Quick Unpack V2.1
Quick Unpack v2.1 readme========================
Description
-----------
The program is intended for fast (in a few seconds) unpacking of packers and simple protectors:
32Lite
AnslymPacker
AREA51 Cryptor
Armadillo (minimal protection)
AsdPack
ASPack
ASProtect (old versions)
BeroEXEPacker
CD-Cops
DDeM
depack
DragonArmor
Exe32Pack
ExeCryptor (old versions)
ExeFog
ExeSax
ExeShield
ExeStealth
fEaRz Crypter
FreeCryptor
FriCryptor
FSG
HidePE
HidePX
hmimys-Packer
JDPack
KByS
kkrunchy
LameCrypt
Manolo
MEW
Minke
NeoLite
NME
NsPack
Orien
PackMan
PECompact
PEDiminisher
PE-PACK
PEncrypt
Perplex PE-Protector
PeTite
PEX
PI Cryptor
PKLite32
PollyBox
PolyEnE
Protection Plus
QrYPt0r NuTraL Poly
QuickPack
RLPack
Sopelka
StealthPE
TeLock (not all versions)
TheMida (minimal protection)
unnamed Scrambler
UPack
UPolyX
UProtector
UPX
WindOfCrypt
WinUPack
WWPack32
Yoda Crypter
Yoda Protector
YZPacker
...many others...
Quick Unpack tries to bypass all possible scramblers/obfuscators and restores redirected import. From the version 1.0 the opportunity of unpacking dll is added. From the version 2.0 the attach process feature added which allows to use Quick Unpack as a dumper and import recoverer. Scripts are also supported from version 2.0 which allows unpacking of more complicated protections. This makes Quick Unpack a unique software product which has no similar analogues in the world!
Use force unpacking tick. When the application is run QuickUnpack waits for the OEP breakpoint to trigger. But sometimes this breakpoint may be triggered several times but only the last one is the correct OEP. Using ForceMode option solves this problem. With this option after the application is run QuickUnpack counts breapoint hits and dumps the application only at the last stop. For DLL-files this option is always ticked and allows to restore relocs.
If you have any suggestions or found any bugs please tell me about them. You can post them on the official site: http://qunpack.ahteam.org or you can find me at CRACKLAB.rU forum or exetools.com forum or you can find me at irc://irc.cracklab.ru at #tport or irc://irc.street-creed.com at #tport
The license and rights
----------------------
The list of sources used in coding Quick Unpack:
stripper asprotect unpacker by syd
PEiDLL.dll by Bob
GenOEP.dll by Snaker
for other OEP finders the author is mentioned in the program
LUA scripting language from http://www.lua.org
History of the versions
-----------------------
v2.1
[!] fixed many bugs like crash on some applications while restoration of resources
[!] multithreaded applications are now handled properly
[+] added ability to set end of module when tracing import functions. When a reference to import is found it's analysed if it leads to some space outside of the module (not to trace some internal functions). But some packers redirect import to the last section. This option is intended to aid this problem. This is RVA
[+] added ability to put import table at given RVA instead of adding extra section
[+] added ability to set RDTSC delta for RDTSC hook (see more on rdtsc_delta in Scripts.eng.txt)
[+] Load libraries only option added to import recovery methods. this option doesn't actually recover import it just puts 1 import function from every loaded DLL into the import table. thus dump will be loaded with all the necessary libraries and will use old addresses for import functions which were set by a protector. this option can be used if import redirection is too complicated but the dump will stop working after service pack or some other patch installation
[+] Execute functions while tracing import option is added. by default while tracing import functions are not executed but some protectors need result of these functions to operate correctly so this option can be used
[+] Process call xxx/jmp xxx option is added. some protectors change import calls and jumps from call /jmp to call xxx/jmp xxx. this option is intended to work also with these redirections
[+] added several new functions and variables for the scripts
[+] UsAr's generic OEP finder now supports DLLs
[+] new Vista manifest added
DL:
http://qunpack.ahteam.org/wp-con ... 08/03/qunpack21.zip
From:
ARTeam
/// 支持 下了一个 嘿嘿
/// 顺便灌水勒~ 还不睡觉
哈哈
第一人 我的沙发。。。。。
HOHO
你发的是汉化的不
我有汉化的 昨天才出来的新版本，你都有汉化的了。。。。。。。。。。。 http://www.52pojie.cn/read.php?fid=2&tid=731&u=949
我就看个名字 不行呀～
没看版本号！
郁闷 ～ 好东西 谢谢的了
谢谢H大大的分享
页:
[1]