46 thoughts on “Happy 2024!

    • As far as I know, there is no public unpacker for Enigma Protector. I think there are some OllyDbg/x64dbg scripts for unpacking but they don't extract the embedded files.

  1. hello kao
    I tried unpacking a file that was about 1.6GB and had 70GB of free space on my hard disk, but it still said "There is not enough space in working directory."
    I don't have much more free space on my hard disk. Is this reasonable? How much free space do I need?
    Thank you

    • My unpacker expects disk free space to be 8 times the size of packed file. If you have a 1.6GB file, it would expect ~12GB free space.

      If there's a bug, I'll be happy to fix it. But to do that, I'd need to learn more about your system. Can you please tell me size and free space on all your disks? Where was the packed file located? Where's unpacker located? How did you launch the unpacker?

      As a workaround, you can use command-line parameter "/nodiskspace" to disable the check. But if you run out of disk space during the unpacking, it will crash!

    • If mega.nz is blocked in China or anywhere else in the world, there is nothing I can do about that.

  2. Hi Kao, I found this app by chance last year (v0.61) and it had been a great help in unpacking of files for modifications. Till now I did not found any issues, works great. Also, Thanks a bunch for the new update.

    Note: This is not about the unpacker. I found some issues with EVB (10.60) that certain apps don't work after boxing, so I switched back to EVB (10.40). And everything goes fine now.

  3. Hey Kao, thanks again for your recent release of the unpacker. So I came to this problem where an EXE had an Enigma & Obsidium as its protection software as stated by Detect It Easy. I tried using your Unpacker but sadly no luck, do you have any advice or recommendation on how to bypass an Obsidium protected file? Any help would be appreciated

      • Hey Kao, thanks for the reply.
        I have tried VFS before but sadly it can't unpack it, I guess my only option is to try and do it manually like you mentioned. But yeah Obsidium is still vey hard to decrypt so thats a challenge of its own.
        Thanks again, have a good day

  4. Hello Kao, I've encounter an EVB packed RPG MV game it only could detected by 0.62 unpacker while it will crash in the middle of unpacking. How could I provide the file to you?

    • Hi Cal,
      please upload your file to some file sharing service (like mega.nz/mediafire.com/workupload.com) and send me the link in the comment.

      Links in comments are moderated and visible only to me.

        • Hi,
          Unpacker works fine on my machine and unpacks all the files properly. Could you please describe the exact steps that lead to the crash? Or, even better, make a video?

          Please try to include everything that might be useful for catching this elusive bug - hardware specifications, disk free space, running antivirus software, and so on.

          If you're not comfortable sharing that information publicly, my email address is at the bottom of the page.

          • I found what happened, the full path of the extract target location too long and it just crash during the process. Thanks Kao

          • Thank you so much for this information, I really appreciate your time and effort! :)

            I'll see whether I can do something about that in the next version of unpacker..

  5. i am not getting the source ?
    i am getting Invalid MethodBodyBlock: Invalid relative virtual address (RVA): 0x0003C154
    its .net apps

    here is the app
    {hidden link}

    • The file be_forcer.exe and also bofer_unpacked.exe are protected with some .NET protector I don't recognize.

      You will need to unpack that protection to be able to see the decompiled code. But I can't help you with that.

  6. Hi Kao, I really like the unpacking program you created and it helped me a lot. It was really good for unpacking packing programs made up of enigma or mole.
    But I have one question. I don't know the exact packing program, but do you know of a packing program called vProtect? I am leaving a question because I am having trouble unpacking the file.

  7. Hello Kao,

    Do you have any advice or insights into tackling DNGuard HVM? I believe the trial version has light protection but the paid version of it I have had trouble reversing

    • I haven't looked at DNGuard HVM for years now.

      Back in the day, the trial version was relatively easy to unpack, the full one had Themida(?) applied over their HVMRuntm.dll which made analysis harder.

      It's a reasonably good protection but used on very boring targets (mostly Chinese-made applications and MMORPG-related things).

  8. Hey Kao,
    I was trying to unpack an EXE but ran into a problem that said "EXCEPTION EOutOfMemory"; is there a workaround for this type of error?

    • Probably. But I need to see the problematic file first. Could you please upload it to Mediafire/MEGA/Workupload and send me the link?

      • Oh sure, the file can be found here {hidden link}
        But if its hard to download I'll try and upload it on Mediafire.

        • MKPX
          Looks like your file is built with BoxedApp Packer, my unpacker can't help you with that. However, there are other tools that you can find on Google. :)

          I still want to fix the EOutOfMemory error - can you tell me more about your system? What Windows version you're using and how much RAM you have?

          • Oh so it was BoxedAppPacker, thanks for the info I'll try n look further into it.

            Oh sure, Im using Windows 10 64bit & 16 GB RAM. Would this error be possible because its a 64 bit executable?

  9. Enigma Virtual Box has been updated to version 10.70. Is it possible to update the unpacker accordingly?

  10. Hi what is this error

    x86 executable
    Didn'tfind"EVB" signature
    This file is not protected with enigma virual box or is hacked.

    The die program says it is protected by Enigma virtyual box.

    • I can't help you without seeing the file. Please upload it to Mega or Mediafire and send me the link.

      • It prompts that the enigmavb version has been updated, and the packaged version will prompt that it cannot be decompressed.

      • [+] Filename: Z:\BaiduNetdiskDownload\西游记 幻想西游释厄传\西游记 幻想西游释厄传\Game.exe
        [i] Loading large file, it might take some time...
        [+] x86 executable
        [x] Didn't find "EVB" signature.
        [x] This file is not protected with Enigma Virtual Box or is hacked.

  11. Hello Kao, is it possible to update the tool? The new version of enigmavb is unable to be decompressed

Leave a Reply

  • Be nice to me and everyone else.
  • If you are reporting a problem in my tool, please upload the file which causes the problem.
    I can`t help you without seeing the file.
  • Links in comments are visible only to me. Other visitors cannot see them.

Your email address will not be published.

 −  six  =  zero