Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 10-28-2004, 15:15
nimda2k3
 
Posts: n/a
Question Is it possible to unpack ASProtect 1.23 RC4 Registered packing software?

Now I find a software packed with "ASProtect 1.23 RC4 Registered -> Alexey Solodovnikov [Overlay]".I try to unpack it,but failed.I can find the stolen bytes,the OEP,and fix the IAT,after I doing this,I ran it.It is crashing!Someone who has the experience in unpacking ASPR 1.23 RC4 Registered,plz give me some advice.

The target :hxxp://www.kmint21.com/serial-port-monitor/
Reply With Quote
  #2  
Old 10-28-2004, 15:52
hosiminh hosiminh is offline
Friend
 
Join Date: Aug 2004
Posts: 202
Rept. Given: 2
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 0
Thanks Rcvd at 4 Times in 4 Posts
hosiminh Reputation: 1
Oh man , JMI will be pleased when he see your post

I suggest you to use "Search: Key Word(s): ASProtect" . With this one i got 194 results


You can also go h**p://tothesky.us/tut.htm and look for "MUP ASProtect 1.xx" tutorials.

If you still cannot unpack it , use "Aspr stripper_v211rc2" from h**p://syd.nightmail.ru/stripper or "ASPR Dumper" .


After all , if you have successfully unpacked your target , found the stolen bytes,fix the OEP and the IAT , maybe it has some anti-unpacking/dumping tricks (crc/hash check etc...) added by the author of the program . Use some debugger to find out what is hidding inside
Reply With Quote
  #3  
Old 10-28-2004, 17:19
nimda2k3
 
Posts: n/a
Problem solved

to hosiminh:

kind man,I've saw almost all the ASProtect tut here,I can't find one of tut tell us how can we fix the ASPR trick .Maybe I should post one ,although not very good.

here is the dump,fixed the trick.

Thanks again for your advice.
Attached Files
File Type: rar dumped_.rar (873.4 KB, 16 views)

Last edited by nimda2k3; 10-28-2004 at 17:21.
Reply With Quote
  #4  
Old 10-28-2004, 18:03
peleon peleon is offline
Friend
 
Join Date: Sep 2003
Posts: 174
Rept. Given: 0
Rept. Rcvd 7 Times in 1 Post
Thanks Given: 0
Thanks Rcvd at 7 Times in 7 Posts
peleon Reputation: 7
so, ain't you gonna tell us about that "new" trick?
Reply With Quote
  #5  
Old 10-28-2004, 21:06
nimda2k3
 
Posts: n/a
to peleon:
Poor tut is here.
Attached Files
File Type: txt mini tut.txt (4.2 KB, 75 views)

Last edited by nimda2k3; 10-28-2004 at 21:18.
Reply With Quote
  #6  
Old 10-28-2004, 21:12
nimda2k3
 
Posts: n/a
BTW:Another program packed with "ASProtect 1.23 RC4 - 1.3.08.24 -> Alexey Solodovnikov",I have spent 5 days on fixing the tricks,but still unsuccessful.Anyone could help me?

Here is the packing target & unpacking target with fixing Stolen,IAT,OEP,but not the tricks.
Attached Files
File Type: rar Target & dump_fixStolenOEPIAT.rar (1.36 MB, 89 views)
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 20:12.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )