns appear. IFO files of other DVDs that I have checked do not show similar patterns but I'm not an expert on this so someone needs to verify whether this could be something. Here are some of the hex values found in the VTS_01_0.IFO starting from offset 0x1801:

01 00 00 00 00 01 EB 00 00 00 0C 01 00 00 77 00 00 00 F0 00 00 02 13 00 00 03 26 00 00 04 28 00 00 05 54 00 00 06 77 00 00 07 7C 00 00 08 97 00 00 09 ED 00 00 0B 15 00 00 0C 64 00 00 0E 4A 00 00 0F 6C 00 00 10 B4 00 00 11 E8 00 00 13 26 00 00 14 57 00 00 15 94 00 00 16 C9 00 00 18 01 00 00 19 35 00 00 1A 6C 00 00 1B A4 00 00 1D 79 00 00 1E AC 00 00 1F EC 00 00 21 17 00 00 22 56 00 00 23 87 00 00 24 AC 00 00 25 B1 00 00 26 A8 00 00 27 9F 00 00 28 86 00 00 29 38 00 00 2A 1B 00 00 2A AE 00 00 2B 4C 00 00 2B EE 00 00 2C 8F 00 00 2D 20 00 00 2D B6 00 00 2E 44 00 00 2E CD 00 00 2F 5E 00 00 2F EA 00 00 30 77 00 00 31 47 00 00 31 D2 00 00 32 5B 00 00 32 E2 00 00 33 6E 00 00 34 05 00 00 34 96 00 00 35 4B 00 00 35 F5 00 00 36 A4 00 00 37 43 00 00 37 E3 00 00 38 CF 00 00 39 6F 00 00 3A 0E 00 00 3A AF 00 00 3B 51 00 00 3B F2 00 00 3C 97 00 00 3D 2D 00 00 3D D4 00 00 3E 6A 00 00 3E FC 00 00 3F BE 00 00 40 E0 00 00 41 9F 00 00 42 62 00 00 43 33 00 00 44 91 00 00 45 CC 00 00 46 4D 00 00 46 D8 00 00 47 5E 00 00 47 E6 00 00 48 6C 00 00 48 F0 00 00 49 CB 00 00 4A 6F 00 00 4B 0B 00 00 4B B8 00 00 4C 45 00 00 4C D9 00 00 4D 77 00 00 4E 18 00 00 4E B4 00 00 4F 4A 00 00 50 7B 00 00 51 B4 00 00 53 3E 00 00 54 00 00 00 55 17 00 00 56 1D 00 00 57 2D 00 00 58 07 00 00 59 31 00 00 5A 4C 00 00 5B 71 00 00 5C 95 00 00 5D B8 00 00 5E D6 00 00 60 89 00 00 61 A4 00 00 62 B2 00 00 63 B7 00 00 64 F5 00 00 66 2E 00 00 67 66 00 00 68 9A 00 00 69 DD 00 00 6B 12 00 00 6C 44 80 00 6D 82

which in translated to decimal (removing the '00 00' pairs as well as one 80 00 pair near the end) is:

1  1 235  0 12 1  119  0 240  2 19  3 38  4 40  5 84  6 119  7 124  8 151   237  11 21  12 100  14 74  15 108  16 180  17 232  19 38  20 87  21 148  22 201  24 1  25 53  26 108  27 164  29 121  30 172  31 236  33 23  34 86  35 135  36 172  37 177  38 168  39 159  40 134  41 56  42 27  42 174  43 76  43 238  44 143  45  45 182  46 68  46 205  47 94  47 234  48 119  49 71  49 210  50 91  50 226  51 110  52 5  52 150  53 75  53 245  54 164  55 67  55 227  56 207  57 111  58 14  58 175  59 81  59 242  60 151  61 45  61 212  62 106  62 252  63 190  64 224  65 159  66 98  67 51  68 145  69 204  70 77  70 216  71 94  71 230  72 108  72 240  73 203  74 111  75 11  75 184  76 69  76 217  77 119  78 24  78 180  79 74  80 123  81 180  83 62  84  0 85 23  86 29  87 45  88 7  89 49  90 76  91 113  92 149  93 184  94 214  96 137  97 164  98 178  99 183  100 245  102 46  103 102  104 154  105 221  107 18  108 68 128  109 130

Note that the first number of each pair seems to be incremental from 1 to 109, with some values present twice while others are missing.

A second suspicious passage starts at offset 0x2802

03 EB 00 00 00 00 00 00 00 71 00 00 00 F0 00 00 01 85 00 00 02 13 00 00 02 9D 00 00 03 26 00 00 03 A3 00 00 04 28 00 00 04 B3 00 00 05 54 00 00 05 F9 00 00 06 77 00 00 06 FE 00 00 07 7C 00 00 07 F8 00 00 08 97 00 00 09 52 00 00 09 ED 00 00 0A 76 00 00 0B 15 00 00 0B C7 00 00 0C 64 00 00 0D 0B 00 00 0D A6 00 00 0E 4A 00 00 0E DD 00 00 0F 6C 00 00 0F FA 00 00 10 B4 00 00 11 41 00 00 11 E8 00 00 12 83 00 00 13 26 00 00 13 BD 00 00 14 57 00 00 14 F3 00 00 15 94 00 00 16 31 00 00 16 C9 00 00 17 5D 00 00 18 01 00 00 18 9C 00 00 19 35 00 00 19 D1 00 00 1A 6C 00 00 1B 0C 00 00 1B A4 00 00 1C 41 00 00 1C E1 00 00 1D 79 00 00 1E 05 00 00 1E AC 00 00 1F 45 00 00 1F EC 00 00 20 85 00 00 21 17 00 00 21 BB 00 00 22 56 00 00 22 EE 00 00 23 87 00 00 24 27 00 00 24 AC 00 00 25 2C 00 00 25 B1 00 00 26 2C 00 00 26 A8 00 00 27 22 00 00 27 9F 00 00 28 22 00 00 28 86 00 00 28 E6 00 00 29 38 00 00 29 83 00 00 29 CF 00 00 2A 1B 00 00 2A 64 00 00 2A AE 00 00 2A FB 00 00 2B 4C 00 00 2B 9D 00 00 2B EE 00 00 2C 41 00 00 2C 8F 00 00 2C DA 00 00 2D 20 00 00 2D 6B 00 00 2D B6 00 00 2E 02 00 00 2E 44 00 00 2E 87 00 00 2E CD 00 00 2F 17 00 00 2F 5E 00 00 2F A5 00 00 2F EA 00 00 30 31 00 00 30 77 00 00 30 BD 00 00 31 03 00 00 31 47 00 00 31 8C 00 00 31 D2 00 00 32 16 00 00 32 5B 00 00 32 9F 00 00 32 E2 00 00 33 28 00 00 33 6E 00 00 33 BA 00 00 34 05 00 00 34 4F 00 00 34 96 00 00 34 E9 00 00 35 4B 00 00 35 A7 00 00 35 F5 00 00 36 4F 00 00 36 A4 00 00 36 F5 00 00 37 43 00 00 37 94 00 00 37 E3 00 00 38 32 00 00 38 81 00 00 38 CF 00 00 39 1E 00 00 39 6F 00 00 39 BF 00 00 3A 0E 00 00 3A 5D 00 00 3A AF 00 00 3B 03 00 00 3B 51 00 00 3B A2 00 00 3B F2 00 00 3C 43 00 00 3C 97 00 00 3C D9 00 00 3D 2D 00 00 3D 85 00 00 3D D4 00 00 3E 1F 00 00 3E 6A 00 00 3E B3 00 00 3E FC 00 00 3F 58 00 00 3F BE 00 00 40 1C 00 00 40 7C 00 00 40 E0 00 00 41 3D 00 00 41 9F 00 00 42 01 00 00 42 62 00 00 42 C5 00 00 43 33 00 00 43 E8 00 00 44 91 00 00 45 3D 00 00 45 CC 00 00 46 0B 00 00 46 4D 00 00 46 94 00 00 46 D8 00 00 47 1A 00 00 47 5E 00 00 47 A2 00 00 47 E6 00 00 48 2B 00 00 48 6C 00 00 48 AC 00 00 48 F0 00 00 49 33 00 00 49 74 00 00 49 CB 00 00 4A 2B 00 00 4A 6F 00 00 4A B0 00 00 4B 0B 00 00 4B 5B 00 00 4B B8 00 00 4B FF 00 00 4C 45 00 00 4C 8E 00 00 4C D9 00 00 4D 28 00 00 4D 77 00 00 4D C4 00 00 4E 18 00 00 4E 6A 00 00 4E B4 00 00 4E FF 00 00 4F 4A 00 00 4F DC 00 00 50 7B 00 00 51 19 00 00 51 B4 00 00 52 39 00 00 52 BA 00 00 53 3E 00 00 53 A5 00 00 54 00 00 00 54 94 00 00 55 17 00 00 55 9B 00 00 56 1D 00 00 56 A2 00 00 57 2D 00 00 57 98 00 00 58 07 00 00 58 A1 00 00 59 31 00 00 59 C0 00 00 5A 4C 00 00 5A E2 00 00 5B 71 00 00 5C 07 00 00 5C 95 00 00 5D 29 00 00 5D B8 00 00 5E 3F 00 00 5E D6 00 00 5F 6B 00 00 60 01 00 00 60 89 00 00 61 0F 00 00 61 A4 00 00 62 2A 00 00 62 B2 00 00 63 39 00 00 63 B7 00 00 64 24 00 00 64 F5 00 00 65 A0 00 00 66 2E 00 00 66 CE 00 00 67 66 00 00 68 02 00 00 68 9A 00 00 69 3E 00 00 69 DD 00 00 6A 78 00 00 6B 12 00 00 6B AB 00 00 6C 44 00 00 6C E2 00 00 6D 82 00 00 6E 21 00 00 6E BA

which in translates to (removing the '00 00' pairs):

3 235    0 113  0 240  1 133  2 19  2 157  3 38  3 163  4 40  4 179  5 84  5 249  6 119  6 254  7 124  7 248  8 151  82 237 118  11 21  11 199  12 100  11 166  14 74  14 221  15 108  15 250  16 180  17 65  17 232  18 131  19 38  19 189  20 87  20 243  21 148  22 49  22 201  23 93  24 1  24 156  25 53  25 209  26 108  27 12  27 164  28 65  28 225  29 121  30 5  30 172  31 69  31 236    133  33 23  33 187  34 86  34 238  35 135  36 39  36 172  37 44  37 177  38 44  38 168  39 34  39 159  40 34  40 134  40 230  41 56  41 131  41 207  42 27  42 100  42 174  42 251  43 76  43 157  43 238  44 65  44 143  44 218  45    45 107  45 182  46 2  46 68  46 135  46 205  47 23  47 94  47 165  47 234  48 49  48 119  48 189  49 3  49 71  49 140  49 210  50 22  50 91  50 159  50 226  51 40  51 110  51 186  52 5  52 79  52 150  52 233  53 75  53 167  53 245  54 79  54 164  54 245  55 67  55 148  55 227  56 50  56 129  56 207  57 30  57 111  57 191  58 14  58 93  58 175  59 3  59 81  59 162  59 242  60 67  60 151  60 217  61 45  61 133  61 212  62 31  62 106  62 179  62 252  63 88  63 190  64 28  64 124  64 224  65 61  65 159  66 1  66 98  66 197  67 51  67 232  68 145  69 61  69 204  70 11  70 77  70 148  70 216  71 26  71 94  71 162  71 230  72 43  72 108  72 172  72 240  73 51  73 116  73 203  74 43  74 111  74 176  75 11  75 91  75 184  75 255  76 69  76 142  76 217  77 40  77 119  77 196  78 24  78 106  78 180  78 255  79 74  79 220  80 123  81 25  81 180  82 57  82 186  83 62  83 165  84  0 84 148  85 23  85 155  86 29  86 162  87 45  87 152  88 7  88 161  89 49  89 192  90 76  90 226  91 113  92 7  92 149  93 41  93 184  94 63  94 214  95 107  96 1  96 137  97 15  97 164  98 42  98 178  99 57  99 183  100 36  100 245  101 160  102 46  102 206  103 102  104 2  104 154  105 62  105 221  106 120  107 18  107 171  108 68  108 226  109 130  110 33  110 186

Note that all values of the first passage are also present within the second passage.

Some numbers are present only once while others are present twice, 3 or even 4 times.

An attempt to graph the number pairs in a 2d coordinate system appears to vaguely show a parallel wave pattern, definitely not just random numbers.