Module WKdm

A WKdm decompressor.

This code is very closely based on the C implementation by

Paul Wilson -- wilson@cs.utexas.edu

and

Scott F. Kaplan -- sfkaplan@cs.utexas.edu

from September 1997.

Author: Andreas Moser <amoser@google.com>

Functions

WK_pack_2bits(source_buf)

source code

WK_pack_4bits(source_buf)

source code

WK_pack_3_tenbits(source_buf)

source code

WK_unpack_2bits(input_buf)

source code

WK_unpack_4bits(input_buf)

source code

WK_unpack_3_tenbits(input_buf)

source code

WKdm_compress(src_buf)

source code

WKdm_decompress_apple(src_buf)

source code

WKdm_decompress(src_buf)

source code

Variables
	DICTIONARY_SIZE = `16`
	TAGS_AREA_OFFSET = `4`
	TAGS_AREA_SIZE = `64`
	NUM_LOW_BITS = `10`
	LOW_BITS_MASK = `1023`
	ZERO_TAG = `0`
	PARTIAL_TAG = `1`
	MISS_TAG = `2`
	EXACT_TAG = `3`
	HASH_LOOKUP_TABLE_CONTENTS = `[0, 13, 2, 14, 4, 3, 7, 5, 1, 9, ...`
	and3_sh0 = `[0, 1, 2, 3, 0, 1, 2, 3, 0, 1, 2, 3, 0, 1, 2, 3, 0,...`
	and3_sh2 = `[0, 0, 0, 0, 1, 1, 1, 1, 2, 2, 2, 2, 3, 3, 3, 3, 0,...`
	and3_sh4 = `[0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1,...`
	and3_sh6 = `[0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,...`
	and_f = `[0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15,...`
	sh4_and_f = `[0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1...`
	__package__ = `'rekall.plugins.darwin'`
	i = `255`

Variables Details

Value:

[0,
 13,
 2,
 14,
 4,
 3,
 7,
 5,
...

Value:

[0,
 1,
 2,
 3,
 0,
 1,
 2,
 3,
...

Value:

[0,
 0,
 0,
 0,
 1,
 1,
 1,
 1,
...

Value:

[0,
 0,
 0,
 0,
 0,
 0,
 0,
 0,
...

Value:

[0,
 0,
 0,
 0,
 0,
 0,
 0,
 0,
...

Value:

[0,
 1,
 2,
 3,
 4,
 5,
 6,
 7,
...

Value:

[0,
 0,
 0,
 0,
 0,
 0,
 0,
 0,
...