DNGuard Static Unpacker

[CodeCracker]

DNGuard Static Unpacker
project wasn't started by me, I will continue it.
The advantage of it is that will work even if trial version is expired.
File attached.
It is a console program it should be started like this DNGuard Static Unpacker.exe file_to_be_unpacked

Supported versions:
Trial:
v3.9.6.2 v1 https://forum.tuts4you.com/files/file/2176-dnguard-hvm-v3962/
v3.9.7 https://forum.tuts4you.com/files/file/2175-dnguard-hvm-v397/

Enterprise https://forum.tuts4you.com/files/file/2263-netprotectio-v200/
Enterprise v3.9.5/v3.9.6/v3.9.7

Trial v3.9.6
Trial v4.0
Trial v4.1
Trial v4.2
Trial v4.3
Trial v4.6
Trial v4.8

Currently I am specially interested on versions between 3.9.6 and v4.8 - trial setup or unpackme;
and also on Enterprise unpackmes.
if you have any let me know.
Besides unpacking this program will print protection options, and you will also know if is protected by Enterprise or not;
on Enterprise Encryption_Dword is different from 0.

[CodeCracker]

​It doesn't support old version of trial version like 3.9.0 or before that; only supports the most recent ones. And I really miss 3.98 trial version.

Version 1.1 beta:
- now shows Enterprise on DNGuard Enterprise4.8 UnpackMe.zip posted by xiaotang;
- added full unpack support for the Enterprise: https://forum.tuts4you.com/topic/42522-dnguard-hvm-v3953

Download link:
https://workupload.com/file/c4tnPF3RbEJ

For version 3.9.0 currently only displays protection options:

if (this.version.StartsWith("3.9.0"))
{
this.DataStructure.ProtectionSettings = (this.value1 ^ this.value3 ^ this.valueN4)^this.DataStructure.Encryption_Dword;
}
else
this.DataStructure.ProtectionSettings = (this.value1 ^ this.value3 ^ this.DataStructure.Encryption_Dword);

For v3.9.0 I fail to find Methods Count in structures and also MethodOffset.
Method Offset changes when applied on same unpackme
v3.9.6/v4.1/v4.2 284C
v3.9.7/v4.0 2840
v4.3 2848
v4.6/v4.8 2858

LEHSize changes when applied on same unpackme:
v3.9.0 1184 ???
v3.9.6 1256
v3.9.7 1212
v4.0 1239
v4.1 1216
v4.2 1229
v4.3 1203
v4.6 1233
v4.8 1220

[CodeCracker]

Hi. User SHADOW_UA just told me that it was his project and that wants me to stop the project.
So I will stop this project.

[0xc3]

wow,tested the version you provided ，it's so great.

[CodeCracker]

*Added support for Trial v3.98, Trial v3.99 (3.99/3.991/3.992) and DNGuard Trial v4.50
I've noticed that for some Enterprise v3.9.7 doesn't work.
For v3.9.0 I find Methods Count in structures, it is just some hasn't same value as Methods Count from table, but still struggling with MethodOffset.

[CodeCracker]

Added support for fallowing:
*Trial v3.90
*Trial v3.94 and Enterprise v3.94 like https://forum.tuts4you.com/topic/41847-dnguard-hvm-394

For v3.90 I don't know what I did wrong in the past ... ; MethodOffset is just two values from structure xor'ed.

[zionoobie]

Hi mate! I found a Professional 4.0 protected.
https://api.watoolkit.net/download/WaManager.exe
Regards.
zio