View Full Version : Help Unpacking ASProtect
Reaper
08-13-2009, 09:17 PM
I have a file packed with, according to PEiD, ASProtect 1.2x - 1.3x [Registered].
I tried manually unpacking this with Olly. I successfully dumped it with the ollydmp plugin... but when I opened it up with ImpREC there were no invalid imports. I fixed the dump anyway but when I opened I get a nice error.
I'm pretty new at this. I am not sure what else I can/should do.
Jump on Google and find Quick Unpack, I think V2.2 is the latest. It unpacks a lot of the common packers.
Git
Reaper
08-14-2009, 01:35 PM
Ok the latest english version I found was 2.1.... but that dumped file also doesn't work (again, it found no problemed imports). All the dump files are different filesizes, but the results are the same.
"Encountered a problem and needs to close"
I also tried GUnpacker V.04 and stripper. They also don't work.
Thanks for the suggestion.
alforati
09-24-2009, 10:03 PM
Use Stripper or UniExtract .. Both of them Work besides to Generic Unpacker.
The only thing stripper is likely to do is crash your machine. Stay well clear.
Git
HaQue
01-12-2010, 04:08 AM
Hi,
I know this is an old thread, but the following info might help others getting frustrated with asprotect.
There are some new versions of asprotect that I don't believe are correctly identified by some packer ID apps.
If you believe these apps you will be wasting your time trying stripper and other unpackers because the version is actually alot newer than you think.
For example, I have an app that I am trying to unpack and these are the results from various apps...
PEiD v0.95 Build date: Oct 21, 2008: ASProtect 1.2x - 1.3x [Registered] -> Alexey Solodovnikov
PEiD v0.95 Build date: Oct 21, 2008 using Ver015 plugin:
Error, may be it's not ASProtect!
PROTECTiON iD v6.3.5 DECEMBER:ASProtect v1.40 Build 04.01
ASPrINF 100% detector version of ASProtect > v1.23 : [xxx], [x.xx], [1.51 build 09.22 Beta], [yyy yyy].
(xxx = app name and x.xx = app version and yyy yyy= registered user of asprotect)
I suggest using ASPrInf as I am pretty sure it is showing the correct version of asprotect used to protect the app. EDIT: I believe ASPrInf grabs the version number from a debugging string in the actual app that asprotect company uses if an author has issues with asprotect, not from sig files, so i would thing this is as accurate as you can get.
Stripper is great on older apps, pay heed to the readmes too see what versions of asprotect each different version of stripper can unpack...but I doubt it will work on much anymore.
The other confusing thing for some ppl is the version numbers.
there are the 1.x's and 2.xs. the 2.x's usually have SKE after it and are of a different type of protection to the 1.x variety. What Im getting at is you can have a 1.4 version that is later version than a 2.11(SKE) version.
For help on newest versions of Asprotect, look for a bundle of tutes and olly scripts released by vnekrilov (google it). They were in Russian, but there is some now with english translations.
Hope that helps some people, and I welcome any corrections!
vBulletin® v3.6.4, Copyright ©2000-2010, Jelsoft Enterprises Ltd.