|
PESPIN unpack
Hi!!!
I'm trying to unpack this progg
http://www.planetsquires.com/files/firefly_109.zip
It has 2 exe's, 1 packed with Armadillo (firefly.exe) that makes the "enter key" procedure and if you're in trial mode or enter the right key then launch the another EXE file (ffengine.exe) packed with PESPIN. If you run the second EXE directly it shows a msgbox "must be started using firefly.exe".
I think that it uses getcommandline with a specific string.
I'm trying to unpack the ffengine.EXE packed with PESPIN 0.3-0.4 (PeId info) and forget the first EXE and I'm using 2 methods:
a)Despinner 0.3: When open the packed EXE I get a GPF (XP SP2).
b)PESpin v0.3 Stolen Code Finder Olly script: I don't understand how it works.
anyone knows any tut about MANUAL unpacking PESPIN 0.3-0.4?
Regards
|