Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 07-21-2006, 23:10
taos's Avatar
taos taos is offline
The Art Of Silence
 
Join Date: Aug 2004
Location: In front of my screen
Posts: 580
Rept. Given: 65
Rept. Rcvd 54 Times in 19 Posts
Thanks Given: 69
Thanks Rcvd at 134 Times in 36 Posts
taos Reputation: 54
Softlock app

Hi!
This is the calc.exe protected with Softlock.
When I try to open with olly it shows me the "unknown type executable file" error.
I have changed the numberofrvaandsizes to 16 and then it loads but with a lot of privileged opcodes (IN assembler). I think app read this field to decrypt because it tries to execute data code when I make the change.

Curiosly, it uses another trick that I saw some years ago:
PointerToSymbolTable = 44 61 72 74 -> "Dart"
NumberOfSymbols = 68 50 45 00 -> "hPE "

DarthPE signature

anyone have tried to unpack a softlock before?

Softlock is not Softlocx.
Attached Files
File Type: rar calculadora2.rar (627.6 KB, 20 views)
__________________
omnino lo qui quae que quod somos es pulvis en el ventus.
TAOS

-The opposite of courage in our society is not cowardice, but conformity-

Last edited by taos; 07-21-2006 at 23:36.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SoftLock davo007 General Discussion 6 09-28-2009 14:24
SoftLock/HardLock dizzi General Discussion 11 06-30-2004 18:29


All times are GMT +8. The time now is 08:33.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )