Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 11-07-2004, 01:27
MaRKuS-DJM's Avatar
MaRKuS-DJM MaRKuS-DJM is offline
Cracker + Unpacker
 
Join Date: Aug 2003
Location: Virtual World / Network
Posts: 553
Rept. Given: 7
Rept. Rcvd 6 Times in 4 Posts
Thanks Given: 3
Thanks Rcvd at 16 Times in 10 Posts
MaRKuS-DJM Reputation: 6
packing-format

i'm trying to extract a setup-file manually with my debugger.
this file creates a temporary file called com.dat, i analysed this is packed through the GZ-format.
so i unpacked it through winrar and got a file called com.gz.out

this file has no crypto or something else, all files are in plain there but i don't want to do that manually. the format in hex is looking like this:

00E0010064626768656C702E646C6C00CDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCDCD

there are a lot of more CD hex-bytes.
the first part seems to be some type of descriptor, it's a dword.
then there's the filename, a lot of more CD and then the next descriptor and next filename till it gets to the beginning of the files.

anyone knows what format this is and how to decompress it?
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Awesome Executable Packing DARKER General Discussion 0 12-12-2021 17:40
About .Net Packing and Introduction BackTangent General Discussion 10 06-12-2011 20:24
Windows Drivers (.sys) packing/protection pp2 General Discussion 8 04-15-2005 11:49
How to determine packing method? vxd General Discussion 2 12-01-2002 05:50


All times are GMT +8. The time now is 10:42.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )