Unpacker hangs (UPX packed .dll, about 1MB packed)

Hi, I am trying to unpack a smallish UPX-packed dll (https://www.mattmontag.com/media/2010/09/NES-VST-1.1.zip, which was made with outsim synthmaker), but the universal unpacker plugin is hanging and I have to force-quit IDA. I see “reached unpacker code” in the console, but IDA stops responding at “Waiting for the unpacker to finish.” I know that this is normal for huge packed executables, but this isn’t large, and it has been hanging for a very long time. When running normally in a debugger, it starts pretty fast.

Update: I was able to use upx -d, but the built-in unpacker is still broken with it. Maybe that plugin should include upx since it’s free?

Hi!

I have not been able to properly run it using rundll32.exe in Windows 11 (neither in Wine, that I have also tried), but if `upx -d worked`, it’s much better than using a dynamic unpacker.

BTW, the universal unpacker is a bit old and suffers from a number of problems. We are working on a new generic unpacker plugin with multiple heuristics and supported targets that will be published soon.

REgards,

Joxean