HellSoul
September 5th, 2004, 12:16
Well, i must say, i got a problem, i have to unpack a dll
first i have opened it with lordpe to write down imagebase, import table ecc ecc, then i noticed 2 sections:
.xpdata and .adata
well .xpdata sure is a rename for .aspack so i noticed the aspack protetion then i opened the dll with PeID and it said Aspack 2.12.
so i tried to unpack it using OllyDBG.
problem is that i noticed that the protection is not necessary an aspack 2.12 indeed after reading many tutorial and trying many approach to find the OEP the results were near to zero if not exactly zero.
i think there is a debug protection that "protects aspack 2.12" in fact when i try to do something with ollydump or ollyscript it gives me a debug error.
i tried the plugin isdebugpresent but, even if it doesn't give any errors, doesn't seem to work well.
the dll is here packed with a self-executable tool
url DELETED
hope someone can help
thanks for reading.
first i have opened it with lordpe to write down imagebase, import table ecc ecc, then i noticed 2 sections:
.xpdata and .adata
well .xpdata sure is a rename for .aspack so i noticed the aspack protetion then i opened the dll with PeID and it said Aspack 2.12.
so i tried to unpack it using OllyDBG.
problem is that i noticed that the protection is not necessary an aspack 2.12 indeed after reading many tutorial and trying many approach to find the OEP the results were near to zero if not exactly zero.
i think there is a debug protection that "protects aspack 2.12" in fact when i try to do something with ollydump or ollyscript it gives me a debug error.
i tried the plugin isdebugpresent but, even if it doesn't give any errors, doesn't seem to work well.
the dll is here packed with a self-executable tool
url DELETED
hope someone can help
thanks for reading.