Results 1 to 30 of 30

Thread: UPX competitor

  1. #1
    Member Surfer's Avatar
    Join Date
    Mar 2009
    Location
    oren
    Posts
    203
    Thanks
    18
    Thanked 7 Times in 1 Post

    UPX competitor

    Need advice, google doesn't help me in this question.

    My opinion
    1) Freeware: Upack
    2) Shareware: PECompact
    Aspack is totally crap.

    Criteria: PE, compression ratio close to upx, fast decompression to RAM.

  2. #2
    Tester
    Black_Fox's Avatar
    Join Date
    May 2008
    Location
    [CZE] Czechia
    Posts
    471
    Thanks
    26
    Thanked 9 Times in 8 Posts
    Better check first if anti-virus software still lists anything packed with Upack as trojan.
    I am... Black_Fox... my discontinued benchmark
    "No one involved in computers would ever say that a certain amount of memory is enough for all time? I keep bumping into that silly quotation attributed to me that says 640K of memory is enough. There's never a citation; the quotation just floats like a rumor, repeated again and again." -- Bill Gates

  3. #3
    Member
    Join Date
    May 2008
    Location
    HK
    Posts
    160
    Thanks
    4
    Thanked 25 Times in 15 Posts
    Quote Originally Posted by Black_Fox View Post
    Better check first if anti-virus software still lists anything packed with Upack as trojan.
    It does for Avira.

  4. #4
    Member Surfer's Avatar
    Join Date
    Mar 2009
    Location
    oren
    Posts
    203
    Thanks
    18
    Thanked 7 Times in 1 Post
    Quote Originally Posted by Black_Fox View Post
    Better check first if anti-virus software still lists anything packed with Upack as trojan.
    Yep )
    PECompact.
    WinUpack.
    Aspack.
    Last edited by Surfer; 25th June 2010 at 11:57.

  5. #5
    Member Surfer's Avatar
    Join Date
    Mar 2009
    Location
    oren
    Posts
    203
    Thanks
    18
    Thanked 7 Times in 1 Post
    Strange results
    No code has to be inserted here.

    Can't test "Hard" modes now, because my netbook is so sloooow.
    Original file http://rghost.net/1983020

    Petite 2.3 with -9 still in progress, more than 2 hours %)
    * Reading : C:\rToW\bin\rtorrent.exe
    WARNING: there are 1299875 extra bytes attached to this file. They will be strip
    ped from the file created by Petite, and it MAY NOT WORK.
    Compressing :
    1598424

  6. #6
    Administrator Shelwien's Avatar
    Join Date
    May 2008
    Location
    Kharkov, Ukraine
    Posts
    3,423
    Thanks
    223
    Thanked 1,052 Times in 565 Posts
    May be better to strip that overlay from the test exe.

  7. #7
    Member chornobyl's Avatar
    Join Date
    May 2008
    Location
    ua/kiev
    Posts
    153
    Thanks
    0
    Thanked 0 Times in 0 Posts
    4692387 rtorrentUPXbestLZMA.exe
    upx --best --lzma 1.exe
    http://rghost.net/1985475
    Last edited by chornobyl; 25th June 2010 at 21:43.

  8. #8
    Member Surfer's Avatar
    Join Date
    Mar 2009
    Location
    oren
    Posts
    203
    Thanks
    18
    Thanked 7 Times in 1 Post
    Shelwien
    How to do this ?
    chornobyl
    With which parameters ?

  9. #9
    Programmer Bulat Ziganshin's Avatar
    Join Date
    Mar 2007
    Location
    Uzbekistan
    Posts
    4,511
    Thanks
    746
    Thanked 668 Times in 361 Posts
    --best doesn't use lzma. for the best compression one should use --lzma --best

  10. #10
    Administrator Shelwien's Avatar
    Join Date
    May 2008
    Location
    Kharkov, Ukraine
    Posts
    3,423
    Thanks
    223
    Thanked 1,052 Times in 565 Posts
    > How to do this ?

    For example, one possibility is compressing with
    upx -1 --overlay=strip
    then decompressing, and using the result for further testing

  11. #11
    Member
    Join Date
    May 2008
    Location
    HK
    Posts
    160
    Thanks
    4
    Thanked 25 Times in 15 Posts
    Strip it first. GCC bundles debug symbols into the executable.

    Code:
    21/02/2010  04:36        43,829,155 rtorrent.exe
    >strip rtorrent.exe
    26/06/2010  11:55         2,609,152 rtorrent.exe
    
    >\progra~1\univer~1\bin\upx --best --lzma rtorrent.exe
                           Ultimate Packer for eXecutables
                              Copyright (C) 1996 - 2010
    UPX 3.05w       Markus Oberhumer, Laszlo Molnar & John Reiser   Apr 27th 2010
    
            File size         Ratio      Format      Name
       --------------------   ------   -----------   -----------
       2609152 ->    647168   24.80%    win32/pe     rtorrent.exe
    
    Packed 1 file.

  12. #12
    Member Surfer's Avatar
    Join Date
    Mar 2009
    Location
    oren
    Posts
    203
    Thanks
    18
    Thanked 7 Times in 1 Post
    Quote Originally Posted by roytam1 View Post
    Strip it first.
    Thanks, TDM-GCC is great http://rghost.net/1989647

    No code has to be inserted here.

    Can somebody test UPX with additional --ultra-brute and petite23 ?
    Last edited by Surfer; 26th June 2010 at 20:58.

  13. #13
    Member Vacon's Avatar
    Join Date
    May 2008
    Location
    Germany
    Posts
    523
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Hello everyone,

    Quote Originally Posted by Surfer View Post
    Thanks, TDM-GCC is great http://rghost.net/1989647
    [...]
    Can somebody test UPX with additional --ultra-brute and petite23 ?
    Yes, I can -> Athlon XP 1700+, WinXP, SP3, 1,25 GB Ram

    UPX 3.05w Markus Oberhumer, Laszlo Molnar & John Reiser Apr 27th 2010

    File size Ratio Format Name
    -------------------- ------ ----------- -----------
    2609152 -> 638464 24.47% win32/pe rtorrent-upx.exe

    Packed 1 file.

    Petite 2.3 default (with level set to -9 *s*l*o*w* as hell... I interrupted it after 1,5 hours ):

    petite -ortorrent-petite.exe rtorrent.exe
    Petite 2.3 - Copyright (c) 1998-2005 Ian Luck. All rights reserved.
    ---------------------------------------> see PETITE.TXT for details
    * Reading : rtorrent.exe
    Compressing :
    .text : 2431932 -> 803700 (33.0%)
    .data : 169385 -> 41562 (24.5%)
    .idata : 7113 -> 1996 (28.1%)
    Writing : rtorrent-petite.exe 2609152 -> 854938 (32.8%)

    Best regards!
    Last edited by Vacon; 26th June 2010 at 17:15.

  14. #14
    Member Surfer's Avatar
    Join Date
    Mar 2009
    Location
    oren
    Posts
    203
    Thanks
    18
    Thanked 7 Times in 1 Post
    10x Vacon
    Table updated.
    Petite seems like... hmm, can't compare it with something

  15. #15
    Programmer Bulat Ziganshin's Avatar
    Join Date
    Mar 2007
    Location
    Uzbekistan
    Posts
    4,511
    Thanks
    746
    Thanked 668 Times in 361 Posts
    kkrunchy?

  16. #16
    Member Surfer's Avatar
    Join Date
    Mar 2009
    Location
    oren
    Posts
    203
    Thanks
    18
    Thanked 7 Times in 1 Post
    No code has to be inserted here.
    But any kkrunched file can't be runned

  17. #17
    Member Skymmer's Avatar
    Join Date
    Mar 2009
    Location
    Russia
    Posts
    681
    Thanks
    38
    Thanked 168 Times in 84 Posts
    Try test versions of kkrunchy at http://www.farbrausch.de/~fg/kkrunchy/test/
    But they use modified PAQ algo so they're completely symmetric. Also you can run UPX with
    Code:
    for %%m in (32 64 96 128 160 192 224 256 273) do (for %%n in (0 1 2 3 4 5 6 7 8) do (start "%%n" /B /WAIT "upx.exe" --force --lzma --best --crp-ms=999999 --crp-lzma-ds=67108864 --crp-lzma-fb=%%m --crp-lzma-lc=%%n --compress-exports=1 --strip-relocs=1 -o ".\ENUM\%%m_%%n.exe" Test.exe))
    You can even try to enumerate other LZMA parameters with
    crp-lzma-lp
    crp-lzma-pb

  18. #18
    Member Surfer's Avatar
    Join Date
    Mar 2009
    Location
    oren
    Posts
    203
    Thanks
    18
    Thanked 7 Times in 1 Post
    Quote Originally Posted by Skymmer View Post
    But they use modified PAQ algo so they're completely symmetric.
    10x for explanation, this isn't interesting for me. Only fast decompression.
    Quote Originally Posted by Skymmer View Post
    for %%m in (32 64 96 128 160 192 224 256 273) do (for %%n in (0 1 2 3 4 5 6 7 do (start "%%n" /B /WAIT "upx.exe" --force --lzma --best --crp-ms=999999 --crp-lzma-ds=67108864 --crp-lzma-fb=%%m --crp-lzma-lc=%%n --compress-exports=1 --strip-relocs=1 -o ".\ENUM\%%m_%%n.exe" Test.exe))
    This cmd have error

  19. #19
    Programmer Bulat Ziganshin's Avatar
    Join Date
    Mar 2007
    Location
    Uzbekistan
    Posts
    4,511
    Thanks
    746
    Thanked 668 Times in 361 Posts
    Quote Originally Posted by Surfer View Post
    But any kkrunched file can't be runned
    just wait a few hours...

  20. #20
    Member Skymmer's Avatar
    Join Date
    Mar 2009
    Location
    Russia
    Posts
    681
    Thanks
    38
    Thanked 168 Times in 84 Posts
    Quote Originally Posted by Surfer View Post
    This cmd have error
    I suppose you need to create ENUM subdirectory in upx.exe dir first.

  21. #21
    Member Surfer's Avatar
    Join Date
    Mar 2009
    Location
    oren
    Posts
    203
    Thanks
    18
    Thanked 7 Times in 1 Post
    Quote Originally Posted by Skymmer View Post
    I suppose you need to create ENUM subdirectory in upx.exe dir first.
    Smallest file is 96_8.exe - 641536 bytes.
    Anyway it is bigger, than --best --lzma --ultra-brute - 638464 bytes.

  22. #22
    Member Skymmer's Avatar
    Join Date
    Mar 2009
    Location
    Russia
    Posts
    681
    Thanks
    38
    Thanked 168 Times in 84 Posts
    Well, --ultra-brute also applies different filters. You can try --all-filters or manully use --filter but I don't know exact syntax and accepted values.

  23. #23
    Member Skymmer's Avatar
    Join Date
    Mar 2009
    Location
    Russia
    Posts
    681
    Thanks
    38
    Thanked 168 Times in 84 Posts
    636 416 with UPX.

  24. #24
    Member Surfer's Avatar
    Join Date
    Mar 2009
    Location
    oren
    Posts
    203
    Thanks
    18
    Thanked 7 Times in 1 Post
    Quote Originally Posted by Skymmer View Post
    636 416 with UPX.
    --all-filters --best --lzma ?

  25. #25
    Member Surfer's Avatar
    Join Date
    Mar 2009
    Location
    oren
    Posts
    203
    Thanks
    18
    Thanked 7 Times in 1 Post
    MPRESS is a free, high-performance executable packer for PE32/PE32+/.NET/MAC-DARWIN executable formats!

    MPRESS makes programs and libraries smaller, and decrease start time when the application loaded from a slow removable media or from the network. It uses in-place decompression technique, which allows to decompress the executable without memory overhead or other drawbacks; it also protects programs against reverse engineering by non-professional hackers. Programs compressed with MPRESS run exactly as before, with no runtime performance penalties.
    MPRESS is absolutely free of charge software.
    MPRESS uses own LZMAT - extremely fast data compression library.
    Version 2.00 of the MATCODE Compressor has been released on 21st March 2009, now MPRESS has an optional LZMA compression.
    in March 2011 Mr. DonDD has created and published his MPRESS GUI, see link below.

    Features:
    Advanced compression of .NET executable files (anyCPU,x86,AMD64,IA64 EXE)
    Support for MS Framework 1.1/2.0/3.0/4.0
    Does not require .NET Framework to be installed
    Advanced compression of PE32/PE32+ (AMD64) executable files (EXE, DLL, OCX, etc.)
    Optional LZMA compression
    In-place decompression
    Static TLS support
    Support for mac-darwin-i386, mac-darwin-x86_64 and mac-darwin-ub applications
    Very fast decompression: ~210 MB/sec on an AMD 2500+
    Strip sensitive information (relocation, debug information, exceptions, etc.)
    Compression of program code, data, and resources
    Completely transparent, self-contained operation with UNICODE support
    Command line interface allows to use MPRESS from a batch or from a make file
    Full Windows 9x/NT/2000/XP/2003/Vista/2008 compatibility
    http://www.matcode.com/mpress.htm

  26. #26
    Member Skymmer's Avatar
    Join Date
    Mar 2009
    Location
    Russia
    Posts
    681
    Thanks
    38
    Thanked 168 Times in 84 Posts
    The design is obviously stollen from UPX. But its not a problem. The problem is that author of mpress is clearly the school-boy with high ambitions. I can judge it by his posts at cracklab.ru forum. You can see it for yourself.
    http://cracklab.ru/f/index.php?actio...=3&topic=11443
    Last edited by Skymmer; 14th May 2011 at 06:45.

  27. #27
    Member Surfer's Avatar
    Join Date
    Mar 2009
    Location
    oren
    Posts
    203
    Thanks
    18
    Thanked 7 Times in 1 Post
    MPRESS's compression ratio in most situations better, than UPX --brute mode. Also it takes few comression time.
    Quote Originally Posted by Skymmer View Post
    The problem is that author of mpress is clearly the school-boy with high ambitions. I can judge it by his posts at cracklab.ru forum. You can see it for yourself.
    http://cracklab.ru/f/index.php?actio...=3&topic=11443
    http://pastebin.com/W1VGHEgc
    Last edited by Surfer; 14th May 2011 at 11:46.

  28. #28
    Member Surfer's Avatar
    Join Date
    Mar 2009
    Location
    oren
    Posts
    203
    Thanks
    18
    Thanked 7 Times in 1 Post
    Del

  29. #29
    The Founder encode's Avatar
    Join Date
    May 2006
    Location
    Moscow, Russia
    Posts
    3,984
    Thanks
    377
    Thanked 352 Times in 140 Posts
    Quote Originally Posted by mADmAT
    The packer make use of its own compression algorithm, similar to LZ78, but faster and with no input data size limits.
    This kid is far from compression world. If the compression is the same as in his LZMAT, then it's poorly designed byte-aligned LZ77.

  30. #30
    Member
    Join Date
    Apr 2009
    Location
    here
    Posts
    202
    Thanks
    170
    Thanked 109 Times in 65 Posts
    MPRESS 2.19 got released.

    BTW: author writes himself: LZMAT. It's very similar to well known LZ77, but has some advantages.

    anyway, i like it. can compress a lot of executables... x86, x64, .NET, Mac... Ok, no DOS.

    v2.19
    - bugfix: support x64 on Windows 8


    v2.18
    - support for .NET Framework v4.0
    - support for .NET x64
    - bugfix: possible deadlock on the overloaded computer

    v2.17
    - new option -r to not compress resources
    - bugfix: in processing of relocations

    v2.15
    - bugfix: compressed TYPELIB and REGISTRY resources of ActiveX components
    - bugfix: crash on empty import directory entry

    v2.12
    - bugfix: crash when Open GL with some ATI adapters
    - added compression filter for 32-bit and 64-bit DLLs

Similar Threads

  1. CCM/LPAQ competitor
    By inikep in forum Data Compression
    Replies: 13
    Last Post: 12th July 2008, 16:17
  2. UPX 3.00
    By Black_Fox1 in forum Forum Archive
    Replies: 7
    Last Post: 11th January 2008, 20:09
  3. UPX 3.01 released
    By Black_Fox1 in forum Forum Archive
    Replies: 1
    Last Post: 1st August 2007, 14:54
  4. UPX 2.93
    By Black_Fox1 in forum Forum Archive
    Replies: 1
    Last Post: 10th March 2007, 16:29
  5. UPX 2.92
    By Black_Fox1 in forum Forum Archive
    Replies: 2
    Last Post: 26th January 2007, 00:53

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •