Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   ASProtect unpackers (https://forum.exetools.com/showthread.php?t=7931)

DrL 08-13-2005 00:58

ASProtect unpackers
 
Hi!
I think, that question is easy, but I find some problem in it. Maybe it is bug in driver of /dev/brain ... :)
I found (by PEiD v0.93) that program's exe file use "ASProtect 1.22 - 1.23 Beta 21". I tryed some unpackers and result was faild.
What unpucker do you use for unpack ASProtect?

codeX 08-13-2005 15:55

Have you tried Stripper by Syd? If not search in this forum.... :)

WerEsT 08-14-2005 23:34

DrL
try this
http://protools.reverse-engineering.net/files/unpackers/stripper.zip
exists version 2.11 b6 but she similars private

Archer 08-16-2005 21:47

It would be better to use both Stripper 2.07 and Stripper 2.11 (sometimes 2.11 failes, but 2.07 works great). And probably file wasn't packed by aspr (peid made mistake). And of course the last way is to try to unpack it manually, that aspr isn't too hard and there are rather many articles about it.

DrL 08-17-2005 13:09

Great thanks! Stripper 2.07 really works!

But, may I ask, what program do you prefer for analyse what packer was used for packing exe file. I use PEId, but sometimes it gets incorrect result.

LonGDikE 08-17-2005 16:53

FileInfo v3.01r
PEid 0.93
PEScan 3.31
Language 2000

But also,they will make mistakes sometimes,because the modified packers,disguised packers

dj-siba 08-17-2005 17:32

there also other good ones:
PE Tools (PE Sniffer)
RDG Packer Detector
PE Voiyeur

The more program you unpack more you get to know each packer loader code

DrL 08-19-2005 02:24

Great thanks! I'll try them.
One more question. What patch should be used for asprotect can't detect softice? (I red, that it can detect it)

Archer 08-19-2005 14:20

I use IceExt plugin for SoftICE and it's function !protect on, then manually edit UnhandledExceptionFilter (for unknown reason for me IceExt can't turn this protection On) and it works great.

Dreamer 12-31-2012 18:10

2 Attachment(s)
password: shockwawe

stripperX 2.14 beta 3


Attachment 6511


Attachment 6510

giv 01-01-2013 01:25

Quote:

Originally Posted by special (Post 81971)
password: shockwawe

stripperX 2.14 beta 3


Attachment 6511


Attachment 6510

Did you see that this is a 7 years old post?

cxj98 01-01-2013 03:22

unpacker is pretty old, did you know that?

0xd0000 12-08-2013 15:43

I know this is a year old already, but DecomAS was always my go to for AS Protect unpack.

Last public version I used was 1.7 Beta, that was a while back, not sure if its been updated.

See thread here -- http://forum.exetools.com/showthread.php?t=13601

greengo 12-12-2013 14:58

New version AsProtect - no work.


All times are GMT +8. The time now is 13:30.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX