guys, i am new to this, have an target file that is protected by ASProtect 1.23. Is there an unpacker/decryptor public that works with this protection? Not sure if I could pull it off manaully, but if no public unpacker is available, is there a good tuturial for this version of ASProtect?

It seems I'm writing this same message over and over the last couple of days to people who want someone to do their work for them before they have really tried to help themselves.

As I said to the others, what you need to do FIRST, is READ the FAQ to learn what you should do BEFORE you ask a question and then DO what you can to try to help yourself BEFORE you think about asking someone here to do your basic work for YOU.

The first question is what have you done to investigate YOURSELF, whether there are any unpackers or tutorials relating to this version of the protector? Have YOU done any searching here or anywhere for the answers to YOUR question, or have you just dropped in here hoping someone would help you not have to do ANY work yourself??? For example did you even notice and perhaps investigate that there is a thread down just a few lines from your own titled: "ASProtect 1.23 RC4 Demo." Do you recognize that it might have some information that might help you?

Learning to search is one of the most important skills you can master IF you are really interested in learning about reverse code engineering. Read my response to Mikeli in this thread: http://www.woodmann.net/forum/showthread.php?t=5051 and then substitute the word "Asprotect" for "armadillo" and you will find, yourself, more information than you will know what to do with.

You could also go to exetools forum and read up on the subject there.

You need to SHOW some thought, some effort, and some results of those two things, THEN ask a question and you will find people here ready and able to assist you. There is no one here who wants to simply do it for you. This is not a short or a simple journey. You shouldn't start down the path through the dark codewoods, unless you are serious and willing to work at it.

Regards.

A little hint, the same advice given for your Armadillo question applies to Asprotect. Really, you'll learn a lot by searching on this board first, you'll be able to accomplish NOTHING without at least getting some background on it. Even if you don't understand everything people have been saying for all the uncountable previous posts, you'll at least get a feel for the scope of the problem.

And no, there are no magic pills or automagic unpackers and even if there were (are) you'd still learn nothing by pushing buttons blindly. Please, at least read and learn a bit first, then rethink what questions you really need to be asking. Don't worry, we've all been "new to this" at one time or another and if people are telling you to search and read and learn then there's a good reason for it, and is an important part of the answer you seek.

Kayaker

EDIT - lol, JMI and I posted the exact same sentiments at the exact same time. Hmm, we're either both full of shit or there's something to this searching business after all...

Or maybe BOTH!!

Regards.

THAT was taken for granted

sorry, i did find a tutorial for this, but had zero luck. i am just lost on this. maybe i can figure more out later. iwhat does EAccessVioaltion mean on an unpacked exe? I am just stuck...

That error means that the unpacked program is trying to access some memory that is only available in the packed program, so is most likely tied to the packer code in some way - you'll have to find out where and remove the references and/or emulate the results (depending on what the program is looking for)

A quick search would have told you this...

i found and followed a tutorial, but still no luck on my end. i reran pe-id, and i get it is protected with: ASProtect 1.22 - 1.23 Beta 21 -> Alexey Solodovnikov. So, I would like to do this on my own, but can not find a tutorial I can follow, as some of this just seems like a foreign language. I am using OllyDbg, so if there is a tutorial with this, please help me finding it. I tried one intended for 1.23, not sure if this is more based on 1.2 or what. I am just having probelms deciding what the OEP is I guess.

Hi,

You are having more problems beside finding OEP.
You need to go to Krobar's site (link below) and find
some beginner tutorials concerning Aspro.

Woodmann

will this method work? i scanned file in studpe and came up with asprotect 1.2x [new strain] let me know what you guys think.

Hi!

That tut deals with apps protected with older version of asprotect...
(Though most info is good for something and will get you nearer the goal.)
There are better tut's if you want to deal with old aspr.

And searching this forum, you will find MUCH info on aspr... Even some
suggested targets that I think still uses old version... All info combined here, though old, will be of much help I think...

Also... It might be, You also need more experience with simpler things?

You could PM me, and I'll take a look at the target...

/Manko

manko, i pm'd you, please get back wit me..