Page 1 of 1

Nostale - Extracting zlib compression

Posted: Tue Feb 09, 2021 10:40 am
by g3stapo
Hello
It's just a settings file which stores text information, I think it's zlib compression, but I tried all the tools and nothing helped.Someone can tell an zlib unpacker who can do it?
I tried QuickBMS, Offzip none of this helped
https://mega.nz/file/dpx2ULzY#MaYx7nexg ... IE8FsGEkJk

Re: Extracting zlib compression

Posted: Tue Feb 09, 2021 12:18 pm
by ikskoks
It doesnt't look like ZLIB at all.
https://i.imgur.com/EbwHqZ9.png

There is some weird header starting with "AC 0B 3F",
then there is list of pointers and there is this header again.

I think that compressed data starts below that and it divided to some kind of chunks
https://i.imgur.com/iOe5SO2.png

From what game is this sample?

Re: Extracting zlib compression

Posted: Tue Feb 09, 2021 2:30 pm
by g3stapo
what could it be?
game name Nostale

Re: Nostale - Extracting zlib compression

Posted: Tue Feb 09, 2021 2:46 pm
by ikskoks
Well, it doesn't look familiar to me.

You can try to use aluigi's comtype scanner with last data chunk
and see if you will get any meaningful results. https://zenhax.com/viewtopic.php?t=23
I have cutted it for you and uploaded as an attachment.

Re: Nostale - Extracting zlib compression

Posted: Tue Feb 09, 2021 4:34 pm
by g3stapo
I did this, exported all the dmp, then checked them with a hex editor and found nothing familiar

Re: Extracting zlib compression

Posted: Tue Feb 09, 2021 4:54 pm
by g3stapo
ikskoks wrote: Tue Feb 09, 2021 12:18 pm It doesnt't look like ZLIB at all.
https://i.imgur.com/EbwHqZ9.png

There is some weird header starting with "AC 0B 3F",
then there is list of pointers and there is this header again.
this list of pointers is contained in the text information of the file