Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-16-2024, 18:53
jonwil jonwil is offline
VIP
 
Join Date: Feb 2004
Posts: 399
Rept. Given: 2
Rept. Rcvd 21 Times in 9 Posts
Thanks Given: 2
Thanks Rcvd at 67 Times in 35 Posts
jonwil Reputation: 21
How to unpack dos lzexe packed exe?

I have an exe file (16 bit dos) that seems to be packed with lzexe.
When I run unlzexe on it I get this:
Quote:
UNLZEXE Ver. 0.81
Detected size of File is 27837 bytes
file 'mbucks2.exe' is compressed by LZEXE Ver. 0.90
but all I get as output is a zero byte file named the same as my exe but called .exeNEW instead of .exe

How can I unpack this exe (which btw does work just fine in DosBOXs)? (I want to throw it into IDA to reverse engineer some things)
Reply With Quote
  #2  
Old 01-16-2024, 20:22
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 905
Rept. Given: 68
Rept. Rcvd 660 Times in 278 Posts
Thanks Given: 64
Thanks Rcvd at 3,819 Times in 717 Posts
CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699
Try this:
https://www.classicdosgames.com/utilities/dos.html
UnLZEXE
https://www.classicdosgames.com/files/utilities/unlzexe.zip
Reply With Quote
  #3  
Old 01-16-2024, 21:31
jonwil jonwil is offline
VIP
 
Join Date: Feb 2004
Posts: 399
Rept. Given: 2
Rept. Rcvd 21 Times in 9 Posts
Thanks Given: 2
Thanks Rcvd at 67 Times in 35 Posts
jonwil Reputation: 21
Ok the exe unpacks and the unpacked exe runs but when I throw it into IDA, it doesn't disassemble into anything that makes sense.
Reply With Quote
  #4  
Old 01-16-2024, 22:02
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,305
Rept. Given: 337
Rept. Rcvd 237 Times in 127 Posts
Thanks Given: 340
Thanks Rcvd at 652 Times in 357 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
try Ghidra
it knows 16 bit old binaries for sure
Reply With Quote
  #5  
Old 01-18-2024, 02:13
BlackWhite BlackWhite is offline
Friend
 
Join Date: Apr 2013
Posts: 85
Rept. Given: 4
Rept. Rcvd 14 Times in 6 Posts
Thanks Given: 14
Thanks Rcvd at 56 Times in 25 Posts
BlackWhite Reputation: 14
Quote:
Originally Posted by jonwil View Post
I have an exe file (16 bit dos) that seems to be packed with lzexe.
When I run unlzexe on it I get this:

but all I get as output is a zero byte file named the same as my exe but called .exeNEW instead of .exe

How can I unpack this exe (which btw does work just fine in DosBOXs)? (I want to throw it into IDA to reverse engineer some things)
There is an old tool called CUP386 which can be used to decompress
your exe automatically.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to find out how an exe was packed and how to unpack it? DavidXanatos General Discussion 5 07-14-2018 05:25
How to unpack .dll packed with HASP4 Asus General Discussion 1 03-28-2005 02:36


All times are GMT +8. The time now is 20:08.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )