Executable compressors work by compressing selected portions of executables. At runtime, compressed executables are decompressed and reconstructed directly into their virtual image (memory) so that no data is ever written to the disk. The executable can therefore be run exactly as it was before without the user even knowing it was compressed.
PECompact2 is a next generation win32 executable/module compressor. Commonly termed an 'executable packer', such utilities compress executables and modules (i.e. *.EXE, *.DLL, *.OCX, *.SCR). At runtime the compressed modules are rapidly decompressed in memory.
Why would one want to compress an executable/module?
There are many reasons. One of the most common is that compression offers an inherent degree of tamper resistance and obfuscation. Another is that since the usual compression ratio is greater than 70% (that is, the compressed file is 30% of the original), larger executables and modules may load much quicker from the network or disk hosting them. Since storage medium is often the largest bottleneck in overall system performance, the time spent decompressing can be much less than the time saved by not having to load as much data from the storage medium.
Add tamper resistance.
Obfuscate and help deter reverse engineering.
Compression is typically 70% or greater on large files, far better than popular file compression software.
Load time can be improved by having a smaller image to load from the storage medium (disk, network, etc..)
But there are some other tricks that PECompact2 can do, aren't there?
Yes, PECompact2 has been built to be very extensible. Using advanced plug-ins by, PECompact2 is able to be enhanced and extended by third parties.
PECompact2 includes plug-ins to perform CRC checks, password based encryption, message box prompt for permission to execute, and much-much more. And since these plugins can all be combined in any order and quantity, each compressed file can be very unique.
For absolute uniqueness, the loader itself (decompression stub) is also a plug-in type and so can be changed or extended.
Please read about the various license types on the PECompact Ordering page.
PECompact is a commercial grade executable compressor.
Compresses tighter than the latest versions of all commercially viable executable compressors! This includes UPX, ASPack, Petite, wwpack32, PKLite32, and others.
Supports software and hardware DEP (Data Execution Protection).
Supports VC++ 7.1 (Visual Studio .NET 2003) SEH protections; currently only win32 packer that properly addresses the issue.
Compressed programs work under WINE (Windows emulator for linux).
Modules compressed with each build are tested in complex load scenarios under all win32 flavors. Our test cases assure proper functioning. Up to date and actively being improved!
Anti-Virus Interoperabilility:
Viruses can not hide within compressed modules because major anti-virus softwares support scanning inside the PECompact's modules!
Software Protection:
Compressed modules are inherently more difficult to reverse engineer.
PECompact support custom loaders that can be written to provide your own unique protection mechanisms, greatly deterring the creation of automatic unpackers.
Tampering or modification of modules can be detected at runtime.
Plug-ins are available that extend and enhance the protection of your software. These include the FastImport, API Redirect, and IsPacked plug-ins.
Extensibility:
A number of plug-in types allow for extreme customization and third-party extensions. For example, plug-ins are included to perform CRC checks, password based encryption, message box runtime confirmations, and compression by a number of different algorithms. And since these plug-ins can be used IN ANY ORDER OR QUANTITY on each and every file, how you use PECompact2 is up to you!
Loader and API hook plug-ins can give you custom software protection. No shrink-wrapped software protection mechanism can compete with a custom solution. Custom protection is the best protection. For development of custom loader plug-ins, email us or visit the forum.
Superiority:
PECompact is superior to its competitors in many ways, many already enumerated above. Most striking is its performance, configurability, compatibility, and stability. When using PECompact you can rest assurred that your application is compressed using an executable compressor that is used on software running on millions of computers worldwide. Our clients include Google, Microsoft, and many others.
Would you like to purchase our loader SDK so that you can build your own loaders (decompression stub)?
Choosing the right executable packer can make a huge difference!
In addition to supporting more executable/modules than any other win32 executable packers, we do it tigheter than all the rest! Here is the results of compression of Adobe Acrobat Reader 6.0:
Data must be retrieved from the storage medium in its bloated, uncompressed form.
After compression:
Header
Compressed code and data
Compressed resources
Uncompressible resources and data
Loader
Module runs exactly as before, but there is much less data to be retrieved from the storage medium, the module is obfuscated, and reverse engineering is made more difficult.
