zlib unpacker [Request]

[Savage]

Somebody knows where found or can make a zlib unpacker like 7zip.exe or similar in console mode?

I found one (created by a japanese ppl) but can´t unpack correct a data compressed with zlib 1.2.x

[Rahly]

ummm

http://www.zlib.net/

can give you a dll that you can incorporate into a program.

[Mr.Mouse]

I guess he rather would like a command-line driven tool like :

Code: Select all

zlib c:\allmyzlibbedfiles\*.zlb c:\mytargetfolder 

Which, consequently, shouldn't be too difficult to create.

[Rheini]

I attached my command line zlib tool.
Usage:
zlibc -k input output [level]
for compression
or
zlibc -d input output
for decompression

level from 0 (don't compress) to 9 (highest compression)

Edit:
Get new version below.

[Savage]

Thanks!!!

[Strobe]

Rheini: is it okay if make use of this commandline tool in jaeder naub?
(i would make a specific GUI within my ripper that makes you select a file
to be decompressed). that would be awesome ) *i love it*

[Rheini]

Yeah of course.
I attach the exe compiled with static linking of the CRT. This eliminates the necessity of the CRT dlls.

[Strobe]

The current tests ive made with jaeder/zlibc is great!!!

my bruteforce Zlib technique works like a charm currently.

however, i have little little request i need a version of this program
that doesnt make any screen output at all, infact, not even opening up a screen.

the reason is that under the bruteforce stage the access to the program
is very intense, and everytime it opens up a window everything else will
lose focus. ....so, its impossible to do anything else while the
scanner is accessing zlibc.exe all the time ;D

The bruteforcer works this way: jaederstorm.exe is the first one
to scan the file for signatures, it will then report back to the mainframe
with everything it has found. the mainframe will filter it out and
send chunks to zlibc.exe for decoding, which then the mainframe
will pack together in one big chunk.raw file, that can later be scanned
normally by jaedernaub for filesignatures.

currently just tested on one file from CSI-Miami, but it worked =X

[Rheini]

If you use a bruteforce approach, it probably would be the best idea to implement zlib directly in your program.
Then you could also use in-memory decompression.
I used some ideas from here for my program.

[Strobe]

the funny thing here is that this approach was actually faster
than it may seem. as your program allready decompresses zlib
chunks in a lightspeed way , so this isnt really a bottleneck

but i may consider it, if i have time ;D

[Rheini]

I think the honor goes to the zlib authors

[mambox]

tons of games are using zlib..so i may only wait for your bruteforce to discover hidden things,looks great ripper as usual in jaeder

greets!

[Darkfox]

Mainly games that are intended to be moddable at the least moderately use ZLIB correct? I know games such as Age of Empires use ZLIB. Same with AOE2 and etc. I'm rather fond of ZLIB.

[fatduck]

Sorry to bump this old post!
But Rheini, could you add a parameter of an offset value switch to your zlibc.exe so when decompress a file, it go to the offset first and then start the decompression.

Or could you send me a source code of your zlibc so I can modifity it myself!?

I need this function/switch badly!
Thanks

[Rheini]

Good idea. I'm on it.