How to unpack most .DLL files for Hex-Editing

Unpack .DLL Files

Hey everyone, WarPathSin has made a thread on how to hex-edit a .DLL file to remove the advertisements when you leech a hack

He did not, however, explain how to unpack a .DLL file. Any coder knows that an unpacked file is pretty much like letting a mosquito suck your blood.

So...here are the tools you need:

PEiD
This will tell you what the file has been packed with. The file has been attached to the bottom of this thread.

Screenshot:


PE Explorer
This is a program that will do ALL the work for the unpacking. It will be able to unpack most of the packers that the .DLL files are packed in. The file is attached to the bottom of the thread.

Credits to PE Explorer: EXE File Editor, Resource Editor, DLL View Scan Tool for 32-bit Windows PE files, Disassembler. for making this nifty program.

Screenshot:


How it works
First off, you need to obviously open the program. The screenshot above shows the menu.

Next, you will open the file.



Then, when you finish opening the file, it will show you some text on the bottom.



Then you save the the file to your desired destination, and then your file should be unpacked!

Proof it works
Before:


After:


Virus Scans
PE Explorer
Virustotal. MD5: 39e86a49a490cf699f8ff928209191fa
PE.Explorer_setup.rar MD5:39e86a49a490cf699f8ff928209191fa - VirSCAN.org Scanners did not find malware!

PEiD
Virustotal. MD5: e9e042601250296bcc97949077654d77 Trojan/HTML.IFrame (Suspicious) - DNAScan Suspicious File

VirSCAN.org only allows 20 files to be scanned. PEiD archive contains a total of 24. I am unable to scan it with this scanner. Please understand this misfortune.

Hex-Editing Rules
Please make sure to read the thread below that explains the rules of hex-editing clearly for MPGH. Please abide by the rules to ensure there is no consequences.

http://www.mpgh.net/forum/164-combat...must-read.html

Hope you find this guide to be useful!