Skip to content
View in the app

A better way to browse. Learn more.

ResHax

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
Help us keep the site running.
Zero Tolerance for Disrespect

How Unpack Themida 2.x.x (WXP)

Featured Replies

  • Replies 133
  • Views 34
  • Created
  • Last Reply

Top Posters In This Topic

  • Author
  • Localization

azsd, posted Tue Oct 06, 2020 3:31 am (59056)


this script seems failed on ctcrtypt.dll, used in some drm protection products.
https://dl.book.dmm.com/download/win32/ ... up_x86.exe
the installer is msi based installshield, can unpack by universeExtract.
https://www.sendspace.com/file/qqfthi
I upload the DRM related libraries to sendspace, donno if there extra dependency.


I writed a hooker to dump decrypt dmmj to jpeg, but I want to write a standalone decryptor based on its DRM algorithm.
its maybe block based cipher like AES/Blowfish.

the unpacker script give such a error at line 1453:
Problem!WL Section not in stack to read - Wrong VirtualAlloc call from!
I am using a windows 2003 in VMWare to do unpack work
  • Author
  • Localization

Beringer, posted Thu Dec 17, 2020 7:09 am (61149)


Hi all.
I've been trying to crack this soft for seven days. It has Themida protection. With the help of mega dump and uni fix unpacks. It's like he has some more protection ... I just can't bypass the serial number. I cracked the previous version easy but different protections. I totally lost or I don't have enough skills. I would be grateful for help.
https://anonfiles.com/J2Qaxdx7pa/soft_rar
  • Author
  • Localization

dawntom7, posted Mon Apr 19, 2021 3:26 pm (63465)


Hi, My name is Dawn. Recently I have found your post regarding unpacking EXE file with Themida. I have tried every step and I wasn't able to unpack the EXE file. Kindly pls unpack the EXE file for me.
Link for the EXE file: https://drive.google.com/file/d/1XSqdyn ... sp=sharing

Thank you so much for your immense support.

REGARDS
DAWN SAJU
Email: [email protected]
  • Author
  • Localization

vahid33, posted Sat May 22, 2021 3:47 pm (64213)


i try unpack with same post , but dumped file will not run and showing Dont send error

what is the solution?

before unpack:
exeinfo:
Themida & WinLicense 2.0 - 2.4.6 - struct (Hide from PE scanners II-V) www.oreans.com , Overlay : 4E4231... Nothing detected
protection id detector:
[!] Themida/Winlicense detected !


after in dump file:

Unknown Packer-Protector , 7 sections - CRC Set - / ReWrite code - Prot/crypt ? , Overlay : 4E4231... Nothing detected

[!] File appears to have no protection or is using an unknown protection
  • Author
  • Localization

jaeger, posted Mon Jul 26, 2021 2:50 pm (65369)


cccroswhite wrote:
Hello CriticalError,

First at all, sorry for my bad english.

I get debug the executable with ollydbg, but i can't find (it's hard) the exactly jump to bypass the verification dongle key (HARDKey), because themida encript. But i found this foro with your instructions to unpack themida.

I did follow the steps to unpack themida, but after the step 10 i get the following error "Problem!WL Section not in stack to read - Wrong VirtualAlloc call from". I'm using VMWare Player 6.0.4 with Windows XP SP3.

The url with the executable that i can't unpack

https://drive.google.com/file/d/0ByeJr6CQUvcPVTFVNEI0Z2NveDg/view?usp=sharing

PS: I don't know if this executable is only protected by themida or other things. ProtectionId only show me themida.

Thanks in advance


hi guys, "Problem!WL section not in stack to read - wrong VirtualAlloc Call From!" I am also getting the error. I hope someone can help.
  • Author
  • Localization

SubZer0, posted Tue Dec 21, 2021 12:58 pm (68396)


Inline patching is far better thn unpacking.
  • Author
  • Localization

awaited101, posted Sat Mar 18, 2023 5:09 pm (75979)


Hey I really need to unpack this application and bypass the dongle verification process by reverse engineering it later, but there is no way I can unpack the file I tried it manually takes a lot of time(hella lot of time :| ) , So as I read the thread I came across many unpacker links been uploaded but none of them work as all of them expired, there is not a single place in the whole fking internet where I came across to unpack themida/winlicense (yes here's the pic of detect it easy scan) https://pasteboard.co/wuBCHdfpljKf.png , uhh so here's the file https://mega.nz/file/su42VLwR#vzmprcuv7CAEZ1LP5GqR0MM0Ft2mS3BpJJvU3QRLkgw , pls guys look forward to this and come up with a solution then reply I will be very grateful if the community helps me. Thankss
Guest
This topic is now closed to further replies.

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.