Questions tagged [decompress]

Process of decoding a compressed file to get back to the original one. Some compression software may also include encryption or obfuscation in order to protect their format/algorithm.

Filter by
Sorted by
Tagged with
0
votes
1answer
81 views

Is this file compressed, and if yes what type of compression is it. And how can I find it myself

I'm once again stuck on a binary image, which seems like it might be compressed, but I can't find any way to detect the compression used, let alone decompress it. The binary in question is from a "...
0
votes
0answers
29 views

Is there a way to identify compression algorithm used in exe file?

I'm trying to find a compression method used in executable file. I tried decompiling it with IDA Pro found a pseudocode of decompression but couldn't compile and use it in my program. Here's ...
4
votes
2answers
95 views

Is there a way to confirm and decompress files that I suspect are compressed with a very early format of PKZIP?

I have a very large number of files (tens of thousands) who's binary all begins with 0x00 0x06. They do not open with 7-ZIP. I notice also that all Office files seem to share the same next 32 bytes. ...
1
vote
2answers
149 views

Way to know if firmware is compressed

I dumped a wifi firmware of ps3 console but it seems that this firmware is compressed. Here you can have some informations : https://www.psdevwiki.com/ps3/Wifi_Firmware What can I do to decompress it ...
0
votes
0answers
50 views

ZynOS decompress tools

is there any tools for decompressing zynos firmware and compress it after edit little things in it ??? I have firmware called ras I'm trying to edit it but couldn't find any thing help it's for tp-...
2
votes
1answer
186 views

Decode synth preset formats for massive (.nmsv) fm8 (.nfm8) and absynth (.nabs)

I'm trying to decode the file formats for Massive, FM8 and absynth VST synths. The file format is binary with several sections. Reason for this endeavour is to convert the above formats to general vst ...
2
votes
1answer
92 views

How to interpret the final 0x03 0x00 in this minimal gzip sample?

I'm reading gzip format specification, trying to understand byte-to-byte the following minimal example (generated using echo -n | gzip > /tmp/a.gz): 00000000 1f 8b 08 00 70 3c b4 5d 00 03 03 00 ...
0
votes
0answers
80 views

What kind of compression/encryption could this be?

I am dealing with a file that seems to use some kind of proprietary compression/encryption I can't figure out. I have a lot of sample files as well as different versions of the same file, so I have ...
2
votes
1answer
41 views

Partially correctly decoded strings from pkware zip with known plaintext

I have a password-protected zip file, where the paths and filenames of each file are encrypted using PKWARE encryption. The password is known and correct, and so is the encryption algorithm. I also ...
2
votes
1answer
139 views

What compression type has been used here?

I am still working on the binary image from the last question, and have already found out that my "corrupted" data is actually just compressed. But now I have another issue because I don't know what ...
1
vote
2answers
83 views

Strings weirdly split in binary

Recently I have come across a few parts in a binary that looked odd to me, and I wanted to ask if this is something common compilers do, and if there is a way to undo it. (The binary is from a raw ...
1
vote
0answers
37 views

Recreated LZMA differs from the original after 332 bytes

Recently I decompressed an LZMA file from a VxWorks filesystem which was recognized and decompressed by the LZMA SDK with parameters lc = lp = 0, pb = 2 and dictionary size 8MB. When I recompressed it ...
2
votes
0answers
131 views

Decompress from file with crush32

I have some files *.bli, *.ilg, *.pix, etc. These files are from technical documentation LinkOne, and compressed with old C/Win32 compression library crush32.dll. information can be found here ...
0
votes
0answers
276 views

unsquashfs failed to read SquashFS file

I tried to unpack binary which is SquashFS system, the file is mtd partition copied from NAND device, Root filesystem (read-only). Actually its SquashFS version, modifyed/patched by vendor. binwalk ...
1
vote
0answers
63 views

Can't install sasquatch tool

Ubuntu 16.04 LTS. I'm trying to install sasquatch tool (which should apply patches to the standard unsquashfs utility), but got the issue, every time build process show error in one place: ./build.sh:...
5
votes
1answer
181 views

Reverse engineering a compression algorithm to decompress ASCII text (LZ-variant?)

Reposted from StackOverflow as is. I'm trying to decompress a very long text block from an ARMv5t powered Gameboy Advance ROM, which was compressed using some kind of custom LZ-esque compression ...
3
votes
1answer
285 views

Reverse engineering file format - ImageLink

I have some technical documentation which is supplied in the form of a generic Windows viewer and a database. The database contains different "books", which are represented by a bunch files: book.bbi ...
1
vote
1answer
222 views

Compressed PS2 .RAW File

I've been trying to translate Fullmetal Alchemist 3, i extracted the CFC.DIG file (Main data file) using a QuickBMS script. but now I'm stuck with these .Raw files from RACJIN games, [same case as ...
1
vote
1answer
831 views

Decompressing a .replay file

Fortnite has a feature that records your gameplay and saves it as a .replay file, now I don't believe these files are encrypted, only compressed. I wasn't able to find a way online to decompress such ...
0
votes
2answers
1k views

Extracting the contents of an unknown archive file format

I need some help and advice here. I am privately learning on how to reverse engineer our teachers custom file archive file that have other files stored inside of them. for school project. But, I am ...
1
vote
0answers
136 views

Detect compression algorithm in .NPK archive

I'am trying to unpack Android game archive file (.NPK). The game is "Nvidia Glowball demo" (it has been pre-installed on my android tablet) Archive structure seems to be simple, but I can't ...
2
votes
1answer
258 views

Can't decompress firmware

I'm trying to reverse engineer a firmware for a vape mod. I've downloaded it from their official website. First I tried dissassemble it in IDA but it couldn't identify any architecture in it. Then I ...
4
votes
0answers
443 views

Finding decompress algorithm for unknown compression

I have a raw data of what seems to be a compressed PNG file and I need to find the decompress algorithm for unknown compression. You can see the file here. I think they are using some kind of LZRW 1 ...
2
votes
1answer
181 views

Any ideas on how to decode Photoshop Liquify .msh files?

Photoshop's Liquify filter allows you to distort images interactively in many different ways. When you have distorted an image to your liking, you can save the mesh that represents the transformation ...
1
vote
0answers
82 views

How is PTX compressed in a fatbinary?

It is not clear how PTX is compressed in a fatbinary. I'm doing some research and by looking at the binary it seems a sort of LZ77 (or LZSS?). I've prepared some tests: Small PTX. A simple vec_add (...
1
vote
0answers
231 views

Naruto Uzumaki Chronicles 2 .RAW Files [PS2]

I'm have been trying to mod these game for years, but I still stuck with the raw files from RACJIN games, [same case as Fullmetal Alchemist & Bleach]. The files appear to be compressed, and a ...
1
vote
0answers
236 views

Compression algorithm working with bitstream

I'm trying to reverse decompression algorithm for one of old games. After some reversing I found that it reads bit stream, not byte by byte. It looks like this: std::vector<uint32_t> TABLE_1 = {...
1
vote
1answer
376 views

Need help in compression algorithm identification

Currently I'm in reversing an old MS-DOS Neuromancer game (Interplay Productions, 1988. Based on William Gibson's novel). For now I have already written an utility that parses game resources and ...
5
votes
0answers
386 views

Issues with reversing LZSS compression algorithm

I am trying to reverse engineer my HP printer's firmware, so I dumped the SPI chip from the board, and there are a lot of strings, but almost always look something like this: I noticed a pattern that ...
-2
votes
1answer
489 views

Unknown game file decompress [closed]

So I got this file with an unknown extension. The file is an event flow code Ok, so I analysed the file (with HxD) and it seems to be compressed in some way because you can read some plain text there....
3
votes
2answers
390 views

how to find the encryption algorithm?

I have an arm complied so file and find the decrypt function which pseudocode generated by IDA Pro is like this: char __cdecl EncodeUtil::getDecryptStr() { int *v0; // r0 int *v1; // r7 ...
1
vote
1answer
199 views

Converting 16 bit long Hex value to a color

I am currently trying to reverse engineer some game files. I have found the exact location of each graphic element, but now I am stuck trying to convert their data to "readable" rgb code. They use 16 ...
1
vote
0answers
137 views

Unsquashfs fails partways with gzip error code -5

I have been trying to unsquash a system.sfs file in order to modify the directories. however, unsquashfs system.sfs returns the following output: Parallel unsquashfs: Using 8 processors 1 inodes (...
1
vote
0answers
302 views

Custom image format decoding

TL;DR: is there any chance of decoding custom picture format in case I have sufficient amount of data? Please see examples at end. I have binary files of an old DOS diskmag (late 90's). After couple ...
1
vote
3answers
682 views

Decompress and Analyse VMWARE EFI64 bios

I want to analyse this UEFI bios here. When I open it in IDA it looks compressed to me. Also IDA lists the processor type as ZLOG. Shouldn't this be the multi processor setting for IDA? Anyway, If I ...
2
votes
0answers
333 views

Struggling with an archive file format using “encryption”

I am currently working on a file format used to pack (storage only, no compression) different file types together for transport. There is some sort of very simple "encryption" used and so far I have ...
4
votes
1answer
314 views

Decoding LZSS buffer lookup indices

I'm working on unpacking a camera firmware file which consists of various sections that I am able to correctly split and validate. One section within this file is additionally compressed with a form ...
0
votes
1answer
138 views

I'm would like to view this malicious payload, but am having trouble decoding it

This is a gzip compressed base64 string. I tried decoding it with an online converter but it said the data was corrupt. Can anyone decode this? H4sIAAAAAAAAAL1X6W6jyBb+...
1
vote
1answer
375 views

How do I decompress a .astc file with an additional .ccz extension? How do I view .lta files?

This is crossposted from reg. stack overflow. I was referred here. This will have more updates, however. First, full disclosure: I'm very new to coding and very new to file dissecting, but its ...
7
votes
2answers
645 views

What compression algorithm is this?

I've reversed the following decompression algorithm from a game. It appears to be some variant of LZ77, however none of the descriptions of variants seem quite close enough what I've got. Is this a ...
0
votes
1answer
197 views

How does the different types of executable packing work?

Reference to this thread: What are the different types of packers? Q1: How do packing methods like compression, protection, and encryption work, how do they differ, and which is more secure? Q2: ...
1
vote
2answers
2k views

Strange File Format: How to unpack a set of compressed files?

I am trying to extract data from a proprietary file type: .take. I am unfamiliar with file compression and encoding, but it appears as if this file type is acting as some sort of wrapper for other ...
2
votes
2answers
865 views

Trying to figure what kind of compression was used

I got the following raw data, which are the first 35 bytes of a compressed png image: 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 00 0d 49 48 44 52 08 00 00 02 58 00 83 5a 08 06 80 00 83 64 31 28 fe I also ...
-1
votes
1answer
2k views

How to extract D-Link DCS-4603 camera firmware

I tried extract the firmware image from the binary file available at the D-Link DCS-4603 Vigilance Full HD PoE Dome Network Camera technical support page it by using binwalk but failed. Is there ...
1
vote
0answers
109 views

How can I make these images appear normal?

I'm trying to extract some images from a PS Vita game. I've managed to get a load of .bin files with names 00000.bin, 00001.bin and so on, but the file types are not the same. Each even numbered file ...
4
votes
3answers
3k views

Identify compression of this ZTE ZXV10 H201L V2 backup config file

This config.bin file is from a ZTE router. I would like to decompress it but I did not identify the compression used in the file. Maybe someone can. 00000000 99 99 99 99 44 44 44 44 55 55 55 55 aa ...
3
votes
1answer
13k views

Decompressing zImage

I have a firmware that I've dumped from a phone. I found a uImage header and a zImage after running binwalk. The header says that the image is uncompressed, however I've read that zImages are usually ...
2
votes
2answers
8k views

Reverse Engineering a Firmware. Someone can help me?

I am currently trying to reverse-engineer a firmware file to learn the topic but I am a little bit stuck. I tried to use binwalk to get more information about the file but this did not produce ...
1
vote
0answers
879 views

How to decompress a custom game data file?

So here's the rundown: The files in themselves are .spc. Normally, you'd think this is a spectrum file, but it's a custom file made by the developer themselves. It contains an image that is used/will ...
2
votes
1answer
402 views

What is Executable Compression? [closed]

I don't know whether this is the right place for this question or this question is too basic. I was reading Antivirus Hacker's Handbook, where they talked a bit about software packers, protectors, ...