Use "Shadow" methods to bypass the protector's wrapper and find the OEP RVA. Manual OEP Rebuilding:
Look at the code at the OEP. Follow any CALL instruction that points to an unknown memory location outside the normal code section. how to unpack enigma protector better
Use the "IAT Autosearch" and "Get Imports" features in Scylla to fix the broken Import Address Table. Final Cleanup Use "Shadow" methods to bypass the protector's wrapper