Exetools - How to unpack dos lzexe packed exe?

Exetools (https://forum.exetools.com/index.php)

- General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)

- - How to unpack dos lzexe packed exe? (https://forum.exetools.com/showthread.php?t=20821)

jonwil

01-16-2024 18:53

How to unpack dos lzexe packed exe?

I have an exe file (16 bit dos) that seems to be packed with lzexe.
When I run unlzexe on it I get this:

Quote:

UNLZEXE Ver. 0.81
Detected size of File is 27837 bytes
file 'mbucks2.exe' is compressed by LZEXE Ver. 0.90

but all I get as output is a zero byte file named the same as my exe but called .exeNEW instead of .exe

How can I unpack this exe (which btw does work just fine in DosBOXs)? (I want to throw it into IDA to reverse engineer some things)

CodeCracker

01-16-2024 20:22

Try this:
https://www.classicdosgames.com/utilities/dos.html
UnLZEXE
https://www.classicdosgames.com/files/utilities/unlzexe.zip

jonwil

01-16-2024 21:31

Ok the exe unpacks and the unpacked exe runs but when I throw it into IDA, it doesn't disassemble into anything that makes sense.

sendersu

01-16-2024 22:02

try Ghidra
it knows 16 bit old binaries for sure

BlackWhite

01-18-2024 02:13

Quote:

Originally Posted by jonwil (Post 129955)

I have an exe file (16 bit dos) that seems to be packed with lzexe.
When I run unlzexe on it I get this:

but all I get as output is a zero byte file named the same as my exe but called .exeNEW instead of .exe

How can I unpack this exe (which btw does work just fine in DosBOXs)? (I want to throw it into IDA to reverse engineer some things)

There is an old tool called CUP386 which can be used to decompress
your exe automatically.

All times are GMT +8. The time now is 18:18.