#1
|
|||
|
|||
ASProtect unpackers
Hi!
I think, that question is easy, but I find some problem in it. Maybe it is bug in driver of /dev/brain ... I found (by PEiD v0.93) that program's exe file use "ASProtect 1.22 - 1.23 Beta 21". I tryed some unpackers and result was faild. What unpucker do you use for unpack ASProtect? |
#2
|
|||
|
|||
Have you tried Stripper by Syd? If not search in this forum....
__________________
{RES} |
#3
|
|||
|
|||
DrL
try this http://protools.reverse-engineering.net/files/unpackers/stripper.zip exists version 2.11 b6 but she similars private |
#4
|
||||
|
||||
It would be better to use both Stripper 2.07 and Stripper 2.11 (sometimes 2.11 failes, but 2.07 works great). And probably file wasn't packed by aspr (peid made mistake). And of course the last way is to try to unpack it manually, that aspr isn't too hard and there are rather many articles about it.
|
#5
|
|||
|
|||
Great thanks! Stripper 2.07 really works!
But, may I ask, what program do you prefer for analyse what packer was used for packing exe file. I use PEId, but sometimes it gets incorrect result. |
#6
|
|||
|
|||
FileInfo v3.01r
PEid 0.93 PEScan 3.31 Language 2000 But also,they will make mistakes sometimes,because the modified packers,disguised packers |
#7
|
||||
|
||||
there also other good ones:
PE Tools (PE Sniffer) RDG Packer Detector PE Voiyeur The more program you unpack more you get to know each packer loader code |
#8
|
|||
|
|||
Great thanks! I'll try them.
One more question. What patch should be used for asprotect can't detect softice? (I red, that it can detect it) |
#9
|
||||
|
||||
I use IceExt plugin for SoftICE and it's function !protect on, then manually edit UnhandledExceptionFilter (for unknown reason for me IceExt can't turn this protection On) and it works great.
|
#10
|
||||
|
||||
|
The Following User Gave Reputation+1 to Dreamer For This Useful Post: | ||
swlepus (01-11-2013) |
The Following User Says Thank You to Dreamer For This Useful Post: | ||
mefkureci (02-17-2024) |
#11
|
||||
|
||||
Quote:
|
#12
|
|||
|
|||
unpacker is pretty old, did you know that?
|
#13
|
|||
|
|||
I know this is a year old already, but DecomAS was always my go to for AS Protect unpack.
Last public version I used was 1.7 Beta, that was a while back, not sure if its been updated. See thread here -- http://forum.exetools.com/showthread.php?t=13601 |
#14
|
|||
|
|||
New version AsProtect - no work.
|
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Looking for the Armadillo unpackers for 3.10 | POTATO | General Discussion | 9 | 09-14-2003 16:15 |