How to unpack most .DLL files for Hex-Editing

[scimmyboy]

Unpack .DLL Files

Hey everyone, WarPathSin has made a thread on how to hex-edit a .DLL file to remove the advertisements when you leech a hack

He did not, however, explain how to unpack a .DLL file. Any coder knows that an unpacked file is pretty much like letting a mosquito suck your blood.

So...here are the tools you need:

PEiD
This will tell you what the file has been packed with. The file has been attached to the bottom of this thread.

Screenshot:


PE Explorer
This is a program that will do ALL the work for the unpacking. It will be able to unpack most of the packers that the .DLL files are packed in. The file is attached to the bottom of the thread.

Credits to PE Explorer: EXE File Editor, Resource Editor, DLL View Scan Tool for 32-bit Windows PE files, Disassembler. for making this nifty program.

Screenshot:


How it works
First off, you need to obviously open the program. The screenshot above shows the menu.

Next, you will open the file.



Then, when you finish opening the file, it will show you some text on the bottom.



Then you save the the file to your desired destination, and then your file should be unpacked!

Proof it works
Before:


After:


Virus Scans
PE Explorer
Virustotal. MD5: 39e86a49a490cf699f8ff928209191fa
PE.Explorer_setup.rar MD5:39e86a49a490cf699f8ff928209191fa - VirSCAN.org Scanners did not find malware!

PEiD
Virustotal. MD5: e9e042601250296bcc97949077654d77 Trojan/HTML.IFrame (Suspicious) - DNAScan Suspicious File

VirSCAN.org only allows 20 files to be scanned. PEiD archive contains a total of 24. I am unable to scan it with this scanner. Please understand this misfortune.

Hex-Editing Rules
Please make sure to read the thread below that explains the rules of hex-editing clearly for MPGH. Please abide by the rules to ensure there is no consequences.

https://www.mpgh.net/forum/164-combat...must-read.html

Hope you find this guide to be useful!

[RedThunder]

wow that is extremely usefull ty, and ill even click teh button unliek most ppl

[scimmyboy]

wow that is extremely usefull ty, and ill even click teh button unliek most ppl

Thank you for supporting me. I will also click the button as well.

[RedThunder]

just wondering how do i tell what its packed with

[scimmyboy]

just wondering how do i tell what its packed with

use PEiD to do that

[RedThunder]

lol ok so ive done that now how do i unpack it adn save it

[scimmyboy]

lol ok so ive done that now how do i unpack it adn save it

use PE Explorer. the thread is pretty self explanatory lol

[CRUSTY]

I cant get it to unpack sean's wall hack...

Someone has probably already tried to, but it was worth the attempt

[RedThunder]

well how do i change waht t unpacks cause im trying to unpack seomthing but its nto working

[Grim]

if the file you are trying to unpack is packed with Themida. Give up now.

[CRUSTY]

Yeah

I saw you ingame yesterday

[RedThunder]

i dont know whast tis packed with where does it say it

[CRUSTY]

Open it and in the bottom right corner theres a "->" button or something

Click options

[Grim]

i dont know whast tis packed with where does it say it

open it up in PEiD and click the "??" button at the bottom. make sure you open all the - buttons on the right side

[zmansquared]

crap. i was trying to unpack a vip hack. its packed with themida. anyway to unpack war?