Decompressor for Petite packed executables?

UCyborg · Unread post by **UCyborg** » 31 May 2025, 11:41

Asking just in case I missed something, I looked for one, but didn't find any.

The compressor is available at https://www.un4seen.com/petite/, but nothing that would reverse it and output normal non-compressed EXE/DLL with import table intact.

This subject seems fitting for this subforum.

The-10-Pen · Unread post by **The-10-Pen** » 03 Jun 2025, 20:39

Is this what you are looking for?
www.youtube.com/watch?v=y7gnmQGOnTU

UCyborg · Unread post by **UCyborg** » 04 Jun 2025, 20:10

I followed the similar procedure, but the final result lacks relocation table, that would need some intelligence to reconstruct. I think I saw a program in source code form only on GitHub that may be able to reconstruct it if you give it dump of 2 identical DLLs loaded at different addresses and specifically formatted text file with information about imported functions, but didn't dig into it any further.

The-10-Pen · Unread post by **The-10-Pen** » 04 Jun 2025, 20:34

Why not just use regular ol' UPX?
What does Petite offer over UPX?

UCyborg · Unread post by **UCyborg** » 05 Jun 2025, 19:12

I find compression of executables pointless. Why use it unless you're a scumbag trying to hide something? In case of DLLs, it also prevents effective sharing of code between processes, each gets its own copy instead of it being shared.

BASS library (and its add-ons) seems to come only in binary compressed form. I hoped I could easily modify it to not call timeBeginPeriod(1) needlessly. I noticed with AIMP and VirtualMIDISynth, minimum resolution of periodic timers is forced to 1 ms even when nothing plays.

Eclipse Community