Problem about decompression
Hi all
I know a file which contain the Signature ={ 0xEF, 0xBE, 0xAD, 0xDE, 0x4E, 0x75, 0x6C, 0x6C, 0x73, 0x6F, 0x66, 0x74, 0x49, 0x6E, 0x73, 0x74} is a nisi file. I can get FirstHeader's flag at position 0x0(suppose Signature's position is 0x4),FirstHeader's HeaderLength at position 0x14 and FirstHeader's ArchiveSize at position 0x18.Usually when FirstHeader's ArchiveSize littler than FileSize,I can get the files and extract the files include the nsis installer file.But also have a lot of file which FirstHeader's ArchiveSize bigger than FileSize,then I can't extract the files include the nsis file.
How can I know the nsis installer had compressde?
How can I get the nsis installer's compression file items and these file's information?
The position is what(suppose Signature's position is 0x4)?
Truly grateful for any assistance on this issue.
Thanks a million!
I'm chinese and I'm not good at English.