online casino malaysia online casino singapore[phpBB Debug] PHP Warning: in file [ROOT]/phpbb/session.php on line 1065: Cannot modify header information - headers already sent by (output started at [ROOT]/vendor/autoload.php:3)
[phpBB Debug] PHP Warning: in file [ROOT]/phpbb/session.php on line 1065: Cannot modify header information - headers already sent by (output started at [ROOT]/vendor/autoload.php:3)
[phpBB Debug] PHP Warning: in file [ROOT]/phpbb/session.php on line 1065: Cannot modify header information - headers already sent by (output started at [ROOT]/vendor/autoload.php:3)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 5312: Cannot modify header information - headers already sent by (output started at [ROOT]/vendor/autoload.php:3)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 5312: Cannot modify header information - headers already sent by (output started at [ROOT]/vendor/autoload.php:3)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 5312: Cannot modify header information - headers already sent by (output started at [ROOT]/vendor/autoload.php:3)
How Unpack Themida 2.x.x (WXP) - Page 7 - ZenHAX

ZenHAX

Free Game Research Forum | Official QuickBMS support | twitter @zenhax
It is currently Wed May 31, 2023 10:29 pm

Unanswered topics | Active topics


»

All times are UTC



Post new topic  Reply to topic  Page 7 of 7
  [ 133 posts ]  Go to page Previous 1 … 3 4 5 6 7
  Print view Previous topic | Next topic 
Author Message
Ravindra
PostPosted: Sun Aug 09, 2020 4:13 pm 

Joined: Sun Aug 09, 2020 4:11 pm
Posts: 3
Hi,
Download link is not working can you please provide all the scripts and olydbg
Top
   
Reply with quote  
Ravindra
PostPosted: Sun Aug 09, 2020 4:15 pm 

Joined: Sun Aug 09, 2020 4:11 pm
Posts: 3
Hi,
Please provide all the tools and scripts which you used for this. Download link is not working.


Thanks!
Top
   
Reply with quote  
Ravindra
PostPosted: Sun Aug 09, 2020 4:26 pm 

Joined: Sun Aug 09, 2020 4:11 pm
Posts: 3
I am getting below error.

The StrongOD KernelMode will not work on a 64 Bit OS!



Use the TitanHide tool instead or ScyllaHide plugin!
Top
   
Reply with quote  
CriticalError
PostPosted: Thu Sep 03, 2020 6:21 pm 
User avatar

Joined: Thu Aug 14, 2014 8:52 pm
Posts: 204
Ravindra wrote:
I am getting below error.

The StrongOD KernelMode will not work on a 64 Bit OS!



Use the TitanHide tool instead or ScyllaHide plugin!
read the guide carefull, it not work in 64 bits systems, only in x32 the guide I upload.
Top
   
Reply with quote  
dragonteam
PostPosted: Sun Oct 04, 2020 2:52 am 

Joined: Sun Oct 04, 2020 2:45 am
Posts: 2
Please unpack these file. i tried with this tutorial bu am struck in NO API in Code error.

https://www91.zippyshare.com/v/BDmzRWTs/file.html
Top
   
Reply with quote  
azsd
PostPosted: Tue Oct 06, 2020 3:31 am 

Joined: Tue Oct 06, 2020 2:47 am
Posts: 1
this script seems failed on ctcrtypt.dll, used in some drm protection products.
https://dl.book.dmm.com/download/win32/ ... up_x86.exe
the installer is msi based installshield, can unpack by universeExtract.
https://www.sendspace.com/file/qqfthi
I upload the DRM related libraries to sendspace, donno if there extra dependency.


I writed a hooker to dump decrypt dmmj to jpeg, but I want to write a standalone decryptor based on its DRM algorithm.
its maybe block based cipher like AES/Blowfish.

the unpacker script give such a error at line 1453:
Problem!WL Section not in stack to read - Wrong VirtualAlloc call from!
I am using a windows 2003 in VMWare to do unpack work
Top
   
Reply with quote  
Beringer
 Post subject: Unpack Themida
PostPosted: Thu Dec 17, 2020 7:09 am 

Joined: Thu Dec 17, 2020 6:39 am
Posts: 1
Hi all.
I've been trying to crack this soft for seven days. It has Themida protection. With the help of mega dump and uni fix unpacks. It's like he has some more protection ... I just can't bypass the serial number. I cracked the previous version easy but different protections. I totally lost or I don't have enough skills. I would be grateful for help.
https://anonfiles.com/J2Qaxdx7pa/soft_rar
Top
   
Reply with quote  
dawntom7
PostPosted: Mon Apr 19, 2021 3:26 pm 

Joined: Sun Apr 18, 2021 9:26 am
Posts: 1
Hi, My name is Dawn. Recently I have found your post regarding unpacking EXE file with Themida. I have tried every step and I wasn't able to unpack the EXE file. Kindly pls unpack the EXE file for me.
Link for the EXE file: https://drive.google.com/file/d/1XSqdyn ... sp=sharing

Thank you so much for your immense support.

REGARDS
DAWN SAJU
Email: dawnsaju2006@gmail.com
Top
   
Reply with quote  
vahid33
PostPosted: Sat May 22, 2021 3:47 pm 

Joined: Sat May 22, 2021 3:44 pm
Posts: 2
i try unpack with same post , but dumped file will not run and showing Dont send error

what is the solution?

before unpack:
exeinfo:
Themida & WinLicense 2.0 - 2.4.6 - struct (Hide from PE scanners II-V) www.oreans.com , Overlay : 4E4231... Nothing detected
protection id detector:
[!] Themida/Winlicense detected !


after in dump file:

Unknown Packer-Protector , 7 sections - CRC Set - / ReWrite code - Prot/crypt ? , Overlay : 4E4231... Nothing detected

[!] File appears to have no protection or is using an unknown protection
Top
   
Reply with quote  
vahid33
PostPosted: Sat May 22, 2021 8:20 pm 

Joined: Sat May 22, 2021 3:44 pm
Posts: 2
kkmak2019 wrote:
Tried to use 1.4 script. With unpackme work well
With my program extract dumped program but.."Send-Don't send" Error.
https://mega.nz/#!gEA3WKZY!zGIcFrh0tCIL ... ZNwIbvAkUE

Where i wrong?


i have same issue
Top
   
Reply with quote  
jaeger
PostPosted: Mon Jul 26, 2021 2:50 pm 

Joined: Mon Jul 26, 2021 2:43 pm
Posts: 1
cccroswhite wrote:
Hello CriticalError,

First at all, sorry for my bad english.

I get debug the executable with ollydbg, but i can't find (it's hard) the exactly jump to bypass the verification dongle key (HARDKey), because themida encript. But i found this foro with your instructions to unpack themida.

I did follow the steps to unpack themida, but after the step 10 i get the following error "Problem!WL Section not in stack to read - Wrong VirtualAlloc call from". I'm using VMWare Player 6.0.4 with Windows XP SP3.

The url with the executable that i can't unpack

https://drive.google.com/file/d/0ByeJr6CQUvcPVTFVNEI0Z2NveDg/view?usp=sharing

PS: I don't know if this executable is only protected by themida or other things. ProtectionId only show me themida.

Thanks in advance


hi guys, "Problem!WL section not in stack to read - wrong VirtualAlloc Call From!" I am also getting the error. I hope someone can help.
Top
   
Reply with quote  
SubZer0
PostPosted: Tue Dec 21, 2021 12:58 pm 

Joined: Mon Dec 20, 2021 6:23 pm
Posts: 2
Inline patching is far better thn unpacking.
Top
   
Reply with quote  
awaited101
PostPosted: Sat Mar 18, 2023 5:09 pm 

Joined: Sat Mar 18, 2023 4:26 pm
Posts: 1
Hey I really need to unpack this application and bypass the dongle verification process by reverse engineering it later, but there is no way I can unpack the file I tried it manually takes a lot of time(hella lot of time :| ) , So as I read the thread I came across many unpacker links been uploaded but none of them work as all of them expired, there is not a single place in the whole fking internet where I came across to unpack themida/winlicense (yes here's the pic of detect it easy scan) https://pasteboard.co/wuBCHdfpljKf.png , uhh so here's the file https://mega.nz/file/su42VLwR#vzmprcuv7CAEZ1LP5GqR0MM0Ft2mS3BpJJvU3QRLkgw , pls guys look forward to this and come up with a solution then reply I will be very grateful if the community helps me. Thankss


Top
   
Reply with quote  
Display posts from previous:  Sort by  
Post new topic  Reply to topic  Page 7 of 7
  [ 133 posts ]  Go to page Previous 1 … 3 4 5 6 7

»

All times are UTC

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited