Hi!
This is the calc.exe protected with Softlock.
When I try to open with olly it shows me the "unknown type executable file" error.
I have changed the numberofrvaandsizes to 16 and then it loads but with a lot of privileged opcodes (IN assembler). I think app read this field to decrypt because it tries to execute data code when I make the change.
Curiosly, it uses another trick that I saw some years ago:
PointerToSymbolTable = 44 61 72 74 -> "Dart"
NumberOfSymbols = 68 50 45 00 -> "hPE "
DarthPE signature
anyone have tried to unpack a softlock before?
Softlock is not Softlocx.
