Search the Community

Advanced Windows software protection system, developed for software developers who wish to protect their applications against advanced reverse engineering and software cracking. With Themida, we have centered in the main weakness that software protectors have thus providing a complete solution to overcome those problems. Themida® uses the SecureEngine® protection technology that, when running in the highest priority level, implements never seen before protection techniques to protect applications against advanced software cracking. SecureEngine® defeats all current cracking tools that can be used against protected applications and it will make sure that your protected applications are only run in safe environments. [Hidden Content] [Hidden Content]

x64dbg plugin to bypass Themida 3.x Anti-Debugger / VM / Monitoring programs checks (64bits only) [Hidden Content]

Magicmida is a Themida auto-unpacker that works on some 32-bit applications. It works on all versions of Windows (XP and later). Functions: Unpack: Unpacks the binary you select. The unpacked binary will be saved with an U suffix. MakeDataSects: Restores .rdata/.data sections. Only works on very specific targets. Dump process: Allows you to enter the PID of a running process whose .text section will be dumped (overwritten) into an already unpacked file. This is useful after using Oreans Unvirtualizer in OllyDbg. Only works properly if MakeDataSects was done before. Shrink: Deletes all sections that are no longer needed (if you unvirtualized or if your binary does not use virtualization). Warning: This will break your binary for non-MSVC compilers. Note: The tool focuses on cleanness of the resulting binaries. Things such as VM anti-dump are explicitly not fixed. If your target has a virtualized entrypoint, the resulting dump will be broken and won't run (except for MSVC6, which has special fixup code to restore the OEP). Important: Never activate any compatibility mode options for Magicmida or for the target you're unpacking. It would very likely screw up the unpacking process due to shimming. 2023-01-14 Removed some assumptions about IAT layout to achieve broader compatibility. Fixed a bug where sections were misaligned in dumped binaries. Fixed a crash in Themida v3 import tracing. Compiled with Delphi 10.4. [hide][Hidden Content]]

what is Themida Unpacker for .NET? Themida Unpacker for .NET is a tool developed to quickly and easily unpack packed .NET files. Support all version! (Tested in 1.x, 2.x, 3.x) How to use? goto SuspendProcess/bin/Release/ folder Just drag .NET file and select pd.exe! (32bit to 32bit, 64bit to 64bit) pd.exe will dump file! if not, just manual dump with SCYLLA!!!!! you have to install vbruntime and .NET runtime etc.... JUST INSTALL VISUAL STUDIO .NET, C++, Universal Windows Platform!!!!!! :) [hide][Hidden Content]]

Themida [3.0.4.0] (09-Aug-2019) Added option "OPTION_ADVANCED_XBUNDLER_SKIP_ARCHITECTURE_CHECK" to allow bundling of 32-bit DLLs in a 64-bit application Improved support for injected protected DLLs Added option "OPTION_ADVANCED_SKIP_MEMORY_EXCEPTION_CHECKS" for better support with manual mapped protected DLLs Improved handling of strings in STR_ENCRYPT macros XBundler x64: Improved hooking on DLLs with ImageBase > 4Gb XBundler: Improved ActiveX support XBundler: Improved support of ReadFile with console handle Allow resizing of protection panel Allow nesting of STR_ENCRYPT macros within STR_ENCRYPT macros Added option to perform process hooking on inserted plugins Improved speed parsing MAP files Improved detection of external referenced pointers to the middle of protection macros Improved VMWare/VirtualBox detection Fixed removal of string from original location where referenced several times within a STR_ENCRYPT macro XBundler: Fixed exception on 64-bit applications when all files are marked to "Extract to disk" Fixed exception when right-clicking on column title on Virtual Machines grid Fixed issue with relocations in some applications using the STR_ENCRYPT macro XBundler: Fixed compatibility issue in GetModuleFileName hook x64: Fixed bug when bundling DLLs inside DLLs Fixed exception protecting Go applications Fixed runtime exception when processing relocations with virtualization macros [hide][Hidden Content]]