ergrelet / unlicense

Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.
GNU General Public License v3.0
1.02k stars 188 forks source link

Question about PE protected by tmd2.x #122

Open duckYcy opened 6 months ago

duckYcy commented 6 months ago

I'd Thanks to your impressive work at first! :) My question is looks like sections ahead .rsrc (.text, .rdata, .data, etc.) are merged by THEMIDA 2.X and then encrypted after protect. After unlicense it just named that merged big section to .text. Are those merged sections other than the 'raw .text' are handled correctly? Hope someone can explain that for me! image