Genel Araştırma

Merhabalar, Stripper, ASPack ve ASProtect ile korunan çalıştırılabilir (.exe) dosyalarının korumasını kaldırmak için kullanılan bir araçtır. Kernel sürücüleri Windows XP için yazıldığından dolayı, yalnızca 32-bit Windows XP platformunda düzgün çalışmaktadır. Stripper v2.07,2.11 RC2, 2.13B9 [Gizli İçerik]

Hello Everyone, I made Windows XP VM and used PENTAGRAM: https://www.kodevelopers.com/unpack-amp-bypass-reverse-engineering/1101-aspack-asprotect-unpacker-stripper-v207211-rc2-213b9.html ASProtect unpacker to unpack the Launcher.exe and KnightOnLine.exe of version 1299. There are 3 Folders there: * Stripper_v213b9 * Stripper.v2.11.RC2 * Stripper.v2.07 When I tried Stripper.v2.11.RC2, the unpacking failed. When I tried Stripper.v2.07, the VM got BSOD(Blue Screen of Death). When I tried Stripper_v213b9, the unpacking worked! But for some reason the produced unpacked executable doesn't work well, even the launcher. What could be the reason? I even tried ImpREC 1.7e to fix the imports and also Scylla_v0.9.8, but when I click the exe, nothing happens. I checked the entry point OEP with x64dbg and it looks good: 0x0067623F Is there any better way to unpack ASProtect? Like the manual way using x64dbg? and then manually fix the imports without counting on some tool or script to do the job for me? I can unpack later ASProtect versions manually, but the old 1.22 1.23 beta for some reason I'm having trouble finding the OEP. I appreciate any help! Thanks in advance 🙂 Regards, Martin Brooker