                                      
                                          
                               
                                     
                               

                                     v2.0

                       PESHiELD 0.2b and 0.2b2 unpacker

Intro
~~~~~

This is unpacker for protector called PESHiELD versions 0.2b and 0.2b2. The
files that are encrypted by these versions of the protector are automaticaly
decrypted.

What's new
~~~~~~~~~~
Previously I released DOS version of PESHiELD 0.2b2 unpacker. This is the
win32asm version and it have many new improvements:

- file size limit does not exist anymore
- nice looking GUI added (thanks tARG0N/[cRO] for the gfx :)
- support of PESHiELD 0.2b
- PE file checksum calculation (credits to tE! for his sources)


Usage
~~~~~
Using the unpacker is really easy (who does not know how to use GUI? ;):
- select the file to unpack
- press Unpack button and there is created OUT.EXE file which is the decrypted
  EXE file

Again as in the DOS version multiple layers are supported and the different
PESHiELD versions are automaticaly recognized, i.e. if the file is protected
several times using PESHiELD 0.2b and 0.2b2 versions and contains the both
versions in protection layers - the file will be unpacked successfully.


To do
~~~~~
- rebuilding the resources allowing to remove the PESHiELD layer(s) from file
- reloc decryption/decompression
- heuristic section rename
- displaying more information about unpacking process
- adding support for other PESHiELD versions
- creating .DLL with exported unpacker procedure (guess why ;)

Greetings
~~~~~~~~~
Everyone :)

Special greetings
~~~~~~~~~~~~~~~~~
Iczelion, tHE EGOiSTE, tARG0N, totnak, VAG

Contacts
~~~~~~~~
You can reach me via e-mail (unknone@mail.com) or via IRC (EFNet, #win32asm
and #UG2000).

Best regards,
Unknown One/[TMG]