Nullsoft Sfx Installer Unpack

Автор:
Nullsoft Sfx Installer Unpack Average ratng: 4,4/5 9598 reviews
Install multiple programs silently - no user interaction required

Roland Gw 8 Styles Download. AntiCloud Trojan Reverse Engineering Analysis. Nullsoft PiMP Stub -SFX File Size. (Nullsoft Scriptable Install. There is a plugin dir in this folder also (used to unpack the 7z files) we don't care. Let’s examine the content of tvqsfiles.7z: This folder is the one you really need to do the resource editing, you can repack it to a sfx archive if you want or create an installer.

Silent Install Helper is a clever tool which can help you install multiple applications without seeing any of the usual alerts and dialog boxes. That is, when it works you won't see any splash screens, program licences or requests to choose an installation folder: the applications just end up on your hard drive with the default settings.

Retrieved 18 November 2017. Deep sjeng 3.x. 26 March 2012. Retrieved 18 November 2017.

To begin, drag and drop your chosen setup files onto the program, and Silent Install Helper will try to identify their type, and list the results. If a setup program is based on a known installer (Inno Setup, Smart, Wise, Nullsoft NSIS, RAR SFX, ZIP SFX, Microsoft, Ghost Install Wizard are supported) then it should be possible to install it silently. But if its 'Installer Type' is listed as 'Nothing found' then this means it's not been recognised, and you'll only be able to run a standard installation.

If you're trying out Silent Install Helper to see if it works then we'd recommend you remove any unsupported setup programs from the list (right-click each one in turn, select 'Delete').

To install whatever programs remain, click Select All > Start. Depending on your installers, you may see brief pop-up messages alerting you that a particular setup program is being launched, but otherwise that should be it. You'll see no dialog boxes, no requests for information, not even a message from Silent Install Helper to tell you the process is over - your applications just get installed.

Alternatively, if you'd like to save this list of programs on multiple PCs (they're all your favourite applications, say), then select the installers and click 'Create *.cmd file'. This produces a script which you can save along with the setup programs. Copy these to any PC, double-click the 'setup.cmd' file and your programs will be installed automatically.

There are bonus tools to manage installed programs, your Windows Startup applications and more.

The interface isn't as intuitive as we'd like, but once you figure out the basics then Silent Install Helper proves to be a convenient tool which makes it quicker and easier to batch install your chosen applications.

NSIS Portable 3.05

Open Source

Build professional Windows installers with this fast, efficient development tool

WinToFlash Lite 1.9.0001

Freeware

Easily create a bootable USB flash drive version of your Windows CD or DVD

WinSetupFromUSB 1.7

Daoc bonedancer template. Freeware

Create bootable USB keys from various ISOs

InnoEx 0.9.0.0

Freeware

Extract files from Inno Setup installers

CreateInstall Free 6.3.3

Freeware

Quickly build compact, stable installers for your applications

Partition Logic 0.85

Freeware

Create, delete, wipe, resize, copy and move your partitions

Find and Run Robot 2.239.02

Freeware

An advanced search utility to help you find files on your computer

PDF24 Creator 9.0.4

Freeware

Build, split, merge and digitally sign your PDF files

Screenshot Captor 4.36.1

Freeware

Quickly and easily take screenshots using keyboard shortcuts

Bandizip 6.26

Freeware

A free and easy-to-use archiving tool

From NSIS Wiki

(Redirected from Can I decompile an existing installer)
  • 5Technical Details

About

Currently NSIS installers cannot be fully decompiled. The installer itself doesn't provide any method to extract files or the script without installation. It is the developer's choice whether the source code and/or the files for the installer are available to the public or not.


Extraction Tools

There are, however, external tools that allow this:

  • Since version 4.42[may 2006] 7-zip supports decompressing NSIS installers.
    Since version 9.34 [Jun 2014] 7-zip is also able to extract the compiled scriptcode.
  • The decompression plug-in InstallExplorerInstExpl.wcx is also available for TotalCommander. Beside the files it'll create the file 'script.bin' compiled scriptcode.For use without the TotalCommander the Universal Extractor is a good option.

Well since [Feb 2014] InstExpl suffers from problems naming file names and dirs correctly that were created with NSIS 3. That's because the implementation GetNSISString() was slightly changed so names like $INSTDIR, $PROGRAMFILE .. inside strings are not expanded correctly.


Decompilers

  • 7-zip Since version 9.34 [Jun 2014] till 15.06. [Jun 2015] it'll extract *beside the files of the setup* the compiled script code to a file named [NSIS].nsi
  • NullsoftDecompiler or NSIDis
    NSIDis is a open source Python script that'll help you to nearly fully recover your NSIS-installation scripts. Its state is currently alpha - and so not very user friendly and stable.
  • NSIS Reversing Suite NRS is a set of Python librairies used to unpack and analysis NSIS installer's data. It also has an IDA plugin used to disassembly the NSIS Script of an installer.

Protection against Decompilers

As a general note to software developers, you should use a plugin like DCryptDll if you need to protect certain files in your installer.

. or if ya in the mood for compiling the NSIS have a look into nsis-3.xx-srcSourceexeheadfileform.h. Mixing up the order of the enum with all the EW_* a little bit as recommend in the Comment. It will mess up decompilers output that expect these tokes to be in the standard order.

Or shift or enlarge the .reloc section in the PE-header by 0x400. <-I saw that trick @ some old 'conduit'-adwareinstaller. Inserting so fill bytes between the EOF-exe at the start of the script might also do the trick to stop 7-zip and maybe some Antiviruses.


Technical Details

NSIS instruction encoding was never designed to be stable across versions and any information listed here should be taken with a grain of salt.

Detection

  • 2.0rc1 [r3306] _LANG_INVALIDCRC string changed
  • 2.35 [r5459] _LANG_INVALIDCRC string changed
  • 2.45 PE.OptionalHeader.MajorImageVersion 6
  • 2.47 [r6659] & v3.0b1 [r6506] String: InitiateShutdownA/W
  • A Unicode stub imports CreateFileW and other wide API functions. Theses stubs support EW_FPUTWS and EW_FGETWS.
  • 2.47 [r6658] & 3.0b3 [r6657] SetFileSecurityA/W
  • 2.51 [r6719] & 3.0b3 [r6706] String: CLBCATQ
  • 3.0rc1 [r6721] StringTable: $TEMP$1u_.exe changed to $TEMPUn_$1.exe.
  • 3.02 [r6839] ShellExecuteA/W has been replaced by ShellExecuteExA/W.
  • 3.05 [r7084] No longer links to LoadBitmapA/W

EW_ASSIGNVAR

  • 3.01 [r6810] Empty maxlen string is treated as parameter not present.

EW_CREATEDIR

  • 2.51 [r6701] & 3.0b3 [r6657] parm2 = CreateRestrictedDirectory

EW_CREATESHORTCUT

  • 3.0b0 [r6452] 0x8000 in parm4 will disable SetWorkingDirectory
  • 3.0b3 [r6638] parm4 packing changed to support larger icon index.

EW_FPUTWS

  • 3.0b3 [r6626] parm3 = TryWriteBOM

EW_INTCMP

  • 3.03 [r6929] parm5 is no longer a BOOL, it is a flags DWORD: bit 0x01 is set for unsigned operations and bit 0x8000 is set for 64-bit operations.

EW_INTFMT

  • 3.03 [r6931] parm3 is != 0 for 64-bit operations

EW_INTOP

  • 2.0b4 [r2387] (parm3 >= 7) operators changed because the old 7 (~ bneg) is implemented using ^
  • 3.03 [r6926] Added >>> (SHR) operator (parm3 13)

EW_LOADANDSETIMAGE

  • 3.05 Renamed EW_SETBRANDINGIMAGE. parm2 now contains flags describing parm0 and parm1 and LR_*.

EW_SETFLAG

  • 3.02 [r6841] alter_reg_view can be KEY_WOW64_32KEY in 64-bit stubs.

EW_SHELLEXEC

  • 3.02 [r6839] Parameter count changed. parm4 is SHELLEXECUTEINFO.fMask and SEE_MASK_NOCLOSEPROCESS is set for ExecShellWait.

EW_DELREG

  • 3.02 [r6871] ent.offsets[4] can also contain (shifted) KEY_WOW64_xxKEY bits.

EW_WRITEREG

  • 3.02 [r6829] ent.offsets[5] is REG_MULTI_SZ for WriteRegMultiStr.
Retrieved from 'https://nsis.sourceforge.io/mediawiki/index.php?title=Can_I_decompile_an_existing_installer%3F&oldid=25305'