Jump to content
Tuts 4 You

[UnPackMe]Themida Version 2.1.1.0]


thisistest

Recommended Posts

Themida - Advanced Windows Software Protection System [Version 2.1.1.0]

Protection Options for test2.exe

--------------------------------

Macros Information

------------------

VM Macros: 0

CodeReplace Macros: 0

ENCRYPT Macros: 0

CLEAR Macros: 0

CHECK_PROTECTION Macros: 0

CHECK_CODE_INTEGRITY Macros: 0

CHECK_VIRTUAL_PC Macros: 0

Protection Options

------------------

Anti-Debugger: Advanced

Anti-Dumpers: ENABLED

Entry Point Ofuscation: ENABLED

Resource Encryption: ENABLED

VMWare compatible: ENABLED

API-Wrapping Level: Level 2

Anti-Patching: File Patch (sign support)

Metamorph Security: ENABLED

Memory Guard: ENABLED

When Debugger Found: Display Message

Application compression: ENABLED

Resources compression: ENABLED

SecureEngine compression: ENABLED

Anti-File Monitor: ENABLED

Anti-Registry Monitor: ENABLED

Delphi/BCB form protection: ENABLED

Virtual Machine Settings

------------------------

Number of Virtual APIs wrapped: 13

API Virtualization Level: 10

Entry Point Virtualization: 51 instructions

Multi Branch Technology: ENABLED

Virtual Machine Processor: Mutable RISC-128 processor

Number of CPUs: 1

Opcode Type: Metamorphic - Level 3

Dynamic Opcode: 80% Dynamic

Advanced Protection Options

---------------------------

Encrypt Application: ENABLED

DLL plugin: ENABLED

Hide from PE scanners: Type 5

.NET assemblies: ENABLED

Active Context: DISABLED

Add Manifest: Don't add manifest

XBundler files

--------------

No files to bundle

test1.rar

test2.rar

Link to comment
Share on other sites

Thnx a lot Thisistest, first time I see it.

However it seems to be a new record in lameness.. My script except for the version retrieval (Which is just about as vital to the script as the penguin mating season. ) still works fine..

I sincerely hope their new protection will be awesome, and not just one big crappy update.

Oh and there's a new antidump, setevent antidump is now crypted and checked slightly below where it used to check,.

Ah well here's an unpack;
/>http://uploading.com/files/959m6bbc/dumpedcff_2.rar/

q.

Link to comment
Share on other sites

test2, test3 unpacked! You will be very strong!

If you can make a tutorial! So that we get to learn, thanks ~

Edited by thisistest
Link to comment
Share on other sites

  • 4 months later...

Well unpacking winlicense is hardly private.. Unpacking concepts have not changed since 1.8.0.0.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...