![]() |
Softlock app
1 Attachment(s)
Hi!
This is the calc.exe protected with Softlock. When I try to open with olly it shows me the "unknown type executable file" error. I have changed the numberofrvaandsizes to 16 and then it loads but with a lot of privileged opcodes (IN assembler). I think app read this field to decrypt because it tries to execute data code when I make the change. Curiosly, it uses another trick that I saw some years ago: PointerToSymbolTable = 44 61 72 74 -> "Dart" NumberOfSymbols = 68 50 45 00 -> "hPE " DarthPE signature :) anyone have tried to unpack a softlock before? Softlock is not Softlocx. ;) |
| All times are GMT +8. The time now is 15:04. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX