Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Softlock app (https://forum.exetools.com/showthread.php?t=9883)

taos 07-21-2006 23:10

Softlock app
 
1 Attachment(s)
Hi!
This is the calc.exe protected with Softlock.
When I try to open with olly it shows me the "unknown type executable file" error.
I have changed the numberofrvaandsizes to 16 and then it loads but with a lot of privileged opcodes (IN assembler). I think app read this field to decrypt because it tries to execute data code when I make the change.

Curiosly, it uses another trick that I saw some years ago:
PointerToSymbolTable = 44 61 72 74 -> "Dart"
NumberOfSymbols = 68 50 45 00 -> "hPE "

DarthPE signature :)

anyone have tried to unpack a softlock before?

Softlock is not Softlocx. ;)


All times are GMT +8. The time now is 15:04.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX