[UnpackMe] Enigma 4.00

[Softgate]

 

Protection setting is described in the readme.

Enigma400Unpackme.rar

[LCF-AT]

Hi,

 

hmmm like I see has Enigma changed some things.

Here my unpacked file.

 

greetz

MyExe001_enigma01_Unpacked.rar

[converse]

@ LCF-AT

update your script to unpack Enigma will?

[LCF-AT]

Sorry no script update planned at the moment.Enigma has changes [import handling,different code areas are VMed now,New VM,etc] some more things which I need to debug deeper to find a possible auto-handle-script solution.So the author of Enigma has done his homework so far as expected. So if you now have any latest Enigma files to unpack / HWID change / check bypassing etc then you have to handle it manually now.

 

greetz

 

[GIV]

I recently try to register on Enigma forum.

Here is what i get:

 

 

General Error

SQL ERROR [ mysqli ]MySQL server has gone away [2006]An SQL error occurred while fetching this page. Please contact the Board Administrator if this problem persists.

Please notify the board administrator or webmaster: forum@enigmaprotector.com

 

The protector will be as good as forum is?

[h4sh3m]

I recently try to register on Enigma forum.

Here is what i get:

 

The protector will be as good as forum is?

 

 

exactly !

[Gegul]

why my debugger died

[cxyxjp]

he protector will be as good as forum is?      

[xSRTsect]

Are there tools to bypass a vm verification ?

[LCF-AT]

The unpackme can run in Olly so just use the right hide settings (StrongOD).

 

There is one place in Enigma who does check many checks also whether your file is running in VM but this code is VMed in this file but there you could patch it.

 

greetz

[xSRTsect]

LCF-AT: ok.

[Gegul]

i'm using virtualbox

 

attach process on ollydbg and died again
 

i think process detect vm

so i'm finding hide vm

 

any idea?

 

http://reverseengineering.stackexchange.com/questions/1686/how-to-detect-a-virtualized-environment

 

=D

Edited May 29, 2014 by kismp123

[xSRTsect]

One should study AntiVM theory and AntiDebugg Theory first, this will be my next call.

[GIV]

OK.

Here is mine also:

 

http://up.ht/1CVbg6l