Exe File Unpacker

[Takako Dito]

First, unpacker is written using classic (non-.NET) Delphi and compiled as x86 executable. And standard Delphi streams are retarded. TMemoryStream uses GetMem - which ends up somewhere in Delphi memory manager and VirtualAlloc. That doesn't work well with 800+MB files.

Since the original unpacker was using TMemoryStream, the whole file was loaded in memory as a continuous memory block and I could easily read/write each byte of file using pointers. Something like this:

Original unpacker was compiled with Delphi 3. Delphi 3 didn't have Zlib library, so you had to supply your own Zlib implementation. But it won't compile with new versions of Delphi, giving error message

In Delphi 3 all strings were ANSI. Starting from Delphi 20072009, strings are Unicode. Since Molebox internally uses ANSI, it required changing quite a few structure definitions and rewriting several string manipulation routines. It's a lot of fun (and source of the most obscure bugs), trust me!

hello!
this unpacker helps me alot! however, i find that it can't process Japanese and chinese character correctly. it just put out some meaningless lines in logs, and the file name was replaced by underlines("____.jpg",etc.). because of this, some files was overwritten and missing, can you fix this?
here are part of logs:

Hello, Mr. Kao, thank you for the program, it works for me, it works great! * - * emm if not a lot of hassle .. can you help me with a program I have this packaged with UPX you know of ollbyg can help me thanks ?

Dear Roger,
Here is a quote: "UPX has a built-in feature for unpacking unmodified executables packed with itself." from hidden link so you can just go to hidden link in order to get the latest version of UPX in order to unpack you're executable.

Hello can you help me please !! I want to unpack an .exe file but it is packaged with aspacker and searched for programs all over google and not found eh and as you did for molebox I was wondering if you can create a program that will unpack aspack programs please!

Plenty of reasons:
* 10 years ago .NET wasn't that popular. It wasn't preinstalled on WinXP, etc, etc.
* When you're dealing with custom data structures/encryption/compression algorithms, it's much easier to reimplement them in native code.
* To make unpackers, you need some sort of PE file manipulation library. I happened to have written one for Delphi already. ?

Hello, Kao. I have a program now, use your program can unpack data successfully. However, there is a problem, the file name contains "_". I am sure that these underscores are Chinese characters, is there a way to solve this problem?
Thank you

Hello, and thanks for this tool. I cant unpack moleboxed exe with external data packages, the data is not in the executable, and I cant scan the data files itself, have you done something with this type of "packaging"? Thanks!

sorry , it seems that it is ok now. It work on local driver ,
but in remote dirver like samba or virtualbox share folder it reports [x] EXCEPTION EWriteError
I move the exe to local drivers , it works ok.

You help me get the default files, it's locked IP and I can not use it.
Locked files include: AccountServer.exe, BackupServer.exe, DBServer.exe, LoginServer.exe, LogServer.exe, MailServer.exe, MapServer.exe, TradeServer.exe, VTServer.exe.
link: {link_removed]
Hope you will look over it once, thank you.

I am having a problem with a Japanese program called SCWU, the program reports that the molebox present in SCWU.exe is modified or unknown I need help to unzip this 2d maker fighte engine...
help me too

Come on, are you kidding me? This is a software that we use it in hospital in order to calibrate our equipment. I want to find a way to facilitate the calibration process and crack this software. I can not prove you that this is not a malware. If you want you can download it from
hidden link
and run it in virtual machine (windows XP). Thank you in advance.

Hello! I am relatively new to Spine, or relatively new to these kind of utilities with it.
I was given a texture sheet in .png to work with, and I needed to unpack it all in separate files to update a texture in a current Spine rig.
however, when using the texture unpacker

Thanks. If you open the atlas file as text, you can see it only has one texture region entry that is the whole image. That is why it unpacks into a single image. Unfortunately without the information in the atlas there is no way to unpack smaller images.

Today I release an unpacker script for Enigma Protector. Maybe you know that I created another unpacker script for Enigma in the past which no-longer works for protected Enigma files greater than 3.70+ and this is the reason why I wrote a new script, Enigma Alternativ Unpacker 1.0.

So what is new in this script? This script will unpack your Enigma protected files and dump the used outer virtual machine. This means you do not need to use the DV / Enigma plugin which is used in my other script. Of course the virtual machine will be still virtualized but your unpacked files will work. It is not the best solution but for the moment it is a good "alternativ" and a working solution.

Features of the script:

( 1.) Unpacking of ENIGMA 1.90 - 3.130+
( 2.) RegSheme Bypass & HWID Changer
( 3.) Enigma CheckUp Killer
( 4.) VirtualMemory Dumper 1.90 - 3.x+ & SC Fixer M1
( 5.) UIF Tool Necessary Sometimes!
( 6.) Enigma Intern Export & VM Scan + Log
( 7.) Improved Import Emulation Fixer
( 8.) Supports Exe & Dll Files [dll at EP!]

This new script again covers almost all the protection features of Enigma Protector like my other script but it has been improved and I have added some extra things that you will see when you get to use it.

I have created four video tutorials for you where you can see what you have to do in some of the different situations you may experience. Be sure that you "watch the videos" before you use the script to prevent some unnecessary questions where you can already find the answers if you watch them and then read my added text files. I also made an UnpackMe set with six different protected files (watch videos how to unpack all of them).

If something does not work for you or if you get any trouble or have any questions then just post a reply on the topic (linked above) to get an answer.

Yes, it is the same as libgdx's unpacker. Spine doesn't expose the unpacker on the CLI, but we'll add that. Until then, you could grab gdx-tools from libgdx and run the packer. Or here, for the lazy:
-unpacker.jar
Run it like:

but assuming you haven't used meshes, you don't know what space you have to play with. Say if you want to make the head bigger, you don't know how big it can be without overlapping with another body part texture

I believe bcats is saying that with individual images you can more easily see the space you can paint in. You don't have more space, but you can see it more easily and you can't paint outside the region.

If you allow editing of atlas pages in say a Unity game, you can use the atlas region information to display and make modifieable only the part of an atlas page a region covers. If you want unpacking at runtime, you'll have to port the Java-based unpacker to your favorite language, including cutting up the image.

Inno Setup is a popular programfor making software installations. Unfortunately, there is no official unpacker - theonly method of getting the files out of the self-extracting executableis to run it. One piece of software that addresses this issue is SergeiWanin's InstallExplorer,a plug-in for the FAR Manager that unpacksseveral types of installations, including Inno Setup (IS). But since it is not updated in atimely fashion, and so does not support the latest IS most of the time, this program was born.The advantages over InstallExplorer are:

Both the source and the executable packages are compressed withWinRar. While the full-featured packer is shareware,the UnRar utility that can only extract files is free. And there are lots of freethird-party programs that unpack rar just fine, e.g. 7-Zip.

Innounp is a console application, and it uses command-line options to find outwhat to do. For a more human-friendly interface utilizing FAR or Total Commander asa front-end see the MultiArc section below. Windows Explorer fans:nullz has made some .reg scripts to add innounp into the right-click menu and Richard Santaella crafted agraphical wrapper for innounp (get it on the download page).

By default all files are extracted to the current directory. Use -d tooverride this behaviour. For example, -dUnpacked will create a directory namedUnpacked inside the current directory and put the extracted files there.

The -c option is a little more tricky to explain. Suppose you opened an installationin a file manager and browsed to app\subdir\program.exe. Now if you copiedprogram.exe to another location, the entire directory tree (app\subdir\)would be created and program.exe would be extracted there. -c notifies innounpthat you are only interested in paths from the current directory and below, so that yourfile, program.exe, is extracted right where you intended to copy it, not severaldirectory levels deeper. Note that in order to avoid confusion, files must still bespecified by their full path names inside the installation.

Note that an installation can contain several identical files (possibly under different names). Inno Setupstores only one copy of such files, and by default innounp will also unpack one file. If you want to haveall files that could ever be installed anywhere, regardless of how many identical files this may get you,-a option will do it.

If -m is specified, the file listing includes embedded\CompiledCode.binwhich is the code made by the RemObjects Pascal Script compiler. It is possible to disassembleit using the ifps3_disasm.rar package on the download page. The result is not veryreadable though since it uses the basic 'disassembler' from IFPS3. Anyone wants to write adecompiler?

c80f0f1006