[unpackme]Themida 2.0.3.0 - UnpackME

[Loveless]

  _ak47_ said:

no body have a tutorial ?????

Search harder.

http://forum.tuts4you.com/index.php?showto...amp;#entry90653

[ahmadmansoor]

My friend Loveless give him a moment ...I think he need some time to sleep ..

@ ak47 : I am not sure ..but as i hear exetools taem will give an offer for the year 2008 ...

it will unpack the programs which protected by Themida & Winlic for free just for one week ...

but don't till anybody ...it still under discussion :tongue:

[Loki]

Prepare yourselves for 100 requests to unpack maple story

[ahmadmansoor]

  Loki said:

Prepare yourselves for 100 requests to unpack maple story

My friend the problem is not in unpack target the problem is in Crack it later ( obfocuse code make it hard :biggrin: ) so no problem in this .

[comander]

  HSN.C3r said:

Hi

And here is my unpacked file(manually without any script) :

This is easiest UnpackMe for Themida because the target is VB

Note: After download , change compatibility of the file to Win98\Me ,it`s because of using manifest res.

wow!!!, congratulations...

I Cant to open the unpackme in my olly, I try whit the:

OllyGhost

OllyDBG_Themida

odbg110 9in1 for Themida

OllyICE_TheMida_By_EvOlUtIoN

odbg110 Sabre-Gold

... And nothing

I saw that you can to unpack the themida's v2.0.3.0

But, I have a dude...

What ollydbg or plugs you use for to can unpack the file?

Can you upload your olly to the web, please?

[comander]

  HSN.C3r said:

Hi

And here is my unpacked file(manually without any script) :

This is easiest UnpackMe for Themida because the target is VB

Note: After download , change compatibility of the file to Win98\Me ,it`s because of using manifest res.

Hi, I saw your unpacked file, but un my Pc dont work, although I was change compatibility of the file to Win98\Me.

Error:

AppName: themida.unpackme_unpacked by hsn.c3r.exe AppVer: 1.0.0.0 ModName: unknown

ModVer: 0.0.0.0 Offset: 6600357c

...maybe rebuilding the IAT

Edited January 30, 2009 by comander

[HSN.C3r]

Yes ,the problem was in fixing directly imports.

If you dont fix them , then the unpacked file will not run on all windows .

[snoop]

Waves that Bro, how you doing? Soy de SCT

  comander said:

  HSN.C3r said:

Hi

And here is my unpacked file(manually without any script) :

This is easiest UnpackMe for Themida because the target is VB

Note: After download , change compatibility of the file to Win98\Me ,it`s because of using manifest res.

wow!!!, congratulations...

I Cant to open the unpackme in my olly, I try whit the:

OllyGhost

OllyDBG_Themida

odbg110 9in1 for Themida

OllyICE_TheMida_By_EvOlUtIoN

odbg110 Sabre-Gold

... And nothing

I saw that you can to unpack the themida's v2.0.3.0

But, I have a dude...

What ollydbg or plugs you use for to can unpack the file?

Can you upload your olly to the web, please?

[LightPepsi]

anyone here mind helping me unpack v.80 MSEA client? I've scanned it and it's packed it with Themida 2.0.2.0 ~ 2.0.3.0.

I've tried unpacking but failed at the vm magic jumps.

I would appreciate it if you can upload the unpacked version for me.

Thanks again

Link :

Edited September 17, 2009 by Loki
Removed link

[Loki]

Read the rules.... one more request and you'll be banned.

Fair warning.

[LightPepsi]

  On 9/17/2009 at 4:26 PM, Loki said:

Read the rules.... one more request and you'll be banned.

Fair warning.

Sorry about that, any idea where I can get help here? I need an unpacked version badly ><

[thisistest]

0040111C .- FF25 68104000 jmp dword ptr ds:[401068] ; MSVBVM60.EVENT_SINK_AddRef

00401122 .- FF25 6C104000 jmp dword ptr ds:[40106C] ; MSVBVM60.EVENT_SINK_Release

00401128 .- FF25 70104000 jmp dword ptr ds:[401070] ; MSVBVM60.ThunRTMain

0040112E 00 db 00

0040112F 00 db 00

00401130 68 50074100 push Themida_.00410750 ; ASCII "VB5!6&*"

00401135 E8 EEFFFFFF call Themida_.00401128 ; jmp to MSVBVM60.ThunRTMain

0040113A 90 nop

[blackdragon1027]

  On 10/1/2008 at 4:25 PM, Sp1d3rZ said:

Themida v2.0.3.0 - UnpackMe

Protection Level = V.HARD

I give u Protection Details for making ur unpack easy

==Protection Options==

Anti-Debugger Detection = Ultra

Advanced API-Wrapping = Level2

Anti Dumpers = Enable

Anti- Patching = File Patch (Sign Support)

Entry Point Obfuscation = Enable

Metamorph Security = Enable

Resource Encryption = Enable

Memory Guard = Enable

VMWare/Virtual PC = Compatible

Compression = App/Res/Secure

Monitor Blockers = File Monitors/Registry Monitors

Delphi/BCB Form = Enable

When Debugger Found = Exit Silently

Code Replace = Enable

==Advanced Option==

Encrypt App = Enable

.NET ASM = Enable

Hide from PE = Type2

When U DID IT Please write a tut.

Thank you for your unpacker tool.

But I have a problem in using this tool.

I can't open the file by this.

How can I open a file using this tool?

[Sp1d3rZ]

@blackdragon1027

lolx dude its UnpackMe not Unpacker. And its packed in themida. and if u want to unpack Themida protected files use Themida unpacking script by LCF-AT. (Search in script section)

Edited August 28, 2010 by Sp1d3rZ

[blackdragon1027]

Thank you for advice, Sp1d3rZ.

But where can I find the LCF-AT's script for themida 2.0.3.0?

Is there it here?

Edited August 30, 2010 by blackdragon1027

[ghonxu]

  On 8/30/2010 at 12:57 AM, blackdragon1027 said:

Thank you for advice, Sp1d3rZ.

But where can I find the LCF-AT's script for themida 2.0.3.0?

Is there it here?

check it on http://forum.tuts4you.com/index.php?showtopic=24057