Static Enigma Virtual Box Unpacker
I'm happy to present you a static unpacker for Enigma Virtual Box, versions 4.10-7.10 (latest at the moment). It can extract both virtualized files and registry keys. It will also "unpack" main executable.EnigmaVBUnpacker takes very conservative approach. If something doesn't look right, it will stop with an error message. Your file is probably modified to prevent unpacking and there isn't much I can do about it.
Known issues that I am planning to look at:
Cannot detect EnigmaVB version for some files. Extraction will still work.
x64 (PE32+) files are not supported;
Known issues I am NOT planning to fix:
External packages are not supported;
Files larger than 2GB are not supported;
Really old versions of Enigma Virtual Box are not supported;
Alternative tools and their problems:
https://github.com/EVBExtractor - supports only Enigma VB v6.60+, fails on compressed files larger than 64kb, doesn't support registry, doesn't fix main EXE, doesn't support virtual drives, requires Python.
https://forum.tuts4you.com/topic/26372-thinstall-dependancy-extractor/ - dynamic unpacker, doesn't fix main EXE, doesn't support registry.
http://nexenteam.net/index.php?option=com_content&view=article&id=14:enigma-virtual-box-dumper&catid=12&Itemid=125- Enigma Virtual Box Dumper by Predator. Doesn't dump embedded files or registry. Some of the unpacked files were invalid in my tests. Requires .NET 4.0.
Version history:
v0.11
Fixes issue with unpacked .NET files showing "not a valid Win32 application" (reported by Extreme Coders);
Fixes issue with overlay missing from unpacked main EXE (reported by Extreme Coders). Unpacked program may or may not work as expected, depends on what data are in overlay and how program accesses them.
v0.1
initial version.
Reporting bugs:
If you found a bug and want me to fix it, the only way is to make a proper bug report in this thread. Please follow these simple steps:
Make sure you are using the latest version of EnigmaVBUnpacker. It's possible that the bug is already fixed.
Make sure this is not a known limitation mentioned above.
OK, you really found a bug. Please make a post in this thread, and:
describe what is wrong. Is some extracted file broken? Is some file missing? Does EnigmaVBUnpacker crash?
provide full and complete output from EnigmaVBUnpacker. Copy the text and use tags, DO NOT post screenshots.
provide link to your executable. Please upload it via multiupload.nl, DO NOT post it attachment (see board rules).
I will look at your bug report as soon as I have time. Please do not send me PMs or emails, and do not bump your posts up. :)
EDIT: added link to Enigma Virtual Box Dumper by Predator, thanks xSonoro!
EDIT2: Attached v0.11, fixes bugs reported by Extreme Coders. Thank you! 答案;
如果你在论坛求助问题,并且已经从坛友或者管理的回复中解决了问题,请把帖子标题加上【已解决】;
如何回报帮助你解决问题的坛友,一个好办法就是给对方加【热心】和【CB】,加分不会扣除自己的积分,做一个热心并受欢迎的人!
回复 支持 反对 如果你在论坛求助问题,并且已经从坛友或者管理的回复中解决了问题,请把帖子标题加上【已解决】;
如何回报帮助你解决问题的坛友,一个好办法就是给对方加【热心】和【CB】,加分不会扣除自己的积分,做一个热心并受欢迎的人!
回复 支持 反对 还有另外一个解包工具。 我去,居然有脱的了,以前好多程序用这个加的,泪奔啊!{:301_972:} 可有屌丝途径乎 O(∩_∩)O 楼主强悍 学习了 感谢分享啊。 谢谢楼主的分享。 解包工具,下载试下。不知道能不能分解附加文件出来 不错下载了,测试了下,好像第二个工具运行不了