How to unpack DOS program working in protected mode?
Hello, I've got a problem with unpacking a program running in protected mode. I have no experience with such DOS programs, and don't know what debugger and dumper to use.
File analyze showed that the program was packed by LZEXE 1.0, but unpackers couldn't unpack it correctly. File size even decreased from 210kb to 10kb. So what you suggest me to do? |
Hi,
you say the program is running in protected mode. Does it mean that the unpacking isdone in PM too? If this is the case then I think you are in trouble. If not, try CUP386 it can unpack almost any packer, or try tr2.52 (both can be found on www.exetools.com, on the top of the page, under unpackers and debuggers). If all fails, you'll have to do it manualy, probably by dumping in softice and then rebuilding the whole exe (god save you:) Good luck, least |
Run it in a VDM
You can lauch it in a VDM under wind*ws and dump it.
Try with WinHex oy SIce. Best regards. |
This did not start out as a "Tutorial" and does not belong in that Forum, so I've moved it here.
Regards, |
A DOS program working in protected mode?
What is a DOS program working in protected mode?
A, a program started in real mode, then make the machine into protected mode and then work or B, a DOS-Extend program generated by DOS/4GW or other SDKs if B, the program file structure is much like NE or PE format. It has a stub running in real mode and real codes running in protected mode. The stub often search for the DOS-Extend program such as dos4gw.exe, the DOS/4GW Protected Mode Run-time, load it, and instruct it to load your program to execute. |
no body sharing dos cracking-art tuts now?
who can manual upacking for dos?
|
??? me confused ???
last time i did something on dos was MDK (the dos game (long ago)) installed softice on W9X, replaced explorer.exe with command.com in system.ini, fire up the game and cracked the cd protection |
hmmm ..... Amazing how you can take it for granted that there are people out there who have had no DOS experience.
LZExe is a very easy tool to unpack ... Snow Panthers "Unpack" should be able to handle this with no problem. hxxp://reversing.kulichki.com/files/unpack/unpack23.rar If you want to manually unpack this file use TR.EXE (Tracer 2.01 and above) |
All times are GMT +8. The time now is 11:16. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX