PDA

View Full Version : Unable to Unpack this file, please try


link2kannan
05-06-2010, 09:50 AM
Please try to unpack this file, i tried with olly, but finding OEP is difficult, even i can't able to get the proper packer name for these file. because PiED, DIE are sowing different packer names...

Files
First One
http://rapidshare.com/files/370444057/BM_FORAIR.exe

Second one
http://rapidshare.com/files/370442095/bmVideoPlayer.exe

deepak_heatm
03-14-2011, 08:19 AM
i too need to unpack this same file sir:

http://www.mediafire.com/download.php?t84ctbcsk3kp6az

and another exe in the same software:

http://www.mediafire.com/?ipnd8bg07dx8360

yogi_saw
03-14-2011, 10:29 AM
Why don't u guys help each other to unpack it mutually insted of expecting somebody to help u

deepak_heatm
03-14-2011, 12:47 PM
now wat u said is exactly right. let me try atleast..

ac!d
03-15-2011, 12:56 PM
scanned with protection id gave the following info:

Scanning -> .\BM_FORAIR.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 3124736 (02FAE00h) Byte(s)
[File Heuristics] -> Flag : 00000000000000001100000000100010 (0x0000C022)
[!] ASProtect SKE v2.1 - v2.2 detected !
- Scan Took : 0.390 Second(s) [000000186h tick(s)]

G3n1us
03-15-2011, 02:47 PM
I hope you will learn froam this and not just unpack and forget ;) and i hope that tis is helpful to you (thanks for greath people for making this tuts )

http://hotfile.com/dl/110377189/6f7aaea/UNPACK_TUTS.rar.html

deepak_heatm
03-15-2011, 02:53 PM
thanks very much for ur guidance sirr.

hello sir.thanks for ur guidance....

i got the rva of oep value=44514 using the Aspr2.XX_unpacker_v1.14aE script.
:D

then i loaded that file with ImpREC 1.7c and started IAT Autosearch button. now it says couldnt find anything good at this oep and it results in the invalid imports... i even tried the autotrace option. then also all the imported functions are invalid.
:eek:

anyhow i ignored and tried to dump, its asking me to fix manually all the unresolved pointers coz of the invalid IAT

please help me ...

G3n1us
03-16-2011, 11:09 AM
Maeby it is asprotect 1.23 to 2.* that say detect it easy
In that case your oep is not good :) i think :D

Watch unpakigin tuts about asprotect and you will see that is easy to find oep and when you find oep dump soft, with ollyDump plugin and try to fix iat with ImpRec

If you cannot find tuts pm me and i will send to you

deepak_heatm
03-16-2011, 02:09 PM
exactly the DIE says asprotect 1.23 to 2.2

thanks for sharing.

G3n1us
03-16-2011, 04:31 PM
It is posible but maebi DiE is not corect, PeiD say ske :)

If any wish to learn unpackigin Git is post heare unpackigin book is wery good and you can try to search on net for Arab rUnpackigin Tuts on tuts4you also greath tuts, and so on , so on....

deepak_heatm
03-17-2011, 09:51 AM
@Genius! I had successfully unpacked my target file using your shared tutorial. it worked. the problem i did is i didnt enter the IAT OEP. Thats why it showed as an invalid pt.

thanks for guiding me to unpack this file for all sir...

btw the actual protection version is 2.1

G3n1us
03-17-2011, 03:51 PM
No probelem
I dont wish to take credits for tuts
That tut is make som other guy and thanks gous to him :D
I djust help you to find , and he help to learn - succesfully afcorse
It is good filing when you succesfully make som stuff by yourself so learn , learn ....
Not ske? :)

obama493
03-21-2011, 12:22 PM
[Please DO NOT quote whole messages, it is unnecessary]

now wat u said is exactly right. let me try atleast..

jewelryab
05-18-2011, 04:18 AM
I have this too will soon be, it is still sad. (and still have NASCO). That's how much we valued the ram!

CrackDJ
06-20-2011, 11:57 AM
Hi I have unpacked BM_ONAIR with success, kindly can you share full setup of black magic software with me? :)
second one link is dead (bmVideoPlayer.exe)

Pls pm me ;)

SunBeam
06-22-2011, 11:03 AM
Note that OllyDbg + CodeDoctor may help a lot in unpacking ASPR fast and clean.. Just a suggestion for future reference ;-)