Results 1 to 7 of 7

Thread: please about nsp pack

  1. #1
    milad
    Guest

    please about nsp pack

    If anybody have informantion about unpack nsp pack
    Please answer me
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    mr haggar
    Guest

    please about nsp pack

    What version?

    /////////////////////////////////////////////////////
    /*
    Script for unpacking NsPack v2.3 by haggar
    */
    msg "Ignore ALL exceptions!"
    var addr
    sti
    sti
    mov addr,esp
    bphws addr,"r"
    esto
    bphwc addr
    sti
    an eip
    cmt eip,"This is the OEP."
    ret
    ///////////////////////////////////////////////////

    ////////////////////////////////////////////////////
    /*
    Script for NsPAck 3.1 version
    */
    msg "Ignore all exceptions!!!"
    find eip,#E9????????8BB5??FEFFFF0BF60F84970000008B95??FEFFFF03F2833E00750E#
    bp $RESULT
    esto
    bc eip
    sti
    an eip
    cmt eip,"<-- OEP! Found by haggar "
    ret
    ////////////////////////////////////////////////////////////////////
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    milad
    Guest

    please about nsp pack

    Thank you Mr hagger For your reply
    in memory with olly onlly see nsp0 nsp1 nsp2
    in pied nothing*

    When press ITA AutoSearch in Imprec see Message
    could not find anything good at this OEP! :-(
    and can't unpack it Is there any tutorial about unpack nspack
    I had try with script anthor script and the same message
    If you can help me
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    milad
    Guest

    please about nsp pack

    Dear Mr Haggr I think it is nsp 1.4
    can you help me with script or the to unpack it
    thank's
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #5
    Lord_Looser
    Guest

    please about nsp pack

    I have no idea of unpacking NsPack but perhaps you forgot to substract OEP with modules base address:
    OEP in ImpRec = OEP in OllyDbg - 0x0400000 in most cases.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #6
    mr haggar
    Guest

    please about nsp pack

    I think that one of those two scripts ends on jump to OEP. So you need just to hit F7 once and then you are at the OEP. I cannot help you more because it is simple packer, more help would mean that I unpack it for you. You'll find way
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  7. #7
    milad
    Guest

    please about nsp pack

    Thank you mr haggar and Lord_Looser
    I am beginner in crack, you and Gabril and ricardo and all in the forum
    make me love the crack and love the assembly and Programmer

    when use your script
    0053D6FC F3:A4 REP MOVS BYTE PTR ES:[EDI],BYTE PTR DS:[>;

    <-- OEP! Found by haggar
    you must press shift+f7 when press it you arrive into nt.dll
    I don't know what i can to do so ask you to help me
    I wish to apply my thanks again
    My mail is tannous70@hotmail.com If i can get your mail
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Debugging a XP service pack problem
    By ndoerre in forum OllyDbg Support Forums
    Replies: 2
    Last Post: October 22nd, 2005, 06:08
  2. How does Ollydbg determine if a file might be pack
    By 1bitshort in forum OllyDbg Support Forums
    Replies: 3
    Last Post: July 8th, 2004, 02:24
  3. Aspr - Aspack double pack? :)
    By kandinsky in forum Malware Analysis and Unpacking Forum
    Replies: 15
    Last Post: November 28th, 2002, 03:27
  4. Is there anyway to identify the version of aspack used to pack a program?
    By ThrillSeeker in forum Advanced Reversing and Programming
    Replies: 1
    Last Post: March 25th, 2001, 01:31

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •