Functions Selecting

There is shown a list of functions names selected for virtualization. To change the list, click Select Functions button. The below windows with the possibility to select functions should appear. Note, if you have a MAP file for the Input file then the list of functions will be shown, otherwise, Enigma will try to analyse file itself and the functions names will be represented with their addresses.

Selecting Functions

Select necessary functions for virtualization by checking them out. The information field at the bottom shows disassemble listing of selected function. For function coloring see below, Simulating topic. Right click on the list to show a popup menu.

• Go To - First Selected - allows to scroll a list to the first checked function;
• Go To - Last Selected - allows to scroll a list to the last checked function;
• Go To - Previous Selected - selectes the previous checked function;
• Go To - Next Selected - selectes the next checked function;
• Go To - List Beginning - scrolls the list to the beginning;
• Go To - List End - scrolls the list to the end;
• Select All - checks all functions in the list;
• Deselect All - unchecks all functions in the list;
• Invert Selection - checks unchecked and unchecks checked functions;

Accurate Selecting

Accurate selecting allows few tools for easier navigation through the list of functions and their selecting.

Enter Filter Expression - enter the text to sort selected functions. Only functions contained entered text will be shown after Apply button click. This tool is very useful when only members of particular class should be selected, just enter the class name, click Apply button and only members of this class will be shown.

Multiple Select - allows select and deselect a range of functions.

Show Functions - allows to show only Selected or Not Selected functions, or both.

Right click on the list to show a menu.

• Go to Disassembly - allows quick navigation to Functions Selecting tab, for viewing disassemble listing of the selected function

Simulating

Simulating allows to estimate how many times selected functions are executing in your application. While simulating Enigma Protector executes input file entered in Input Panel, inserts some counters into executed processes that allows to count number of times particular function had been executed. Enigma Protector reads counters each second while application is working.

Click Start Simulating button to start simulating process. To stop simulating close executed application or click Stop Simulating button. If your application requires Command Line for some purposes, you enter this.

Note, this feature does not work with dll (COM/ActiveX etc) files, only exe files are supported.

After simulating you may uncheck highly used or unused functions. But, unselecting these functions is not a rule, just an advice, if you think the functions should be virtualized, there is no difference how many times it had been executed while simulating. Also note that virtualization of highly used functions may slows down work of your application and increase CPU loading, and virtualization of non used functions may also be dangerous because there is no way to check out workability selected functions after protection.

Functions coloring:

• Gray color - Enigma Protector is not able to simulate execution of this function and know how many times it had been executed, or, there still was not attempt to simulate;
• Blue color - while last simulating the function was not executed;
• Green color - the number of times the functions was executed while last simulating is above zero and below the highly used value. Such functions are ideal for virtualization;
• Yellow color - the number of executions of this functions is near to the highly used. You will have to check out the working speed of your application after protection;
• Red color - function is highly used, it is not recommended to select this function, because it will slow down working speed of protected application.