Results 1 to 2 of 2

Thread: Unpacking PESpin v1.32?

  1. #1

    Unpacking PESpin v1.32?

    Hello,
    two days I grieve to unpack the exe.
    This exe is packet in PESpin v1.32.
    My attempts to expand the ends inoperative code.
    Can some good soul given what I'm doing bad
    Or I will be grateful for unpacking.

    FS.zip
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Musician member evaluator's Avatar
    Join Date
    Sep 2001
    Posts
    1,479
    Blog Entries
    1
    well, to help you, someone should sit & unpack it. then teach you..
    I think, you should explore
    1. protector's all available futures.
    2. detect, which one are used or not used & go..

    suggestion from me:
    you can leave ripped-code in header-section, putting PE-header after it. saves time.

    EDIT:
    now, as I see, you have not restored stolen-OEP bytes. those bytes probably should be from 401000

    EDIT2:
    blah!
    you just tried automated-unpacker tool...
    so that is answer on your question: Can some good soul given what I'm doing bad
    Last edited by evaluator; January 21st, 2014 at 12:03.

Similar Threads

  1. PESpin 0.3 , (0.7), 1.0, 1.1 & 1.3 unpacking tutorial
    By mr haggar in forum OllyDbg Support Forums
    Replies: 1
    Last Post: August 11th, 2005, 16:39
  2. Script for PESpin v0.7
    By hacnho in forum OllyScript Plugin
    Replies: 4
    Last Post: July 7th, 2004, 06:09
  3. PESpin 0.3x - 0.4x -> cyberbob Unpack Script v0
    By loveboom in forum OllyScript Plugin
    Replies: 1
    Last Post: July 5th, 2004, 16:51
  4. PESpin v0.3 Stolen Code Finder
    By loveboom in forum OllyScript Plugin
    Replies: 8
    Last Post: April 2nd, 2004, 21:47
  5. Unpacking !!
    By Nio-shai in forum Advanced Reversing and Programming
    Replies: 0
    Last Post: September 20th, 2001, 03:31

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •