Page 1 of 1
Decompressor for Petite packed executables?
Posted: 31 May 2025, 11:41
by UCyborg
Asking just in case I missed something, I looked for one, but didn't find any.
The compressor is available at
https://www.un4seen.com/petite/, but nothing that would reverse it and output normal non-compressed EXE/DLL with import table intact.
This subject seems fitting for this subforum.
Decompressor for Petite packed executables?
Posted: 03 Jun 2025, 20:39
by The-10-Pen
Decompressor for Petite packed executables?
Posted: 04 Jun 2025, 20:10
by UCyborg
I followed the similar procedure, but the final result lacks relocation table, that would need some intelligence to reconstruct. I think I saw a program in source code form only on GitHub that may be able to reconstruct it if you give it dump of 2 identical DLLs loaded at different addresses and specifically formatted text file with information about imported functions, but didn't dig into it any further.
Decompressor for Petite packed executables?
Posted: 04 Jun 2025, 20:34
by The-10-Pen
Why not just use regular ol' UPX?
What does Petite offer over UPX?
Decompressor for Petite packed executables?
Posted: 05 Jun 2025, 19:12
by UCyborg
I find compression of executables pointless. Why use it unless you're a scumbag trying to hide something? In case of DLLs, it also prevents effective sharing of code between processes, each gets its own copy instead of it being shared.
BASS library (and its add-ons) seems to come only in binary compressed form. I hoped I could easily modify it to not call timeBeginPeriod(1) needlessly. I noticed with AIMP and VirtualMIDISynth, minimum resolution of periodic timers is forced to 1 ms even when nothing plays.