DNGuard Static Unpacker
project wasn't started by me, I will continue it.
The advantage of it is that will work even if trial version is expired.
File attached.
It is a console program it should be started like this: DNGuard Static Unpacker.exe file_to_be_unpacked
Supported versions:
Trial:
v3.9.6.2 v1 https://forum.tuts4you.com/files/file/2176-dnguard-hvm-v3962/
v3.9.7 https://forum.tuts4you.com/files/file/2175-dnguard-hvm-v397/
Enterprise https://forum.tuts4you.com/files/file/2263-netprotectio-v200/
Enterprise v3.9.5/v3.9.6/v3.9.7
Trial v3.9.6
Trial v4.0
Trial v4.1
Trial v4.2
Trial v4.3
Trial v4.6
Trial v4.8
Currently I am specially interested on versions between 3.9.6 and v4.8 trial setup or unpackme;
and also on Enterprise unpackmes.
if you have any let me know.
Besides unpacking this program will print protection options, and you will also know if is protected by Enterprise or not;
on Enterprise Encryption_Dword is different from 0.
Version 1.1 beta:
- now shows Enterprise on DNGuard Enterprise4.8 UnpackMe.zip posted by xiaotang;
- added full unpack support for the Enterprise: https://forum.tuts4you.com/topic/42522-dnguard-hvm-v3953
Download link:
https://workupload.com/file/c4tnPF3RbEJ
For version 3.9.0 currently only displays protection options:
[C++] 纯文本查看 复制代码 if (this.version.StartsWith("3.9.0"))
{
this.DataStructure.ProtectionSettings = (this.value1 ^ this.value3 ^ this.valueN4)^this.DataStructure.Encryption_Dword;
}
else
this.DataStructure.ProtectionSettings = (this.value1 ^ this.value3 ^ this.DataStructure.Encryption_Dword);
For v3.9.0 I fail to find Methods Count in structures and also MethodOffset.
Method Offset changes when applied on same unpackme
v3.9.6/v4.1/v4.2 284C
v3.9.7/v4.0 2840
v4.3 2848
v4.6/v4.8 2858
LEHSize changes when applied on same unpackme:
v3.9.0 1184 ???
v3.9.6 1256
v3.9.7 1212
v4.0 1239
v4.1 1216
v4.2 1229
v4.3 1203
v4.6 1233
v4.8 1220 | 
滇ICP备2022002049号-2 
滇公网安备 53032102000034号)
