Skip to content
View in the app

A better way to browse. Learn more.
ResHax

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
Help us keep the site running.

Help with unknown algorithm, possibly LZHUFXR and STALKER_LZA

ZenHAX
in Zenhax

Featured Replies

  • Author
  • Localization

qbmsuser, posted Wed Jul 06, 2022 9:47 pm (72499)

I am trying to parse the firmware in various devices. To this end I sometimes need to decompress various code segments which are compressed with an unknown algorithm.

I currently have one example where a small code segment (eg 4KB) is decompressed correctly using the LZHUFXR and STALKER_LZA algorithms (found with QuickBMS comtype scanner 2). However, when large code segments are decompressed using the same algorithms, the actual result begins to diverge from the expected result at some point, eg 20KB.

Would someone be able to help me to refine (?) the parameters for these algorithms to achieve the correct result? Does the solution have something to do with dictionary size?

I have attached two samples, compressed and correctly decompressed (Comp and Decomp). The larger sample is the one that is giving me problems.
Guest
This topic is now closed to further replies.
Go to topic listing

Account

Navigation

Search

Search

Configure browser push notifications
Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.