#1
|
||||
|
||||
Softlock app
Hi!
This is the calc.exe protected with Softlock. When I try to open with olly it shows me the "unknown type executable file" error. I have changed the numberofrvaandsizes to 16 and then it loads but with a lot of privileged opcodes (IN assembler). I think app read this field to decrypt because it tries to execute data code when I make the change. Curiosly, it uses another trick that I saw some years ago: PointerToSymbolTable = 44 61 72 74 -> "Dart" NumberOfSymbols = 68 50 45 00 -> "hPE " DarthPE signature anyone have tried to unpack a softlock before? Softlock is not Softlocx.
__________________
omnino lo qui quae que quod somos es pulvis en el ventus. TAOS -The opposite of courage in our society is not cowardice, but conformity- Last edited by taos; 07-21-2006 at 23:36. |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
SoftLock | davo007 | General Discussion | 6 | 09-28-2009 14:24 |
SoftLock/HardLock | dizzi | General Discussion | 11 | 06-30-2004 18:29 |