[C++] The Enigma Protector Devirtualizer Source Code

[speedboy]

thanks for sharing

[mateyboy]

Hi,

I know its an old tool but got something im playing around with.

Does anybody have this compiled? Could they post. Is this newer than the 1.5 version?

Thanks

BR

M

[jackyjask]

Here is ver 1.4.0.0

Enigma DeVirtualizer.dll

also found newer one and built it up

ver 1.5.2.0

Enigma DeVirtualizer.dll

[mateyboy]

Hi @jackyjask

Thank you so much! Question for ya. Do I need the updated .exe as well or do i need it ?

When I run the enigma devertulizer tool I get an error "error unload enigma.dll" ?

The enigma dll is in the folder. Does it with all versions 1.5 but the app runs with version 1.4.

Thanks !

BR

M

[Sean Park - Lovejoy]

4 minutes ago, mateyboy said:

Hi @jackyjask

Thank you so much! Question for ya. Do I need the updated .exe as well or do i need it ?

When I run the enigma devertulizer tool I get an error "error unload enigma.dll" ?

The enigma dll is in the folder. Does it with all versions 1.5 but the app runs with version 1.4.

Thanks !

BR

M

Regards.

sean.

[jackyjask]

@mateyboy do you use this GUI

3e6078dfd691a0f8bf2dca8c2a8b8c4d7ee31d4132ec05f3e6ca561ba375c3af *Enigma Devirtualizer.exe

it shows that kind of error - 

even on original 11 years old binaries (not those freshly built)

[mateyboy]

Hi @jackyjask

Yes thats the error I get. It might be a missing runtime or something.....i dont get that error though with the 1.4 version.

I need the latest as it supports a later version......

BR

M

[jackyjask]

First try to bring up old (orig) tool

for the moment it does not work (my case)

once old works we could move on to the latest ones

[jackyjask]

OK, had some time to dig into this case...

#1  

 

#2  

 

#3 

[mateyboy]

Hi @jackyjask

Thanks great post so it needs the titan.dll.

It now runs with version 1.51 just not with 1.52. I wonder if it needs a newer titanengine.dll ? Same message with 1.52

Oh I remember the latest version needs the BEA engine i think ?

https://bitbucket.org/mrexodia/enigma-devirtualizer/src/master/Enigma DeVirtualizer/

Do you have it compiled with everything.

Thanks !

BR

M

Edited February 8 by mateyboy

[boot]

40 minutes ago, mateyboy said:

https://bitbucket.org/mrexodia/enigma-devirtualizer/src/master/Enigma DeVirtualizer/

v1.520

Enigma DeVirtualizer.dll

[jackyjask]

it needs correct (compatible) BEA engine, not anyone

[boot]

This was compiled just now, I'm not sure if it's compatible. 

BeaEngine_v5.30_x86_x64_Build.zip

[jackyjask]

unfortunately not - 

---------------------------
Enigma Devirtualizer
---------------------------
Error Unload Enigma.dll
---------------------------
OK   
---------------------------

@boot for some reason your dll (x32) is missing Exports:

[jackyjask]

Here is a compatible BeaEngine.dll that runs with 1.5.2.0 dll

 

BeaEngine.dll

Edited February 10 by jackyjask

[X0rby]

Enigma DeVirtualizer 1.3.rarEnigma Devirtualizer v1.1 by DizzY_D.rar

[Sean Park - Lovejoy]

Quote

The Enigma Protector v2.x - v3.x 32bit Devirtualizer
This tool is designed to translate the virtual opcodes of the Enigma
VM back to normal x86 Code.

Author: DizzY_D
Version: 1.1

Credits:
Ap0x for TitanEngine
herumi for XBYAK
f0Gx, n0p0x90, BlackBerry for all their great support

Usage:

Load the DLL into the target's process space.

1. For the first (Enigma internal) VM : use the "InnerDevirtualize" function exported by this DLL.

2. For the second (SDK) VM  : use the "OuterDevirtualize" function exported by this DLL and pass a pointer to the bytecode as a parameter

.
The VM code should now automatically be fixed and run completely
independent from the Enigma VM.

 

Regards.

sean.

Edited Tuesday at 03:21 AM by Sean Park - Lovejoy

[Sean Park - Lovejoy]

Here is the visual studio 2015 project and release and debug builds.

If anyone needs this, feel free to download it.

Enigma DeVirtualizer.zip

Regards.

sean.