Unpackers/decrypters/unprotectors
Generic/universal unpackers/dumpers
|
ProcDump by G-RoM, Lorian and Stone. 18.I.2000.
News:
- Dump to disk a running process & fix it so that u can
discompile it. |
|
Win32 Intro by Vitaly
Evseenko. 21.IX.1999. Win32Intro is a generic executable unpacker/dumper. It can unpack compacted or encrypted Win32 executable files without knowledge about their compressor and without any need of debugger. It also unpack files that includes some anti-debugging traps (for instance, use of int 03). |
|
Related links: |
Unpackers for freeware packers/protectors
|
UNPE-SHiELD by G-RoM. 1.VI.1999. UNPE-SHiELD is a program, which decrypts 32-bit Windows EXE files "protected" by PE-Shield. The version supported are the 0.1á, 0.1b, 0.1c and 0.1d. |
|
PESHiELD 0.2b2 unpacker by Unknown
One. 16.XI.2000. PESHiELD v0.2b & 0.2b2 specificied unpacker. Included source. |
|
UnPeShield by Iczelion.
22.VIII.2000.
News: This unpacker is written in win32asm, for use with PEShield version 0.25 only. Full Win32Asm source code included. |
|
de-CodeCrypt by xOANINO. 10.V.2000. Full ASM source included. The resulting rebuilded exe is 100% like the original one. |
|
un-CodeCrypt by totnak. 02.IV.2000. Unpacker for CodeCrypt v0.163 beta. Included full NASM source. |
|
Others. |
|
UnPEPack by M.o.D. 21.IX.2000. UnPEPack is a unpacker for files compressed with PE-Pack. |
|
Bye PE-Crypt by Iczelion
& Plushmm. 22.I.1999. The ultimate unpacker for PE-Crypt 1.02. Can decrypt any files encrypted by PE-Crypt 1.02, including DLLs. Coded entirely in win32asm by Iczelion & Plushmm. |
|
PEUNLOCK-NT *aLL VERSIONS* by xOANINO.
22.I.1999.
- All known PELOCK-NT versions supported : v2.01, v2.02b, v2.03, v2.04. |
|
UnPEProt by Lorian. 23.I.1999.
If you should ever face in reallife with this stupid crap calling
itself a PE protector this little handy unpacker will save you the 1
minute you spend on doing a manual unpack. |
|
UNPCPECa by Prophecy. 24.VI.1999. UNPCPECa will decrypt any PE executable/dll which has been encrypted with PCPEC "alpha - preview" or PCPECa for short. PCPEC stands for Phrozen Crew PE enCrypter. It is a passive decrypter, it does not require the executable/dll to be loaded. |
|
tEunlock by r!sc & DAEMON. 06.X.2000.
-Kills the Telock section & almost rebuilds resource section |
|
unNFO by Dulek. 17.V.2000. unNFO is a program, which decrypts any PE executable files encrypted by NFO v1.0. |
|
DeX by Chafe. 29.X.2000. Decompressor for PeX v0.99. DeX is able to reconstruct most parts of the header and sectiontable. Flags cannot be restored and sectionnames are only guessed, but the output is possible to execute and disassemble. Included source. |
|
NoodleKiller by Unknown One. 07.XII.2000. Includes source code. |
|
UnVGCrypt by LuTiN NoIR. 15.X.2000. UnVGCrypt is a little VGCrypt decryptor, i wrote during one afternoon ... so for thus who want to learn unpackers/uncryptors i believe it is a good approach. Included ASM sources. |
Unpackers for commercial packers/protectors
|
DeShrink by [j0b].
12.II.2000.
News: DeShrink is a tool to unpack Files compressed with the all so popular Shrinker done by Blink Inc. |
|
UnShrinker by Andrew Shipinsky.
12.I.1999. Decompress shrinked files with Shrinker 3.2/3.3. |
|
Ned by snajder.
19.I.2000.
News: NED is deshrinker for SHRINKER 3.xx compressed files(NE-Visual Basic 3.0). I made it 'cause all other similar programs doesn't support NEs. This is is the first public release of NED. It works with NE VB 3.0 files ONLY!!! |
|
un-ASPack by dtg. 26.VIII.1999. Unpacks ASPack 1.02b, 1.07b, 1.08.00/1/2/3. Included full asm source. |
|
UnAspack by Bi
Wei Guo. 13.VI.2000.
News: Very good unpacker for ASPack. With GUI. |
|
Anti-Aspack by LuTiN NoIR. 17.XI.2000. This is a small Aspack unpacker. It currently works on files protected with Aspack v2.11 only. It works only under w9x because I use ring0 mode to let the loader decrypts himself. Source included. |
|
PEunCompact by Chafe. 10.X.1999. This is an unpacker for programs packed by a program called PECompact. It has only been tried with programs compressed using PECompact v0.971b, so I don't know if it works with others as well. |
|
tNO-Peunc by aK_ of tNO. 21.V.2000.
News: tNO-Peunc is an Unpacker for PE-Compacted files and will create 100 % working and "disassembleable" unpacked Versions of the packed PE-Files in its final Release. |
|
UnPECompact by yoda. 22.IX.2000.
News: UnPECompact is an Unpacker for exe files which have been compressed with PECompact. It should unpack all PECompact versions. Source code included. |
|
Asprotect Deprotector by r!sc. 22.X.2000. rAD is a little asprotect decryptor/unpacker. It currently works on files protected with asprotect v1.1 only. Source code included. |
|
Anti Aspr by LuTiN
NoIR/TeeJi. 04.IX.2000. This program is intended to obtain a functional dump programs protected with Asprotect. It removes the anti-debugger as well as the destruction of the import table. It also recovers new eip and makes indefinitely loop the prog on it even in memory. Then a dumper and a rebuilder (modified) deal with creating a dump. |
|
CASPR by SAC.
23.XI.2000.
News:
- Support ASProtect v1.0 - v1.1. |
|
Un-Armadillo by therain. 21.VIII.2000.
News: Un-Armadillio is a program used to remove Armadillioing in programs. |
|
Armadillo Killer by ArmKiller. 11.XI.2000. Deprotector for Armadillo 1.7x - 1.8x. |
|
DBPe. |
|
undbpe by tender. 19.IX.1999. Remover for dbpe (aka phantasm 1.2). |
|
UnDBPE by totnak. 10.IX.2000. remover for dbpe (ding boy pe lock) v1.50. |
|
CD. |
|
C.u.Dilla by r!SC. 02.XI.1999.
Safedisk/C-dilla unwrapper / decryptor.. Runs on WIN9x ONLY! |
|
unSafedisc by r!SC. 26.IX.2000.
News: A tool to deprotect SafeDisc copy protection. |
|
Safedisc Annihilator by ArthaXerxes.
01.XI.2000. Safedisc Annihilator is a generic Safedisc crack. It will allow you to run the program without the original CD inserted. Sometimes, you may even be able to run the program without any CD inserted at all, this depends on the target (i.e. some programs ask for the CD, some not). |
|
Others. |
|
PCGuard Decryptor by da DAEMON.
24.X.2000.
- decrypts each section that got encrypted |
|
Petite enlarger by r!sc. 11.IX.2000.
News: Emulates how petite unpacks the program into its own address space, then rebuilds the file in a buffer and dumps to disk. Included source code. |
|
eLicense VTCyberPack Unwrapper by MAK
& EinZtein. 23.XI.2000. It traces the entrypoint of your target eLicense VTCyberpack-Protected application, dumps it, rebuilds the imports, and corrects the PE-Header. You are now free from whatever limit, eLicense VTCyberpack might have caused, and you are free to patch the target application in any way you like. |
|
DeSoftSentry by Cyber Daemon.
27.IX.2000. Unpacker for SoftSentry 3.0. Included version for 9x, NT and source. |
|
VBOX Unwrapper by MKEZ Productions.
25.IX.2000. It traces the entrypoint of your target VBOX-Protected application, dumps it, rebuilds the imports, and corrects the PE-Header. You are now free from whatever limit, VBOX might have caused, and you are free to patch the target application in any way you like. |
| WKT_tElock_Dumper
by Gadix/MrOcean. 27.X.2001. News: GENERIC_WKT_tElock_Dumper can be to unwrap all tElock versions since 0.60 (with some few modifications you can make it for ALL versions). Probably works with many "no public versions". |
| Ni2Untelock
by Ni2. 31.XII.2000. Unpacker for tElock 0.61 and upper. With source codes. |
| PeDiminisher
Unpacker by LaptoniC. 14.IV.2002. These are two unpackers for PeDiminisher with different approaches. |