Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [decompress]

Process of decoding a compressed file to get back to the original one. Some compression software may also include encryption or obfuscation in order to protect their format/algorithm.

1
vote
0answers
45 views

Detect compression algorithm in .NPK archive

I'am trying to unpack Android game archive file (.NPK). The game is "Nvidia Glowball demo" (it has been pre-installed on my android tablet) Archive structure seems to be simple, but I can't ...
2
votes
2answers
100 views

Can't decompress firmware

I'm trying to reverse engineer a firmware for a vape mod. I've downloaded it from their official website. First I tried dissassemble it in IDA but it couldn't identify any architecture in it. Then I ...
4
votes
0answers
141 views

Finding decompress algorithm for unknown compression

I have a raw data of what seems to be a compressed PNG file and I need to find the decompress algorithm for unknown compression. You can see the file here. I think they are using some kind of LZRW 1 ...
0
votes
0answers
70 views

View Data from a .dat file

I am doing working on a project of my own where I am using the data of a football game to calculate certain statistics on players. Long story short, I am having trouble extracting the data from the ...
1
vote
0answers
50 views

Any ideas on how to decode Photoshop Liquify .msh files?

Photoshop's Liquify filter allows you to distort images interactively in many different ways. When you have distorted an image to your liking, you can save the mesh that represents the transformation ...
0
votes
0answers
88 views

Extract filesystem from flash dump

as a beginner project I'm trying to reverse engineer an old IP telephone just for fun. It has a Winbond 64MBit flash chip and I already dumped the content with flashrom. At my first try binwalk wasn't ...
1
vote
0answers
46 views

How is PTX compressed in a fatbinary?

It is not clear how PTX is compressed in a fatbinary. I'm doing some research and by looking at the binary it seems a sort of LZ77 (or LZSS?). I've prepared some tests: Small PTX. A simple vec_add (...
1
vote
0answers
132 views

Naruto Uzumaki Chronicles 2 .RAW Files [PS2]

I'm have been trying to mod these game for years, but I still stuck with the raw files from RACJIN games, [same case as Fullmetal Alchemist & Bleach]. The files appear to be compressed, and a ...
1
vote
0answers
111 views

Compression algorithm working with bitstream

I'm trying to reverse decompression algorithm for one of old games. After some reversing I found that it reads bit stream, not byte by byte. It looks like this: std::vector<uint32_t> TABLE_1 = {...
0
votes
0answers
334 views

binwalk - Is it possible to know what extraction method was used?

I have a file that I need to find out how to decompress and be able to compress back to the same format When I used binwalk to get information from the file binwalk file returns: DECIMAL ...
1
vote
1answer
207 views

Need help in compression algorithm identification

Currently I'm in reversing an old MS-DOS Neuromancer game (Interplay Productions, 1988. Based on William Gibson's novel). For now I have already written an utility that parses game resources and ...
5
votes
0answers
238 views

Issues with reversing LZSS compression algorithm

I am trying to reverse engineer my HP printer's firmware, so I dumped the SPI chip from the board, and there are a lot of strings, but almost always look something like this: I noticed a pattern that ...
-2
votes
1answer
208 views

Unknown game file decompress [closed]

So I got this file with an unknown extension. The file is an event flow code Ok, so I analysed the file (with HxD) and it seems to be compressed in some way because you can read some plain text there....
3
votes
2answers
333 views

how to find the encryption algorithm?

I have an arm complied so file and find the decrypt function which pseudocode generated by IDA Pro is like this: char __cdecl EncodeUtil::getDecryptStr() { int *v0; // r0 int *v1; // r7 ...
1
vote
1answer
76 views

Converting 16 bit long Hex value to a color

I am currently trying to reverse engineer some game files. I have found the exact location of each graphic element, but now I am stuck trying to convert their data to "readable" rgb code. They use 16 ...
1
vote
0answers
64 views

Unsquashfs fails partways with gzip error code -5

I have been trying to unsquash a system.sfs file in order to modify the directories. however, unsquashfs system.sfs returns the following output: Parallel unsquashfs: Using 8 processors 1 inodes (...
1
vote
0answers
129 views

Custom image format decoding

TL;DR: is there any chance of decoding custom picture format in case I have sufficient amount of data? Please see examples at end. I have binary files of an old DOS diskmag (late 90's). After couple ...
1
vote
3answers
239 views

Decompress and Analyse VMWARE EFI64 bios

I want to analyse this UEFI bios here. When I open it in IDA it looks compressed to me. Also IDA lists the processor type as ZLOG. Shouldn't this be the multi processor setting for IDA? Anyway, If I ...
0
votes
0answers
78 views

What type of shift is this?

I'm doing a reverse engineering project (decompressing firmware) and I need to know what kind of shift operation this is. A lot of bytes need to be shifted left as follows: 0x02 becomes 0x04 0x04 ...
2
votes
0answers
313 views

Struggling with an archive file format using “encryption”

I am currently working on a file format used to pack (storage only, no compression) different file types together for transport. There is some sort of very simple "encryption" used and so far I have ...
4
votes
1answer
163 views

Decoding LZSS buffer lookup indices

I'm working on unpacking a camera firmware file which consists of various sections that I am able to correctly split and validate. One section within this file is additionally compressed with a form ...
0
votes
1answer
121 views

I'm would like to view this malicious payload, but am having trouble decoding it

This is a gzip compressed base64 string. I tried decoding it with an online converter but it said the data was corrupt. Can anyone decode this? H4sIAAAAAAAAAL1X6W6jyBb+...
1
vote
1answer
252 views

How do I decompress a .astc file with an additional .ccz extension? How do I view .lta files?

This is crossposted from reg. stack overflow. I was referred here. This will have more updates, however. First, full disclosure: I'm very new to coding and very new to file dissecting, but its ...
6
votes
2answers
406 views

What compression algorithm is this?

I've reversed the following decompression algorithm from a game. It appears to be some variant of LZ77, however none of the descriptions of variants seem quite close enough what I've got. Is this a ...
0
votes
1answer
91 views

How does the different types of executable packing work?

Reference to this thread: What are the different types of packers? Q1: How do packing methods like compression, protection, and encryption work, how do they differ, and which is more secure? Q2: ...
1
vote
2answers
808 views

Strange File Format: How to unpack a set of compressed files?

I am trying to extract data from a proprietary file type: .take. I am unfamiliar with file compression and encoding, but it appears as if this file type is acting as some sort of wrapper for other ...
1
vote
2answers
821 views

Trying to figure what kind of compression was used

I got the following raw data, which are the first 35 bytes of a compressed png image: 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 00 0d 49 48 44 52 08 00 00 02 58 00 83 5a 08 06 80 00 83 64 31 28 fe I also ...
-1
votes
1answer
945 views

How to extract D-Link DCS-4603 camera firmware

I tried extract the firmware image from the binary file available at the D-Link DCS-4603 Vigilance Full HD PoE Dome Network Camera technical support page it by using binwalk but failed. Is there ...
1
vote
0answers
88 views

How can I make these images appear normal?

I'm trying to extract some images from a PS Vita game. I've managed to get a load of .bin files with names 00000.bin, 00001.bin and so on, but the file types are not the same. Each even numbered file ...
4
votes
3answers
2k views

Identify compression of this ZTE ZXV10 H201L V2 backup config file

This config.bin file is from a ZTE router. I would like to decompress it but I did not identify the compression used in the file. Maybe someone can. 00000000 99 99 99 99 44 44 44 44 55 55 55 55 aa ...
1
vote
1answer
7k views

Decompressing zImage

I have a firmware that I've dumped from a phone. I found a uImage header and a zImage after running binwalk. The header says that the image is uncompressed, however I've read that zImages are usually ...
2
votes
2answers
5k views

Reverse Engineering a Firmware. Someone can help me?

I am currently trying to reverse-engineer a firmware file to learn the topic but I am a little bit stuck. I tried to use binwalk to get more information about the file but this did not produce ...
1
vote
0answers
679 views

How to decompress a custom game data file?

So here's the rundown: The files in themselves are .spc. Normally, you'd think this is a spectrum file, but it's a custom file made by the developer themselves. It contains an image that is used/will ...
2
votes
1answer
254 views

What is Executable Compression? [closed]

I don't know whether this is the right place for this question or this question is too basic. I was reading Antivirus Hacker's Handbook, where they talked a bit about software packers, protectors, ...
3
votes
0answers
548 views

Reverse-engineering DOS game's data files

I would like to figure out the data format used by an old DOS game I used to play when I was a kid. That link includes a full download for all the files and it runs fine in DOSBox if you want to try ...
1
vote
1answer
495 views

Decrypt / Decode / Decompress Proprietary File

I am using a 3rd party software that stores templates for ID cards in a database. I believe the templates are in xml format but are encrypted / encoded / compressed in the database. Each encoded ...
2
votes
0answers
256 views

What encryption/compression is this, and how to encode/decode from it?

I've been trying to reverse engineer an Android app's communication protocol using a combination of Xposed and Packet sniffing. Most of the packets the app sends have this header set: Content-Type: ...
2
votes
1answer
1k views

How to unpack kkrunchy executables?

I'm trying to figure out how to unpack kkruncy executable, sources here and binaries here, anyone knows how to do it? My main idea was testing out some little hello world exes compressed with ...
3
votes
1answer
474 views

Identify and/or reverse compression algorithm

I have a program that read some proprietary files that are compressed. I managed to debug the program and extract the algorithm that decompress the data and use it on my software without any issue. ...
2
votes
0answers
609 views

open a non-standard compression .tar.lzma file extracted from firmware download

We are trying to examine a firmware download for a product we have running on our local network. Using the command binwalk -Me filename we generated a folder that contains the following content: ...
1
vote
2answers
395 views

binwalk cannot find gzip sections

I am starring at the following exe file, see main page here. It seems pretty clear (using -E entropy option) that the exe contains compressed section. For some reason binwalk is not capable of finding ...
2
votes
0answers
311 views

Reverse Engineering SCE .pkg Files

To elaborate, I need help decompressing SCE (Sony Computer Entertainment) .pkg files. I've found several common patterns between multiple versions of the same file (released over the span of two years ...
15
votes
1answer
2k views

Decoding an unknown image format with “DREK” signature (*.drk)

There are some unknow images, which I would like to decode to RRGGBBAA format. It was a really hard work, but at the moment I can somewhat understand, that which part of the binary is responsible for ...
3
votes
1answer
401 views

Reversal of unknown obfuscation or encryption with known plaintext

Introduction For academical reasons I am reversing a firmware for an embedded device. I have already created a perl script which is able to parse the firmware structure and extract files from it (its ...
2
votes
1answer
1k views

Extracting textures from a file (Gamecube game)

There is a gamecube videogame (called Winning Eleven) which i want to translate, but i had no success in extracting the textures out of the files which contain them. I have tried several tools, one ...
1
vote
1answer
108 views

Need help with compressed string of unknown format

I'm writing a parser for some xml scenario files. Among other cleartext info there is a node 'Scenario_Compressed' which i like to analyse. I've uploaded the content here: http://www.lunex.net/temp/...
3
votes
2answers
165 views

What compression algorithm could have generated these strings?

To what kind of compression algorithm could the following sentences belong to? AxFWR:YRCtIPns<_o%p_=Q>LELBM AxFWRPA:cXe#<InM=L:Mthwekblc AxFWREFEp`f?PU`;K;M:;P?MDMCL AxFWRW%VK>Hk]...
1
vote
1answer
56 views

Compressed stream unopenable with external tools

I'm trying to reverse-engineer the file format of a game's save files. The game is written in Unity, thus .NET, so it was possible to view an approximated code with RedGate Reflector. Right now I ...
1
vote
1answer
387 views

How to decompress SHA1[compressed] executable

I have struggled a lot to reverse an app that is delphi executable. So I trusted PEiD to tell me the truth about the app but unfortunately I found these Nothing found[overlay]* Then I switched the ...
0
votes
1answer
59 views

Should these numbers be interpreted as flags or not, or something else?

I am reverse engineering the VAG format, which is a sound file format for the PSX (PlayStation 1). In the format, audio markers indicating audio looping points are encoded in the stream itself by a ...