Unknown archive

[Surfer]

http://rghost.net/2119241

Trid Online: 100,0% ICE Freeze! compressed archive
http://file-extension.net/seeker/file_extension_ice

Anyone can check this ?

[Shelwien]

Well, precomp "unpacked" it to 2.5M

[Surfer]

"unpacked"

?
I'm interested in lossless unpacking.

[Shelwien]

precomp is lossless and you can read the unpacked html and stuff in the .pcf file.
Also it finds some pngs there.
doesn't help without "-slow" though.

[schnaader]

First, I also couldn't find a decompressor for the file which would clearly be the best way.

Anyway, the format doesn't seem to be that complicated. There is a filelist at the beginning. The files aren't NUL terminated, but there seems to be a list of offsets at the beginning pointing to the filenames. There seem to be 2 PDFs, some web files (JS, XML, XSL...), 6 PNGs and some other files in it.

As Precomp can decompress the files using -slow, the method used is Deflate, so you can even write an own simple decompressor using zLib and the offsets you get from Precomp with the parameters "-v -l0 -slow". Note the -l0 parameter that disables recursion because otherwise some of the streams inside the PDF files will be decompressed.

[Surfer]

Ok, thanks for explanations.

[Black_Fox]

rghost.net gives me error 403. It also did when you were trying to compress executable with upx, upack, pecompact etc, and uploaded original exe there. They must hate Czechia there just FYI.