15 March 2009

ASProtect unpacker script by VolX 1.15E (support new version)

ASProtect unpacker script by VolX 1.15E (support new version) for ollydbg


First release.

1. Occasionally crash when fixing initialization table of Delphi apps.
2. IAT rebuild for an early version of Asprotect.
3. Add one more crc check pattern.
4. Add one more Asprotect API emulation.

IAT rebuild is incomplete when the address of the API caller is beyond first section of the app.

With some version of ODBGscript it occasionally fails to locate the OEP.

1. With ODBGscript v1.63 or above it fails to fix initialization table of Delphi apps.
2. Support a newer Asprotect whose stolen code type definition is different.

1. Script runs on ODBGscript v1.64 or above only.
2. Modification of fixing CRC check point.
3. Failed to locate OEP of proggie packed with verison 1.4x
4. Unhide the Asprotect API used in proggie packed with version 1.4x.
5. If std function can't find a match, they will be copied to .aspr section just like other stolen code.
6. Other bugs fix.

1. Bug fix.

1. Bug fix.
2. Support a newer version of Asprotect.

Add the ability to fix VM code.

Tested with software from:

http://www.magpiesoft.com/ one successful
http://ied2k.com and http://fzh.soft2cn.cn/ //DLP_Updater.exe + eXcalibur one version successful unpacked one not

Now it can unpack and clean some tools

Вышла новая версия скрипта с поддержкой всех версий аспра на даный момент

Asprotect (8).7z 262.98 KB
Unpacker_v1.15E.zip 126.75 KB

Homepage: http://www.unpack.cn/viewthread.php?tid=9487&extra=&page=1


Post a Comment

We would appreciate if you as readers of our blog, show us some feedback by signing up to this site with Friend Connect.
This will encourage us to publish updates in the future.


Dentoo.info - Hosting - Offering seedboxes and seedbox solutions


MoDs - BRD Push 2 Check Projects News all on one Page
Subscribe to rss feed! Powered By Blogger Creative Commons —
 Attribution-Noncommercial-No Derivative Works 1.0 Generic
GFC Accessibly Test

Site Stats Public Google Analytics stats

We respect your privacy. Your email address will never be shared with others.

My IP Address