Eclipse Community

Decompressor for Petite packed executables?

Post Reply   Page 1 of 1  [ 5 posts ]
First unread post
Author Message
UCyborg
Post subject: Decompressor for Petite packed executables?
+ Posted: 31 May 2025, 11:41
Offline
 
Posts: 58
Joined: 19 Nov 2024, 19:14
OS: Windows 10 x64
 
Asking just in case I missed something, I looked for one, but didn't find any.

The compressor is available at https://www.un4seen.com/petite/, but nothing that would reverse it and output normal non-compressed EXE/DLL with import table intact.

This subject seems fitting for this subforum.


Top
Profile Quote
The-10-Pen
Post subject: Decompressor for Petite packed executables?
+ Posted: 03 Jun 2025, 20:39
Offline
 
Posts: 83
Joined: 16 Feb 2025, 08:43
OS: Win10 2016 LTSB
 
Is this what you are looking for?
www.youtube.com/watch?v=y7gnmQGOnTU


Top
Profile Quote
UCyborg
Post subject: Decompressor for Petite packed executables?
+ Posted: 04 Jun 2025, 20:10
Offline
 
Posts: 58
Joined: 19 Nov 2024, 19:14
OS: Windows 10 x64
 
I followed the similar procedure, but the final result lacks relocation table, that would need some intelligence to reconstruct. I think I saw a program in source code form only on GitHub that may be able to reconstruct it if you give it dump of 2 identical DLLs loaded at different addresses and specifically formatted text file with information about imported functions, but didn't dig into it any further.


Top
Profile Quote
The-10-Pen
Post subject: Decompressor for Petite packed executables?
+ Posted: 04 Jun 2025, 20:34
Offline
 
Posts: 83
Joined: 16 Feb 2025, 08:43
OS: Win10 2016 LTSB
 
Why not just use regular ol' UPX?
What does Petite offer over UPX?


Top
Profile Quote
UCyborg
Post subject: Decompressor for Petite packed executables?
+ Posted: 05 Jun 2025, 19:12
Offline
 
Posts: 58
Joined: 19 Nov 2024, 19:14
OS: Windows 10 x64
 
I find compression of executables pointless. Why use it unless you're a scumbag trying to hide something? In case of DLLs, it also prevents effective sharing of code between processes, each gets its own copy instead of it being shared.

BASS library (and its add-ons) seems to come only in binary compressed form. I hoped I could easily modify it to not call timeBeginPeriod(1) needlessly. I noticed with AIMP and VirtualMIDISynth, minimum resolution of periodic timers is forced to 1 ms even when nothing plays.


Top
Profile Quote
Display: Sort by: Direction:
Post Reply   Page 1 of 1  [ 5 posts ]
Return to “Research Network”
Jump to:

Who is online

Users browsing this forum: No registered users and 1 guest