DNGuard

[ps122]

On 2017/11/28 at 4:08 PM, CodeCracker said:

Can you post a sample protected with it? So I could fix it!
 

HI,CodeCracker

I use the tool to unpack a file(protected by DNGuard HVM v3.8 trial),but it thrown some error as bellow:

(Anti-jit 3.80 patched at address 60002647!
EH resolver at address 79212570!
At last one EH seems to be valid!
System.Runtime.InteropServices.SEHException (0x80004005): External component has thrown an exception.
at DNGuar_HVM_Unpacker.Unpacker.Phase4())

Can you help me and fix the tool? Thanks!

test.rar

[CodeExplorer]

@ps122: That error come when some assemblies are missing (fail to load),
copy the unpacker in same directory with the file file to be unpacked.
 

[ps122]

@CodeCracker

Problem solved,Thanks a lot!

Edited December 1, 2017 by ps122

[erunpack]

Quote

 

Thanks  ,CodeCracker,  

It seems    not  supprot    3.8 Official Version

[erunpack]

Quote

Thanks  ,CodeCracker,  

Thanks  ,CodeCracker,  

It seems    not  supprot    3.8 Official Version

[whoknows]

@CodeCracker @kao what about this shit @ :

ggggg.rar

[CodeExplorer]

3 minutes ago, whoknows said:

@CodeCracker @kao what about this shit @ :

ggggg.rar

Works fine here,
unpacked:
http://www25.zippyshare.com/v/MD2IxHOU/file.html

[whoknows]

@CodeCracker ok

[success]

Hello, CodeCracker
I use your "DNGuard_HVM_Unpackerfr4" attachment open in the {windows7X64} platform is invalid

 

[MindSystem]

50 minutes ago, success said:

Hello, CodeCracker
I use your "DNGuard_HVM_Unpackerfr4" attachment open in the {windows7X64} platform is invalid

 

Run the unpacker in netbox 4.0 : 

 

[success]

16 hours ago, MindSystem said:

Run the unpacker in netbox 4.0 : 

CodeCracker，Thank you very much

 

[ppl]

On 2017/11/30 at 2:40 PM, CodeCracker said:

Fixed attached.
 

DNGuard_HVM_Unpackerfr4.zip

Exe file is OK, DLL file is not good. 3.74 version。

I use Google Translate to exchange English, haha。

[Nebula]

On 12/1/2017 at 4:20 AM, CodeCracker said:

@ps122: That error come when some assemblies are missing (fail to load),
copy the unpacker in same directory with the file file to be unpacked.
 

Getting this error when using the tool to unpack a demo
http://prntscr.com/id10ii

[Text43]

Unpacker not work. 

 

Quote

See the end of this message for details on invoking 
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.NullReferenceException: Object reference not set to an instance of an object.
   at DNGuar_HVM_Unpacker.Unpacker.SaveFile()
   at DNGuar_HVM_Unpacker.Main.Button2_Click(Object sender, EventArgs e)
   at System.Windows.Forms.Control.OnClick(EventArgs e)
   at System.Windows.Forms.Button.OnClick(EventArgs e)
   at System.Windows.Forms.Button.OnMouseUp(MouseEventArgs mevent)
   at System.Windows.Forms.Control.WmMouseUp(Message& m, MouseButtons button, Int32 clicks)
   at System.Windows.Forms.Control.WndProc(Message& m)
   at System.Windows.Forms.ButtonBase.WndProc(Message& m)
   at System.Windows.Forms.Button.WndProc(Message& m)
   at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
   at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
   at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)

************** Loaded Assemblies **************
mscorlib
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.276 (RTMGDR.030319-2700)
    CodeBase: file:///C:/WINDOWS/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll
----------------------------------------
DNGuard_HVM_Unpackerfr4
    Assembly Version: 1.0.0.0
    Win32 Version: 1.0.0.0
    CodeBase: file:///C:/h/DNGuard_HVM_Unpackerfr4.exe
----------------------------------------
System.Windows.Forms
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.1 built by: RTMRel
    CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
----------------------------------------
System.Drawing
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.1 built by: RTMRel
    CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
----------------------------------------
System
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.276 built by: RTMGDR
    CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll
----------------------------------------

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

<configuration>
    <system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

 

 

[lustikus1993]

Is the unpacker compatible with trail version 3.82? There is not much in the internet about DNGuard.

[kyourakudono]

any help for unpack archives? i try, and nothing.

Link... 4shared

[console]

so how does one use this unpacker? simply drag the file onto it or this is a plugin for something else?