Jump to content
GautamGreat

Unpacking PESpin Ultra Fast

Recommended Posts

GautamGreat

Hello,

Here is quick tutorial about unpacking PESpin. I called it ultra fast because I didn't showed methods to reconstruct OEP. You have to handle it by your self. If you have any queries just post below.

 

Tools :

OllyDBG

Scylla

UIF

 

 

PESpin Unpacking.rar

  • Like 3
  • Thanks 2
  • Upvote 2

Share this post


Link to post
Share on other sites
bubu54

GautamGreat 

Thank you very much just one question what is UIF finding it or?

Share this post


Link to post
Share on other sites
GautamGreat
22 minutes ago, bubu54 said:

GautamGreat 

Thank you very much just one question what is UIF finding it or?

Hi,

UIF is used when all imports are not in one section. It redirect all imports available from start VA to end VA in new IAT VA.

that's all

Share this post


Link to post
Share on other sites
bubu54

thank you

Excuse me for disturbing you once again but what version of OllyDBG do you have?
otherwise it's crazy how fast you go it's like you always did that

It's crazy lol

Share this post


Link to post
Share on other sites
GautamGreat

Its OllyDBG v1.10 with some plugins to make my work fast.

Share this post


Link to post
Share on other sites
bubu54

Re GautamGreat

I come back to you it is rather difficult to decompact you can not pass me the hold that you made?

If it's possible of course

Thanking you

Share this post


Link to post
Share on other sites
GautamGreat
22 hours ago, bubu54 said:

Re GautamGreat

I come back to you it is rather difficult to decompact you can not pass me the hold that you made?

If it's possible of course

Thanking you

I gave the video tutorial why don't you follow it.

Share this post


Link to post
Share on other sites
bubu54

Excuse me but when I start ollydbg I do not fall in the same place as you it is normal?

iq5n.jpg

thanking you

Share this post


Link to post
Share on other sites
GautamGreat
30 minutes ago, bubu54 said:

Excuse me but when I start ollydbg I do not fall in the same place as you it is normal?

iq5n.jpg

thanking you

You are at System Breakpoint.

Did you configured your ollydbg properly ?

Check this out : http://www.crackinggsm.co.in/2016/02/today-i-will-give-you-working-ollydbg.html

Share this post


Link to post
Share on other sites
bubu54

Thank you for your answer I followed your tutorial but it goes too fast you press shortcut keys in ollydbg no?

Share this post


Link to post
Share on other sites
GautamGreat
On 2/13/2018 at 7:33 PM, bubu54 said:

Thank you for your answer I followed your tutorial but it goes too fast you press shortcut keys in ollydbg no?

Hi, 

I used basic shortcuts.

 

http://www.ollydbg.de/quickst.htm

Share this post


Link to post
Share on other sites
bubu54

Thank you for your link on shortcuts but that is which one should use and when

Excuse me for disturbing you again

Share this post


Link to post
Share on other sites
GautamGreat
On 2/16/2018 at 3:56 PM, bubu54 said:

Thank you for your link on shortcuts but that is which one should use and when

Excuse me for disturbing you again

Hi,

Just watch Lena151's tutorial series to know the basics. I'm not gonna explain all the basics things here.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×

Important Information

Guidelines