Unpacking Themida 2.0.8.0

[W1z8it]

How would I go about unpacking an exe that was packed with Themida 2.0.8.0?

[Ksbunker]

Show's how to bypass one trick implemented by many packers.

Basically, find the 'pushad', usually one of, if not the first instructions. Step over. Hardware breakpoint dump value in esp. In other words, when 'popad' is executed break. Typically thereis either a jmp to OEP is push/ret to OEP after the popad. Once at OEP, dump file and fix imports with ImpRec.

How the ESP trick actually works - KOrUPt

Of course, themida may not use this method in which case my advice would be useless. But a cool trick nonetheless to know!

Regarding specific themida help, not sure... maybe BiW Reversing - The challenge is yours can help.

[W1z8it]

Quote Originally Posted by Ksbunker

Show's how to bypass one trick implemented by many packers.

Basically, find the 'pushad', usually one of, if not the first instructions. Step over. Hardware breakpoint dump value in esp. In other words, when 'popad' is executed break. Typically thereis either a jmp to OEP is push/ret to OEP after the popad. Once at OEP, dump file and fix imports with ImpRec.

How the ESP trick actually works - KOrUPt

Of course, themida may not use this method in which case my advice would be useless. But a cool trick nonetheless to know!

Regarding specific themida help, not sure... maybe BiW Reversing - The challenge is yours can help.

I'll check it out, cheers.

[Ribs]

This is here not a ReV Board so try other way....no crack things here....and if so wrong topic also...

R

[W1z8it]

Quote Originally Posted by Ribs

This is here not a ReV Board so try other way....no crack things here....and if so wrong topic also...

R

Eh?..

[bofoverflo]

Quote Originally Posted by W1z8it

Eh?..

Unpacking as in cracking. try out ARTEAM REDIRECT. It has everything you need in the forums.

[W1z8it]

Quote Originally Posted by bofoverflo

Unpacking as in cracking. try out ARTEAM REDIRECT. It has everything you need in the forums.

I'm not cracking anything, I just wanna see how a game cheating device program ticks...

[[Psych]]

If you have zero unpacking experience, then going after Themida is like trying to get to the second floor of your house with no stairs... or something... heh

You can't just breeze your way through using simple tricks which work on simple packers. Themida is a protector, and as such employs various techniques to deter reversing. However, provided you can setup your Olly well, then there are some ollyscripts around that will take care of plenty of targets. It's a cheap way out, but it may work for you, so maybe do that. Web... go... now