UnPacking XPack (Almost) Any Version by Independent (IND)
1 of 1 file
acp
- Browsers may flag this download as unwanted or malicious. If unsure, scan it with VirusTotal.
-
Last modified May 11, 1997 7:39:16 AM
MD5 checksum d353fe2a92508d90733af99944ab3042
Mime type ISO-8859 text, with CRLF line terminators
Download XPACK.SHT
Size 1 kB
1997 May 11
- Text / Guides and how-tos
- ACP, writer credits
■ UnPacking XPack (Almost) ANY VERSION ■
────────────────────────────────────────────────────────────────────────────────
1. Tools for the "Job"
~~~~~~~~~~~~~~~~~~~~~~
A. The debugger i used is Win-ICE v3.0 and i STRONGLY reccomned it.
but for this EXE Protector you can use ANY debugger you want :)
B. To dump the unpacked code to disk use DumpEXE or any other util from that kind.
i already assume you know how-to use it :)
2. UnPacking :-)
~~~~~~~~~~~~~~~~
Comment: to dump this code we will use 3 Break-Points.
A. Load the packed EXE into the debugger, DO NOT RUN!
B. Now browse about 30 lines forward until you reach: ──>
AND BYTE PTR [xx+xx],xx
IRet ; this is the end of the first protection layr.
C. Set break point on the IRet, and run.
D. Continue browsing about 30 lines forward untill you reach ──>
MOV AX,xxxx
PUSH AX
RETF ; the end of the second layr.
E. Set Break-Point on RETF and run.
F. Continue Browsing forwards about 100 more lines, until you reach ──>
STI
XOR AX,AX
JMP xxxx:xxxx ; a far jump to the original CS:IP
G. Set Break-Point on the JMP xxxx:xxxx and run, now trace 1 instruction.
H. You are READY to dump the code to disk...:)
I. Remember this is for ALL versions so Break-Point addresses WILL be different!
Note: if the methode i gave here doesn't work, kill yourself or
just figure out how-to unpack it without this shitty little doc!
√ (C) by ACP! <[email protected]>
■ if you have no use with this doc, you can print it using your favorit paper
and wipe your ass..:)
■ Greetz fly out to:
Surva, Dark Stalker, Marquis, Lost Soul, riDDLER, Lord Byte, Kab, JAMMER, PSA!
rAND0M, Ka0t, Leddy, Sharp, XLogic, Misha, Solar Designer, tKC, tHATdUDE,
Samplex, Musashi, Zanzibar, XPhiLeZ.
And the rest of you, forgotten punks! :-]