what is this packer?
piED v.9.4 say:nothing found*
2688
tnks

HOW packer?

KEMO SABE Mey!

(Yeah, I'm on a roll here!)

Have Phun

http://pid.gamecopyworld.com/ try ProtectionId, that should help

file is not packed or protected

2689
2690
2691

Ok really simple:



after a little of google skills we endup here:

http://bbs.pediy.com/archive/?t-95616.html

and one of the strings in file refers to www.dedj.com which seems to be hardware lock solution. Maybe not widely used, thus protectionId doesn't have it in signature db.

now added into pid

new release due soon.. promise, its currently in beta...

for those interested in pid contributing / testing etc, and why there's been no updates.. -> http://www.fileforums.com/showthread.php?t=94067&nojs=1

well, nothing understood about protection..
but program section need XOR 08D, then ROL 4. correct EIP,IT, EIP-after call to jump and it is MsVB6

ps. even not a packer..

didn't it require a driver ?

i think i dredged it but never got into it

There is code that can fool packer identifiers.

Thanks for the info. I will try it out.