Page 1 of 1

is this PS2 zip file?

Posted: Fri Jun 15, 2007 6:48 pm
by fatduck
I got these file from a japanese PS2 demo. They look like a zip file but I am not good in compression stuff.

So could anyone help to filnd the format please?

Posted: Sat Jun 16, 2007 7:59 pm
by Darkfox
The most I can get of it is that it is most likely a variation of the GZIP format.

Posted: Sun Jun 17, 2007 12:01 pm
by fatduck
So could you help me to decompress it, atleast point me to what you had found, please!

I am completely new in compression stuff!

Posted: Sun Jun 17, 2007 3:55 pm
by Darkfox
I have nothing other than it being a form of ZIP/GZIP variant. But I am certain sombody could help you with it.

Posted: Mon Jun 18, 2007 1:07 pm
by Savage
The file it's zlib compression i cutted the file and maked a zlib fake header, from the example only unpacks 1 file (i think are two inside)

Before this i tried precomp, but nothing detected

I attach 3 files: the example normal, with fake header and part unpacked

The file:
-noname1.zpk it's the original
-noname1_fake_zlib_header.zpk it's with header modified, for the programs to recognize
-noname1_part_unpacked.zpk it's part of the example succeful unpacked

Maybe this gives some hints to somebody ;)

Posted: Tue Jun 19, 2007 5:44 pm
by fatduck
You are my star!

I try your method with others, but they're not always work!?
The closest file is noname2.zpk whick decompress 98% and I found a 3D model there!

So how do I know where the decompressor stopped at?
Is there good zlib program I can try?(I use zlibc.exe which found in this forum)

Posted: Wed Jun 20, 2007 4:57 pm
by mambox
well...lame question but how did you do to find a zlib method?


the original header:
78 9C
EC BD-07 54 13 5D-D7 36

the fake one:

01 00 00 00-00 00 00 00-5A 4F 41 47-5A 49 50 31
C5 D9 00 00-1F 8B 08 00-00 00 00 00-00 0B

EC BD 07 54 13 5D-D7 36 3C 54-51 10 51 01-41 14 10 14

how did you find those (new) values?

01 00 00 00-00 00 00 00-5A 4F 41 47-5A 49 50 31
C5 D9 00 00-1F 8B 08 00-00 00 00 00-00 0B
^^^ ^^^^^^

Posted: Fri Jun 22, 2007 9:07 am
by fatduck
What do you mean?

They are original form the zpk files!

1st 4 bytes various form files to files(C5 D9 00 00), but the 2nd 4 bytes are always the same(1F 8B 08 00)

Did you found anything meaningful with those values?

Posted: Sat Jun 23, 2007 11:38 am
by Savage
I don't looked the HEX values i looked the ascii chart, if we have:

Posted: Sat Jun 23, 2007 11:40 am
by Savage
And now the cutted file, you can see the missing zlib header (missing the first two bytes)
This is the reason i maked a false zlib header

From readme precomp 0.3.2:
However, the zLib header consists of only 2 bytes, so there can be many false-detected streams that aren't zLib streams but are handled like them

Posted: Sat Jun 23, 2007 3:33 pm
by mambox
ok,i tought different value was for some packed/unpacked size.

Posted: Thu Jun 28, 2007 11:30 pm
by fatduck
It seems that the 4 bytes value located at 0x10~0x13 is the uncompressed size! and at the end of the file, this value repeated!

I try to decompress noname5.zpk and got part of DDS image!

Anyone found the zlib compression method of these type!?

Help please!