Hello again ;)

The executable that i want to unpack is here: rapidshare.com/files/5369391/ElementEvil.exe.html
PEiD shows me that is packed with "ASProtect 2.1x SKE -> Alexey Solodovnikov [Overlay] "
I've searched in the net, and there was a suggestion, that is ASProtect 2.13
I've tried with this unpacker: syd.nightmail.ru/stripper_v213b9.rar But no result.



I will be enermously in debt to everyone who helps me.
Thank you.
Tony

| Сообщение посчитали полезным:

Version: ASProtect 2.11 SKE build 03.13 Release
Lang: Visual Basic

i try to unpack, but proggy show me this message:
"Component 'mswinsck.ocx' or one of its dependencies not correctly registered: a file is missing or invalid"

-----
Yann Tiersen best and do not fuck

| Сообщение посчитали полезным:

www.ascentive.com/support/new./images/lib/MSWINSCK.OCX

here is the file
This file should be located in the system32 dir, if you are using XP, and system dir, if u are using 9x.

| Сообщение посчитали полезным:

PE_Kill, i've read you topic into the russian part of the forum, about this executable.
This is a game, and to run the executable, you have to run it from its directory, where are all .jpg files and sounds.
The error:
Run-time error '76':
Path not found: 'shopshipsSeekerephyr1.jpg'
is because the executable cannot load the image. If you are interested, xias.aterm.net/ElementE.exe
This is the game.
Could you send me the executable, if u succeeded to unpack it?
Thanx

| Сообщение посчитали полезным:

Are you tryed an chineese script?

354c_01.12.2006_CRACKLAB.rU.tgz - Aspr2.XX_IATfixer_v2.2s.osc

-----
все багрепорты - в личные сообщения

| Сообщение посчитали полезным:

HandMill it processed VM? he he

Booster tommorow i upload unpacked file, wait...

-----
Yann Tiersen best and do not fuck

| Сообщение посчитали полезным:

Xm.. p-code +VM ASpr?

| Сообщение посчитали полезным:

pavka yes, yes. OEP is stolen + 1 VM instruction (call ThunRtlMain)

Booster rapidshare.com/files/5685617/ElementEvil_u.rar.html

-----
Yann Tiersen best and do not fuck

| Сообщение посчитали полезным:

Thank you very much!
You guys are incredible!!!

| Сообщение посчитали полезным:

Can somebody help me unpack this: http://rapidshare.com/files/10672067/needunpak.rar.html http://rapidshare.com/files/10672067/needunpak.rar.html 1.5 Mb
I'm try, but prog see Olly, and terminate.
I can't find good tutor about ASProtect 2.1x and understand, it's too difficult for me.
Prog need for emulation some device.
Thanx a lot.

| Сообщение посчитали полезным:

Unpacked file you can download here: http://rapidshare.com/files/10684463/_needunpak.rar.html http://rapidshare.com/files/10684463/_needunpak.rar.html

-----
SaNX

| Сообщение посчитали полезным:

Could somebody explain me something more about resolving stolen code?

I tryed to unpack this app: dl.totalidea.com/files/public/txp4trial.exe

It's protected with AsProtect 2.3, I managed to fix IAT with the script of HandMill, but I need some help to get further.

| Сообщение посчитали полезным:

Thanx SaNX
But i have new problem with unpacked prog, unfortunately it's out of the theme this topic

| Сообщение посчитали полезным:

BioDuo
Only one VM instruction:
12:27:30 - processing VM..
VM entry at 029402bf to 029c0000
code: jmp 00401616

Here your's unpacked exe with log: rapidshare.com/files/10759497/Tweak-XP_Pro_4.rar.html

-----
SaNX

| Сообщение посчитали полезным:

Can somebody help me unpack this: xenus-rus.hotmail.ru/unpackitplz.zip

It's protected with AsProtect 2.3.

| Сообщение посчитали полезным:

xenus
rapidshare.com/files/10783389/laim.rar.html

-----
SaNX

| Сообщение посчитали полезным:

Stripper didn't fix the IAT properly.

At 00401198 he missed a call to msvbvm60.DllFunctionCall
After I fixed this manually I get an "array out of bounds" error, I dont know how to fix this one.
Does anybody else knows it?

| Сообщение посчитали полезным:

SaNX
Error in exe-file

| Сообщение посчитали полезным:

SaNX
Error in exe-file
Plz try agein...

| Сообщение посчитали полезным:

Hi. Nice to meet you.
I want to unpack this file rapidshare.com/files/11387162/OB.rar.html
First, I use Asprotect 2.XX SKE IAT Fixer (http://bbs.pediy.com/showthread.php?s=&threadid=24557)
but after message"IAT fixed. Stolen code start, check the address and size of IAT in log window" was shown,
error occurred in Import Reconstructor.
If you understood the cause, please teach to me.
Of course, I tried to use latest stripper, but message below is shown and stripper was halted.
>Runtime Error!
>This application has requested the Runtime to terminate it in an unusual way.
>Please contact the application's support team for more information.
I saw SaNX's log. stripper v2.14 is written in the log.
Is there v2.14? I cannot find it on Internet.

What should I do next? Please teach, someone.

| Сообщение посчитали полезным:

xenus
This proggie have encrypted code, you cannot make it work without a valid key

bachelor:
I saw SaNX's log. stripper v2.14 is written in the log.
Is there v2.14? I cannot find it on Internet.
It's private stuff, you cannot find it on Internet.

-----
SaNX

| Сообщение посчитали полезным:

there's a new asprotect unpack script written by Volx , you can go to this chinese site and download,english version available too , i've tried it with Asprotect SKE 05.14, iat and stolen code totally fixed.


www.unpack.cn/viewthread.php?tid=9487&extra=page%3D1

or

bbs.pediy.com/showthread.php?s=&threadid=38143&perpage=10&highlight=&pagenumber=1

| Сообщение посчитали полезным:

SaNX
You made? Naturally I couldn't find.

creplave
It is wonderful.
I could unpack my file Easily!
Finally automatic unpacker was made. There is a man who has an excellent technique in the world.

Thanks. See you.

| Сообщение посчитали полезным:

Can u upload this script on another server, because I can't download it from this links Thx

| Сообщение посчитали полезным:

KpeHDeJIb writes:
Can u upload this script on another server, because I can't download it from this links Thx

If you cant download it from the original site, u can try this:-

www.geocities.com/creplave/Aspr2.XX_unpacker_v1.0E.txt

I'm sorry , the original filename is Aspr2.XX_unpacker_v1.0E.osc , because i dunno how to upload the file with rar and osc extentions(mayb Yahoo doesnt allow it -_-")


Original filename : Aspr2.XX_unpacker_v1.0E.osc
Size : 128KB , 6243 lines of code

Script written by VolX
Script : Aspr2.XX_unpacker
version : v1.0E
Date : 15-Jan-2007
Test Environment : OllyDbg 1.1, ODBGScript 1.47, WINXP, WIN2000
Debugging options: Tick all items in OllyDbg's Debugging Options-Exceptions
Tools : OllyDbg, ODBGScript 1.47, Import Reconstructor

i get it from here :-
www.unpack.cn/viewthread.php?tid=9487&extra=page%3D1
bbs.pediy.com/showthread.php?s=&threadid=38143&perpage=10&highl ight=&pagenumber=1

| Сообщение посчитали полезным:

SOrry , i'm sorry , i dont know this forum support attachment , really sorry !!! please forgive me

a39f_21.01.2007_CRACKLAB.rU.tgz - unpackerv1.0E.rar

| Сообщение посчитали полезным:

OK, I forgive u! BUT, be carefully next time And without jokes - thx, really thx!

| Сообщение посчитали полезным:

Hello..got some problems with ASProtect 2.1x SKE too...
i want to unpack a delphi dll library (some driver for database access...trial -> ULded to : www.rapidshare.ru/152761 ), PEID shows: ASProtect 2.1x SKE -> Alexey Solodovnikov
I use the latest release of Stripper 213b9... here are some imporant lines of the log:

Victim ImageBase - 00830000
Victim EntryPoint - 0008f001
loading modules
.......
hooking modules
.......
14:58:56 - tracing..
14:58:56 - processing relocation..
14:58:56 - processing import..
Unrecognized function at address: 00b000c5

then it shows some "import" window where i can delete several functions..but there my knowledge has come to an end..i can save the file.. but then the dll is 800kb instead of approx 350 and my application isnt able to load it anymore.
some ideas?

| Сообщение посчитали полезным:

tobaymuata, unpacking of a dll is much easier, i'll try

| Сообщение посчитали полезным:

very kind, maybe u have more luck..... or rather knowhow than me
could you access the file @ rapidshare ? otherwise ill upload it again
thx

| Сообщение посчитали полезным: