Now my unpacker detects Enigma Protector and nicely explains to user that's it's not the same as Enigma Virtual Box. Something like this:
Hopefully now users will stop confusing those 2 products. π
Download link: Please get latest version from this post
... and hopefully they'll stop moaning without reasons π
I wouldn't call that moaning. π But it gets really repetitive to explain the same thing over and over again..
Tried it on a 1.40 GB '*.exe' file and "out of memory" popped up.
Maybe it's too big for it to unpack? Or is it just the packed file itself?
Either way, thanks for this <3
When I made this tool, I had no idea that there are so many that large EXE files. π I am planning to fix the problem but it's not that easy.
Enigma Protector 4.0 not supported !
Yes, it clearly says that in both the description and the screenshot.
Love! Love! Love! Very nice.
woooo
i give this app "Most Useful App of The Day"
i have 1.1 gb file and Unpacker say "out of memory"
fix please
Hello, are there any command-line switches to hide the window or close it after extraction finished?
No, there aren't. I want to avoid users making bugreports like "it just opened and closed immediately", "where are the extracted files?", etc.
But if you can give me a good reason why do it, I'll consider implementing this feature.
As for me I'd like to use it as a button for Double Commander, but when i launch the unpacker with a switch "%p" which means a full path of selected file in DC, then unpacker extracts files in the same folder, and a window doesn't close. I think it would be better, for example, to use few switches:
- for pointing Enigma File to be extracted (which, actually, works now)
- for pointing the end directory for extracted files
- for making a GUI window close right after extraction
- to create a log-file for error to be analyzed
It's not a bad idea, I'll think about it. No promises, however. π
Hello!
Don't want to push, but are there any movement with adding command-line switches?
You want me to spend several hours, so that you can save one mouse-click and few seconds on every launch of unpacker? Frankly, to me that doesn't look like a very good investment of my time.
I quickly hacked together this version: https://www.mediafire.com/?0db048q0iypgb2u. If you run it like this: EnigmaVBUnpacker.exe /nogui "c:\full\path\to\file.exe", it will run without GUI and will create file c:\full\path\to\!unpacker.log with the log. Main executable will be unpacked to c:\full\path\to\file_unpacked.exe and data files will go to folders like c:\full\path\to\%DEFAULT FOLDER%.
Hopefully that will keep you happy. π
some delphi not supported, can you help ?
Please upload the problematic file to mega.co.nz and tell me exactly what you did and what did not work.
test the "test_unpacked.exe"
{link_removed}
thanks
Yes, it's a known problem related to TLS.
Please edit unpacked EXE using CFF Explorer (or any other PE editor) to set TLS directory RVA/Size like this:
After that, your unpacked EXE will work just fine.
thanks~
You're welcome. π
Hello I have the same worries that "Shurut Sue and gdfg" 1,9Go for a file you have a new version I tried with 0.35 and 0.36? thank you
Honestly, I want to add support for large files but my free time is limited these days. π
You could check if EVB Extractor works for you. If it doesn't work, please upload file to mega.co.nz and send me a link - I'll see what I can do.
kao
Yes, but it would be perfect if the destination folder was named "packed_file_name_without_extension" instead of "%DEFAULT FOLDER%", and the main executable file together with lo-file were extracted to that folder too.
This will be really great.
...Any chance of publishing the source of the tool ?
If you don't have time, perhaps someone else will and having source at hand is always better in the long run.
Based on my previous experience with Meltdown, publishing sources of the tool doesn't help at all - only two persons gave anything useful back to the project. Therefore I'm not planning to publish sources of EnigmaVB unpacker.
But I could share the sources privately - if it would benefit the project somehow. Please email me with a more detailed proposal what you intend to improve and how and I'll look at it.
Or you can take open-source project EVBExtractor and improve it. Since it's written in Python and uses a different approach, it doesn't have 2GB file size limit.
Unfortunately, while I'm not all that bad in figuring out stuff in other people's code (sometimes even in languages I have little to no clue about, like ruby), I don't consider myself a real programmer.
But if you feel like giving out tips, EVBExtractor checks for .enigma1 section, what are the differences between that and .enigma2 ?
...sorry, false alarm...
Most recent version of pefile is for python3, EVBExtractor is still python2, in this particular case, that causes mismatch between unicode and byte strings, but just adding prefixes helped.
Still, if you know of any specific cases that are handled by your tool, but not EVBExtractor and have a good idea why, hints are welcome.
Copy-paste from an old thread on Tuts4You:
Alternative tools and their problems:
any update on unpacking large files? got a 1 gig exe i need unpacked
out of memory expanding memory stream
any update on unpacking large files please?
out of memory expanding memory stream
mega.nz/#!KtMlGTJK!SzGYLl4gfi2T0xJ1Sbaz6iz_Nc_RK7rzhCL5mUYpEMs
help meο½please
I just applied the following patch to the exe and now it supports larger exe files:
{hidden link}
To clarify, this will prevent the unpacker from running out of memory with "large" files, but it still doesn't support files larger than 2.1GB.
...well, seems there's maximum imposed on reply depth...
Anyway, link to that post, cause something seems wrong about that quote.
In no particular order:
- 'requires Python': well, duh...
- 'doesnβt support registry, doesnβt fix main EXE': tells pretty much nothing without context
- 'fails on compressed files larger than 64kb': either that's nonsense or a wrong quote
- 'supports only Enigma VB v6.60+': explanation necessary; should that be a request for supporting *earlier* versions, ? if so, how exactly does the format differ ?
Though, TBH, I've got only minimal interest here: EVBExtractor did work for the case (well, a group of them, to be exact) I was interested in, only for me to learn, that yet again an old integrated Intel is a bit low these days.
does it is support for String Protection like EP_ProtectedStringByKey ? I need to decrypt them without using their APIs ? thanks
You're talking about Enigma Protector which is entirely different product made by the same company.
Only Enigma Virtual Box is supported by my unpacker - and I have no plans to change that.
How can I extract all files from a file with extension ".rpgmvp".
Thanks Kao.
https://www.google.com/search?nfpr=1&q=rpgmvp - I see at least 4 tools for extracting files from .rpgmvp files.
Hello Kao. Can you plz update your tool for large file? Maybe you have a little more free time now. π
In fact, now I have even less free time! π So, I decided to publish it as-is and hope it works for you: Updated Enigma VirtualBox unpacker again. Have fun!
i got an error during unpacking because there was not enough memory. now i want to delete that stuff again but i cant find it. where did it save those things?
A new version of Enigma Virtual Box has come out.
Might be of your interest, since your unpacker fails with executables packed with it.
Thank you for the heads-up! π Can you please give me a sample executable where my unpacker fails?
Found one issue when unpacking x64 executables packed with v7.90.. π Please try updated version: https://mega.nz/#!0wgW0Bha!wWdc6AEHqRd6QvDRs-cCV5Y3SF5480cEJC_ywtf7Rj0