19 Jun 2019

June update of unpackers

Molebox VS unpacker

This update fixes unpacking very large embedded files. Before the fix, unpacker would crash with "out of memory" exception when embedded file was larger than ~800MB. Thanks to MMM for reporting the bug.

Also:

  • Significantly improved performance when loading large files

Enigma Virtual Box unpacker

Added support for never seen before Enigma Virtual Box version (probably buggy early build of v7.30?).

Molebox v2.x unpacker

It was not necessary to update Molebox v2.x unpacker, so the link below is just for your convenience:

25 thoughts on “June update of unpackers

  1. Avatar

    {hidden link}

    ] Loading file: C:\Users\Administrator\Desktop\GameServer.exe
    [+] MD5: 2e7a8c7e8c9df41346e3502e4152e415
    [i] Molebox type: new (v4.4325..v4.5462, v4.6000)
    [i] Exact MoleboxVS version: v4.5462 (4ED59C30)
    [i] Succesfully loaded 21 lines from C:\Users\Administrator\Desktop\mole_dictionary.txt.
    [i] Removing anti-hacking protection
    [!] WARNING: fixing relocations failed! File will probably not run!
    [!] WARNING: fixing relocations failed! File will probably not run!
    [!] WARNING: fixing relocations failed! File will probably not run!
    [!] WARNING: fixing relocations failed! File will probably not run!
    [!] WARNING: fixing relocations failed! File will probably not run!
    [!] WARNING: fixing relocations failed! File will probably not run!
    [!] WARNING: fixing relocations failed! File will probably not run!

    • Avatar

      Thank you, I'm aware of that problem.

      I have very little free time but I will try to fix the problem someday. :)

  2. Avatar

    {hidden link}

    [+] Filename: D:\MusicTools 1.2.3.exe
    [+] MD5: 8e77b5669b4ac8ecbe13848d2c6bc553
    [+] x86 executable
    [+] Embedded files are compressed
    [+] EnigmaVB version: UNKNOWN
    [!] Unknown EnigmaVB version, cannot guarantee that unpacking will work properly!
    [+] Unpacked main file: D:\MusicTools 1.2.3_unpacked.exe
    [+] Finished!

    It can unpack the main program, but can not unpack the resource file, please help me!

  3. Avatar

    Hello kao i hope you can fix also the HIDE Features in Molebox VS :) Or if you have paid version of that we can talk :)

  4. Avatar

    The unpacked .exe of this file is broken.
    Can anyone help me?
    Following file contains log message and original file.
    {hidden link}

    • Avatar

      CAN YOU FUCK OFF WITH YOUR SIMPLISTICS UNPACKERS?
      These are not simplistic and for the fact you are complaining about an unpacker means you are a dev or a user of these, so you should not use or create these packers

      CAN'T YOU DO ANYTHING ELSE THAN THOSE THREE?
      Kao is probably the most advanced reverser in the public RE scene he has proven himself time and time again
      just look at 2019 flare-on he's completed it this year like he has many years prior

      YOU WOULDN'T BE ABLE TO UNPACK ANYTHING MORE COMPLICATED THAN THE UPX
      see above

      YOU ARE A DISGRACE TO THE REVERSE ENGINEERING WORLD
      Without kao many of the current reversers probably would not exist with the questions he answers and advices he gives

      SO FUCK OFF AND MAKE ME A SUSHI INSTEAD YOU DIRTY CHINAMAN
      Great way to show your age

    • Avatar

      First the idea of using reverse engineering is to demonstrate the weakness of the programs. A programmer can choose a particular challenge to prove himself or even to demonstrate a weakness of certain software.
      Probably, I think Kao only chooses free programs to not have too many problems with companies where software is paid for. And even if he did, and didn't have problems with it, the company could take advantage of the flaw shown and improve its product. If the level of security of this product improves, and the company makes millions in the digital market, would you be satisfied with not earning anything for example?

      Jobs like these programmers do only if they are paid for by the companies themselves.

  5. Avatar

    Hello,

    Thanks for your amazing work, version 9.30 breaks your unpacker (0.57 says unknown version detected), please update the unpacker if you get a chance, thanks again.

  6. Avatar

    EnigmaVBUnpacker v0.57, compiled on 21-06-2019 11:28
    Supports Enigma Virtual Box v4.10..9.20
    Latest version always on {hidden link}

    [+] Filename: E:\1\RJ183493\medical_ver_1_0\Game_boxed.exe
    [i] Loading large file, it might take some time...
    [+] x86 executable
    [+] Embedded files are not compressed
    [+] EnigmaVB version: UNKNOWN
    [!] Unknown EnigmaVB version, cannot guarantee that unpacking will work properly!
    [+] Unpacked main file: E:\1\RJ183493\medical_ver_1_0\Game_boxed_unpacked.exe
    [+] Finished!

    Hi, sir
    i try different version of unpack files but it is still not useful
    my friend buy this game from dlsite, do i need to upload the file for u in order to solve this problem?

  7. Avatar

    EnigmaVBUnpacker v0.57, compiled on 21-06-2019 11:28
    Supports Enigma Virtual Box v4.10..9.20
    Latest version always on {hidden link}

    [+] Filename: D:\DUMP\HashFinder\HashFinder.exe
    [+] MD5: 9867ae55bdaf8e7e48d9afc12fcda5dc
    [+] x64 executable
    [+] Embedded files are not compressed
    [+] EnigmaVB version: UNKNOWN
    [!] Unknown EnigmaVB version, cannot guarantee that unpacking will work properly!
    [+] File "D:\dsfa\Brute\DUMP\HashFinder\%DEFAULT FOLDER%\ControlzEx.dll", size=0x2C000
    [+] File "D:\dsfa\Brute\DUMP\HashFinder\%DEFAULT FOLDER%\MahApps.Metro.dll", size=0x10BC00
    [+] File "D:\dsfa\Brute\DUMP\HashFinder\%DEFAULT FOLDER%\System.Windows.Interactivity.dll", size=0x9C00
    [+] File "D:\dsfa\Brute\DUMP\HashFinder\%DEFAULT FOLDER%\xNet.dll", size=0x1D400
    [!] Warning: cannot fix PE Exception directory. Unpacked file may or may not work. Be careful!
    [+] Unpacked main file: D:\dsfa\Brute\DUMP\HashFinder\HashFinder_unpacked.exe
    [+] Finished!

    File is still not useful, pls fix it =(

  8. Avatar

    I am having a problem with a Japanese program called SCWU, the program (demoleition-v0.60)
    reports that the molebox version present in SCWU.exe is modified or unknown I need help to unpack this 2d fighter maker engine...

    Link: {hidden link}

Leave a Reply to kao Cancel reply

  • Be nice to me and everyone else.
  • If you are reporting a problem in my tool, please upload the file which causes the problem.
    I can`t help you without seeing the file.
  • Links in comments are visible only to me. Other visitors cannot see them.

Your email address will not be published.

4  −  three  =