Web
: http://mxb.cjb.net
Contact Me : [email protected] or [email protected]
ACDSee 3.0
Type : Image Viewer
Protection : ASPack
Tech : Memory Dump
Crack : Programs packed with ASPack can be easily unpacked.
1 Go to the end point of the unpacker routine.
2 Use a memory dumper like PE-Editor to dump the entire process
to a file.
3 Find out the Original Entry Point [ OEP ] of the program.
4 Changed the entry point of the dumped file with PE-Editor.
Entry Point = OEP - Image Base
Note : If the program does not break at start point in symbol loader -
Change the FLAG of TEXT Section to = E0000020
End point of the unpacker routine is shown below :
0x5554BC POPAD
0x5554BD JNZ 0x5554C7
.....................
0x5554C7 PUSH 0x4A33BF >> OEP
........ RET >> DUMP HERE : USE 'JMP EIP' HERE TO
FORM A INFINITE LOOP AND COME OUT
OF SICE.THEN DUMP FULL PROCESS.THEN
OPEN DUMPEDFILE IN HEX EDITOR AND
CHANGE 'JMP EIP' TO 'RET'.
Change the entry point of the dumped program file.