g'day from downunder, i am trying to crack express web pictures 1.41 from h**p://www.express-soft.com/ftp/webpics.exe . when i loaded it int w32dasm there was no code, so i assume it needs to be unpacked. i have never unpacked anything before, so i was hoping someone could point me in the right direction, maybe an unpacker for inno-setup?
cheers fizzik

hello fizzik,

I think you'd better read some manual-unpacking/PE tuts first. There are many such tuts in Fravia/tsehp's site.

This prog is packed with "ASPack + ASProtect".

1. the end of ASPack:

001B:00E175BB MOV [EBP+00442F11],EAX
001B:00E175C1 POPAD
001B:00E175C2 JNZ 00E175CC
001B:00E175C4 MOV EAX,00000001
001B:00E175C9 RET 000C
001B:00E175CC PUSH 00E11AD0 <---------------the OEP of ASProtect
001B:00E175D1 RET

2. the end of ASProtect:

001B:00E2367A POP EAX
001B:00E2367B ADD EAX,FBDE93BA
001B:00E23680 POP ESP
001B:00E23681 ADD EAX,EBX
001B:00E23683 MOV [ESP+1C],EAX
001B:00E23687 POPAD
001B:00E23688 JMP EAX <---------------------OEP of webpics

so we get OEP = 500584(RVA = 100584)

Make a full dump with LordPE at the OEP. Reconstruct the IT/IAT with RV/ImportREC. All OK.

good luck

Cmon Solomon,
"If u want the already unpacked exe, I can mail it to u", whats that about?, you provided enough information more for him to try it himself, you are basically offering a crack, its not what this board is about.
regards

hello Js,

Just take it easy. I don't mean to send sb. a cracked prog.
I send this file in case that he may need it to compare his unpacked exe with mine to find out where is wrong. The file is too big to post as a attachment here.

Hiya guys,

I don't really care what you email to each other privately, but I guess we should at least *try* to keep our noses reasonably clean to avoid any more ISP problems which can shut down this board.

The first step is please DO NOT use direct links to shareware sites as was done in the original post (I changed it). This could potentially be a flashing beacon saying "We're f***ing with your app" when the shareware author suddenly gets several d/l's over a few days all referred back to here.

Posting cracked exe's as attachments can't be too cool either because now the server is directly hosting material in violation of copyright infringement laws, yadda, yadda, yadda...

Besides, helping someone with *how* to approach a problem is OK, that's what this board is all about. But at least let the guy show that he's taken the information, learned from it and used it to try to solve the problem on his own before offering him a fully unpacked exe. Someone deserving this boards help *should* be a knowledge seeker, not a crack seeker, and should be quite happy with that.

regards,
Kayaker

That's OK. Sure we must follow the rules to avoid trouble
I'm not a newcomer of this board, so I know the rules, coz they have been emphasized so many times by the moderators and others.

BTW: In most cases "unpacked" is not the synonym of "cracked". We all know this, right?

We all know this yes ;-) Luckily that's usually just where the real fun begins, getting unpacked to work.

I'm glad everyone understands, this is just to try to protect the board so we can continue to enjoy it for a long time.

Cheers
Kayaker