Cracking → Unpacking → ASProtect 2.1x SKE - Alexey Solodovnikov problem

22 May 2009, 03:26

I'm trying to unpack a file called w*bTV.exe and I found it impossible. It uses ASProtect 2.1x SKE and when I try to open the file with Ollydbg it says that the code is encrypted. Furthermore, when I run the debugger a message is popped up saying that "Protection error debugger detected" and terminates the processing.
I searched online and found some ASProtect unpacking scripts that can be run through Ollydbg but none of them seem to work for the current situation.
Is there any tutorial on anyone who can help me on this?
Thank you.

Rating 1 Comments 8

Everdoh 24 May 2009, 03:42 #

Hi.1ª technique .In EP(ENTRY POINT) CLICK F7 UNTIL THE ESP CHANGE OF COLOR TO RED(ONLY THE ESP IN RED,THE OTHERS NO).LOOK IN REGISTER ESP(COLOR RED) CLICK ON BUTTON RIGHT IN ESPFOLLOW IN DUMP.AFTER SELECT THE FIRST BYTES (EXAMPLE "00")IN DUMP.NOW CLICK ON BUTTON RIGHT BREAKPOINT HARDWARE, ON ACESS DWORD.NOW CLICK F9 and after find the OEP(ORIGINAL ENTRY POINT) FOR THIS USE F7.

2ª technique.THIS IS VERY EASY.GO IN OPTIONS DEBUGGING OPTIONS SFX AND SELECT "TRACE REAL ENTRY BLOCKWISE(INACCURATE).Now OPEN the program in olly.You see the ORIGINAL ENTRY POINT NOW? YESS.bye bye.You know remake the IAT??

yianniklas2 24 May 2009, 11:17 #

Hello,
thanks for the reply. Actually I'm very new in unpacking and don't know much of it. I found some tutorials on the internet but they seem hard to follow. What I would like to do is to remove the ASProtect encryption from the file such that I would be able to find out what programming language was used to develop the software. Do you know a quick method of doing that?

Everdoh 26 May 2009, 03:35 #

Use the rdg packer

yianniklas2 26 May 2009, 11:21 #

Is it possible to decompile a file in a programming language without being unpacked first?

nasheba 09 May 2010, 18:38 #

so how do you decompile a file in a programming language, any tuts, it will be of
great help for me. thanks........

CRC32 10 May 2010, 15:50 #

Give me the Link of the Program please!

nasheba 31 Jan 2011, 00:11 #

Auto unpacker will not work with ASProtect
this dirt has lots of tricks in protecting
the entry point. The best way to defeat
this packer is to learn assembly langauge
there are many tuts on the net, just google
it and of course, lots of brain and time.

And remember kids practice makes a man perfect

;)

One of the best site i have come across is
tuts4you.com check this site.

good luck

prai24 04 Nov 2011, 19:25 #

yianniklas2 , The unpacking asprotect for newbie , apart of me using to run script from plug-in , it's easy....

You have to login or register to post comments.

yianniklas2

0 ♠ 1 ♣

Tweet: