|
lz4pack
[nfo]
|
||||||||
|---|---|---|---|---|---|---|---|---|
|
|
|||||||
|
popularity : 48% |
|||||||
alltime top: #41103 |
|
|||||||
added on the 2026-03-02 18:47:08 by dominikr  |
||||||||
popularity helper
comments
Neat. I was pondering at some point a upkr x86/x64 depacker then realized dealing with Rust is just.......................................
Mandatory thumb up.
Very nice, and I see most of that decompression stub is spent doing syscalls etc; the actual decompression code is like ~64 bytes. Maybe, you could have it decompress directly into the stack of the current process and just jump there afterwards. You would just need a mprotect syscall to make give the memory execute permissions.
Quote:
Maybe, you could have it decompress directly into the stack of the current process and just jump there afterwards. You would just need a mprotect syscall to make give the memory execute permissions.
Yes, this version is a safe one-size-fits-all packer. The newer version I'm working on is at 106b with the
Code:
option. No need for mprotect actually, as 32bit has the stack executable, lacking GNU_STACK phdrs. I also made some other decompressors: 9-14b for RLE, 18b for LZ77, 21-31b for LZSS, 82b for zx0 (ported from DOS). 31b LZSS has similar ratio to LZ4, that would result in a 78b stub.jmp esp🤏🏻
tool thumbs
demotools for the masses!
submit changes
if this prod is a fake, some info is false or the download link is broken,
do not post about it in the comments, it will get lost.
instead, click here !
Whole compressor is 511 bytes, decompression stub is 156 bytes.
See nfo file for more