search

Hendi48 / Magicmida

Themida unpacker
298 stars 76 forks source link

Themida winlicense #25

Open luismk opened 4 days ago

luismk commented 4 days ago

image

Why do you still have themida data?

luismk commented 4 days ago

Could you put work for virtualization?

Hendi48 commented 2 days ago

Themida sections are not automatically removed because it can be dangerous to do so in the generic case.

Could you put work for virtualization?

Depends on the type of virtualiziation used. Old CISC/RISC stuff can be unvirtualized pretty well using publicly available tooling. If you have FISH/TIGER/DOLPHIN, I can unvirtualize it in the sense of recovering a lot of the virtualized logic (in a sort of pseudocode). If you're interested in that, contact me on Discord. It's not perfect though and you can't readily assemble it and put it into the binary.