Themida's "Advanced API Wrapping"

ergrelet / unlicense

Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.

GNU General Public License v3.0

1.06k stars 191 forks source link

Themida's "Advanced API Wrapping" #89

Closed h5kk closed 1 year ago

h5kk commented 1 year ago

Running unlicense on an exe that used to work almost flawlessly before

However, doing so on a newer version has two major issues:

It's missing imports
Api calls addresses are wrong

Could it be because of the Themida setting below? Is there a way to fix it?

ergrelet commented 1 year ago

Hi, what version of Themida is it? 3.1.4.0?

h5kk commented 1 year ago

Hi, what version of Themida is it? 3.1.4.0?

Not sure what version the exe is packed with. Will experiment with different Themida versions and try to make a guess. Can also send you the exe in question if it would help.

ergrelet commented 1 year ago

Alright, I've pushed a small fix on the dev branch, you can test it out and tell me if it fixes your issue