Enigma Virtual Box 解包工具
Project description
evbunpack
Enigma Virtual Box unpacker
Features
Unpacks PE / external external packages made with Enigma Vitrual Box
Supports compressed archives and basically every recent version of EVB (tested 6.x & 9.x)
Can also restore the original executable for easier reverse engineering
Installation
pip install evbunpack
If PE restoration is desired, install pefile alongside this script
Usage
usage: __main__.py [-h] [--ignore-fs] [--ignore-pe IGNORE_PE] [--legacy] [--list] file output
Enigma Virtual Box Unpacker
positional arguments:
file File to be unpacked
output Extract destination directory
options:
-h, --help show this help message and exit
--ignore-fs Don't extract virtual filesystem. Useful if you want the PE only
--ignore-pe IGNORE_PE
Treat PE files like external packages and thereby does not recover the original executable (for usage without pefile)
--legacy Enable compatibility mode to work with older (6.x) EVB packages
--list Don't extract the files and print the TOC only (surpresses other output)
Examples
python -m evbunpack Lycoris_radiata.mys ../biman5_chs_moe
python -m evbunpack biman2.exe ./extract --legacy
TODO
Restore original PEs- Registery configuration extraction
Credits
License
Apache 2.0 License
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
evbunpack-0.1.5.tar.gz
(14.4 kB
view hashes)
Built Distribution
evbunpack-0.1.5-py3-none-any.whl
(15.0 kB
view hashes)
Close
Hashes for evbunpack-0.1.5-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | e307a0265e364531c536026b40c5c1bc42c12dadbccd23114005966b0ace5f2d |
|
MD5 | a1402a945d88a60838fdda68f223523d |
|
BLAKE2b-256 | 09d33f271506e961bd6512cfa27d6a18061179f55e97379667432e63b9eea5a7 |