unlicense-main.zip
0.09MB
PhantOm Plugins v1.85
0.05MB
StrongOD v0.4
0.29MB
Themida-Winlicense Ultra Unpacker 1.0
0.22MB
ARImpRec.dll
0.20MB
ODbgScript_1.82
0.15MB
Themida - Winlicense Ultra Unpacker 1.4
0.43MB
tools.zip
0.67MB
x64dbg
Themida v2.x
0.00MB
themidie
Themidie.zip
0.15MB
Themidie-main.zip
0.22MB
ScyllaHide_2023-03-24_13-03.zip
3.63MB
TitanHide-master.zip
0.46MB
//Tested on Themida v2.4.6.0
//Always use an anti-anti-debug plugin (SharpOD, ScyllaHide, etc.)
msg "Themida v2.x.x.x OEP Finder by Yildo & Mobile46"
//Clear or disable breakpoints
//bpc
//bphc
//bpmc
bpd
bphd
bpmd
//Start
mov $sectionAddress, mod.main() + mem.size(mod.main())
cmp mem.isvalid($sectionAddress), 0
je error
cmp mem.iscode($sectionAddress), 0
je error
mov $backup, [$sectionAddress]
bph VirtualProtect
loop:
erun
cmp [$sectionAddress], $backup
jne continue
jmp loop
continue:
erun
erun
bphc VirtualProtect
bpm $sectionAddress, x
erun
d
cmt cip, "OEP"
ret
error:
msg "This PE file is not supported!"
ret
WRITTEN BY
,
