LZEXE

From Just Solve the File Format Problem
(Difference between revisions)
Jump to: navigation, search
(Identification)
 
(5 intermediate revisions by 2 users not shown)
Line 15: Line 15:
  
 
Apparently, the 300+ bytes starting at the ''start-of-execution'' point are always the same for a given version of LZEXE -- and there are only three known versions. A possible signature is the byte sequence {{magic|06 0e 1f 8b 0e 0c 00 8b f1 4e 89 f7 8c db 03 1e 0a 00 8e c3}}, starting either at the ''start-of-execution'' point, or (for v0.91e) one byte beyond it.
 
Apparently, the 300+ bytes starting at the ''start-of-execution'' point are always the same for a given version of LZEXE -- and there are only three known versions. A possible signature is the byte sequence {{magic|06 0e 1f 8b 0e 0c 00 8b f1 4e 89 f7 8c db 03 1e 0a 00 8e c3}}, starting either at the ''start-of-execution'' point, or (for v0.91e) one byte beyond it.
 +
 +
Also, the author's signature appears in this area. Version 0.90 has "<code>*Fabrice BELLARD*</code>" at ''start-of-execution''+269. Versions 0.91 and 0.91e have "<code>*FAB*</code>" at ''start-of-execution''+233.
 +
 +
== See also ==
 +
* [[CEBE]]
 +
* [[LHARK#Self-extracting archives]] - Patched variant
 +
* [[PCX2EXE (Arminio Grgic)]] - Patched variant
  
 
== Software ==
 
== Software ==
Line 21: Line 28:
 
** {{CdTextfiles|rbbsv3n1/magn/lzexe_e.zip|lzexe_e.zip}} - v0.90 with documentation translated to English by Luigi M. Bianchi
 
** {{CdTextfiles|rbbsv3n1/magn/lzexe_e.zip|lzexe_e.zip}} - v0.90 with documentation translated to English by Luigi M. Bianchi
 
* [https://bellard.org/lzexe/lzexe91.zip LZEXE v0.91] (1990-01-02) - French
 
* [https://bellard.org/lzexe/lzexe91.zip LZEXE v0.91] (1990-01-02) - French
 +
** Source code: [https://bellard.org/lzexe/] → [https://bellard.org/lzexe/lzexe91-src.zip lzexe91-src.zip]
 
** {{CdTextfiles|pcmedic/utils/compress/lzexe91.zip|lzexe91.zip}} - v0.91 with English-language supporting material by Luigi M. Bianchi and Earle Robinson
 
** {{CdTextfiles|pcmedic/utils/compress/lzexe91.zip|lzexe91.zip}} - v0.91 with English-language supporting material by Luigi M. Bianchi and Earle Robinson
 
*  [https://bellard.org/lzexe/lzexe91e.zip LZEXE v0.91e] (1990-10-15) (also {{CdTextfiles|megademo2/UTILITY/FILE/LZEXE91E.ZIP|here}}) - English
 
*  [https://bellard.org/lzexe/lzexe91e.zip LZEXE v0.91e] (1990-10-15) (also {{CdTextfiles|megademo2/UTILITY/FILE/LZEXE91E.ZIP|here}}) - English
Line 47: Line 55:
 
* [{{SACFTPURL|pack|lzalt03.zip}} LZALT v0.03] by Codon Software
 
* [{{SACFTPURL|pack|lzalt03.zip}} LZALT v0.03] by Codon Software
 
* [{{SACFTPURL|pack|lzealt.zip}} LZEALT v1.04] by De Trans Software
 
* [{{SACFTPURL|pack|lzealt.zip}} LZEALT v1.04] by De Trans Software
 +
 +
== Sample files ==
 +
* {{DexvertSamples|archive/lzexePacked}}
  
 
== Links ==
 
== Links ==
* [https://bellard.org/lzexe.html LZEXE home page]
+
* [https://bellard.org/lzexe/ LZEXE home page]
 
* [https://www.lodsb.com/reversing-lz91-from-commander-keen Reversing LZ91 from Commander Keen]
 
* [https://www.lodsb.com/reversing-lz91-from-commander-keen Reversing LZ91 from Commander Keen]
 +
* [https://cosmodoc.org/topics/lzexe/ Cosmodoc: LZEXE]
 +
* [https://clownacy.wordpress.com/2025/05/24/the-original-lzexe-a-k-a-kosinski-compressor-source-code-has-been-released/ The Original LZEXE (A.K.A. Kosinski) Compressor Source Code Has Been Released]

Latest revision as of 16:46, 6 August 2025

File Format
Name LZEXE
Ontology
Released 1989

LZEXE is an executable compression utility, developed by Fabrice Bellard. It compresses DOS .EXE files.

Contents

[edit] Identification

LZEXE-compressed files normally have ASCII "LZ09" (v0.90) or "LZ91" (v0.91 or 0.91e) at offset 28.

However, it was not uncommon for LZEXE users to modify this signature, for various reasons. Examples include ARJ self-extracting archives, which have signature "RJSX", and some RAR self-extracting archives, with signature "RSFX".

More-robust identification is possible, in particular by looking at bytes near the start-of-execution point (refer to MS-DOS EXE#Special file positions). This is at a different location in every file.

Apparently, the 300+ bytes starting at the start-of-execution point are always the same for a given version of LZEXE -- and there are only three known versions. A possible signature is the byte sequence 06 0e 1f 8b 0e 0c 00 8b f1 4e 89 f7 8c db 03 1e 0a 00 8e c3, starting either at the start-of-execution point, or (for v0.91e) one byte beyond it.

Also, the author's signature appears in this area. Version 0.90 has "*Fabrice BELLARD*" at start-of-execution+269. Versions 0.91 and 0.91e have "*FAB*" at start-of-execution+233.

[edit] See also

[edit] Software

Compression:

Decompression, general:

Decompression, for DOS:

Protectors (utilities that modify a compressed file to make it more difficult to identify and/or decompress):

[edit] Sample files

[edit] Links

Personal tools
Namespaces

Variants
Actions
Navigation
Toolbox