Archived

This topic is now archived and is closed to further replies.

Xorcist

Question about EXE Packers (ASPack / UPX / etc.)

Recommended Posts

Xorcist    122
I was told such packers while decreasing the size of DLLs and Executables, actually increases the memory utilization of such programs by a factor of close to 2. Is this true?

Share this post


Link to post
Share on other sites
Sneftel    1788
Tools like UPX can increase the memory footprint because they need space to unpack the actual executable into. This amount of space is based on the uncompressed size of your EXE, not the memory utilization of your program.

Why don''t you try it and find out?


How appropriate. You fight like a cow.

Share this post


Link to post
Share on other sites
Guest Anonymous Poster   
Guest Anonymous Poster
It also increases memory usage because Windows does not use the swap file to swap out code. It just discards the pages that are not used when necessary, and when they are needed again, they are loaded from the original exe file again.

When you use a compressor, this is obviously not possible. Therefore, the program needs to be resident constantly.

Compressing DLL files would be completely idiotic. It will require each program that uses the file in question to load its own instance of the DLL into memory, instead of sharing the memory. In effect, N times more memory would have to be used, where N would be the number of programs using the DLL.

Share this post


Link to post
Share on other sites
Guest Anonymous Poster   
Guest Anonymous Poster
i have a program(write in delphi) that protect by unknown protector
the header of file begins with "MZp"(common pe32 have MZ section)

and i use most common deprotector an decompreesor that i know
(deshrink,upx,unpack,,....)
pleas help what can i do?

Share this post


Link to post
Share on other sites
Sneftel    1788
another necro. closed.


"Sneftel is correct, if rather vulgar." --Flarelocke

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.