Skip to content

Commit

Permalink
Adding readme + comments
Browse files Browse the repository at this point in the history
  • Loading branch information
k1nd0ne committed Jul 23, 2024
1 parent 4602522 commit 4a454d3
Show file tree
Hide file tree
Showing 5 changed files with 25 additions and 2 deletions.
2 changes: 1 addition & 1 deletion Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion Cargo.toml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[package]
name = "xpress_lz77"
version = "0.1.0"
version = "1.0.0"
edition = "2021"

# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
Expand Down
20 changes: 20 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
# xpress lz77 decompression algorithms
xpress LZ77 Plain and xpress LZ77+Huffman Decompression algorithms : A rust implementation using pyo3.

# Context
Both algorithms are used by microsoft and can help with digital forensics:

- Windows 1.X prefetch files
- Windows Hibernation

The use of pyo3 make the creation of a python package possible for integration in python3 tools where decompression performances are required.

## Use cases

- https://www.forensicxlab.com/posts/prefetch/
- https://www.forensicxlab.com/posts/hibernation/


# References

- Pseudo code algorithm : https://winprotocoldoc.blob.core.windows.net/productionwindowsarchives/MS-XCA/%5bMS-XCA%5d.pdf [Section 2.2]
Empty file removed log2
Empty file.
3 changes: 3 additions & 0 deletions src/xpress_lz77_huffman.rs
Original file line number Diff line number Diff line change
@@ -1,3 +1,6 @@
// Huffman+LZ77 Decompression Algorithm
// Reference: https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-xca/a8b7cb0a-92a6-4187-a23b-5e14273b96f8

use std::cell::RefCell;
use std::fmt;
use std::io::Error;
Expand Down

0 comments on commit 4a454d3

Please sign in to comment.