Log in

View Full Version : OllyScript AsProtect 2.x Volx


yousky
June 20th, 2006, 10:18
Hi everybody ,

I need some help to dump a software protected with "ASProtect 2.1x SKE -> Alexey Solodovnikov [Overlay]".

For that, i've use the Ollydbg script from Volx (v1.02 support Asprotect 1.32, 1.33, ,1.35, 2.0, 2.1, 2.11, 2.2beta, 2.2, 2.3) that normaly do all the job. After running the script i've this message "Import table is fixed, you can dump the file now or later. Check the address and size of IAT in log window". In log window i've :

iatstartaddr: 005451A4
iatsize : 000007EC

So I try to dump the process using OllyDump but i'm not sure what option to select for a good dump.

Does I let the start address, Size and other parameters or change them ? Fix Raw size & Offset ? Rebuilt import ?

If someone can help me in this dump I will appreciate

Thanks for all
bye bye

LLXX
June 20th, 2006, 23:25
I normally just use LordPE "dump full" option...