Log in

View Full Version : Unpacking PESpin v1.32?


Sheldoniq
January 20th, 2014, 05:59
Hello,
two days I grieve to unpack the exe.
This exe is packet in PESpin v1.32.
My attempts to expand the ends inoperative code.
Can some good soul given what I'm doing bad
Or I will be grateful for unpacking.

2906

evaluator
January 21st, 2014, 11:33
well, to help you, someone should sit & unpack it. then teach you..
I think, you should explore
1. protector's all available futures.
2. detect, which one are used or not used & go..

suggestion from me:
you can leave ripped-code in header-section, putting PE-header after it. saves time.

EDIT:
now, as I see, you have not restored stolen-OEP bytes. those bytes probably should be from 401000

EDIT2:
blah!
you just tried automated-unpacker tool...
so that is answer on your question: Can some good soul given what I'm doing bad