It's time to make a final stand. Oreans it's your turn now.
This package includes the following;
WL.&.TM.VM.dumper.&.IAT.CodeEnc.Fixer.v2.6.0-SnD
A script to unpack all known versions of Winlicense and Themida using any options.
The script will unpack all known Themida and Winlicense applications
using virtual machine antidump on Windows XP. (v1.8x - 2.1.0.0)
Known issues;
-Version retrieving can error, switch it off when neccesary.
-VM oeps are not always retrieved you must rebuild or find them yourself.
-Memory loaded dll's are not dumped.
-The script stops after asking for the new antidump locations, just resume the script when it does.
Usage;
Step 1: Unpack an application using this script.
(Start at system entrypoint, EP break must be available,
no other breakpoints)
Step 2: When neccesary attach the dumped VM. Fix VM oep.
Step 3: Dump and Imprec.
Always read the log it holds vital information. Also there are several options that can be modified in the first few lines of this script.
Tinker with it if it doesn't unpack your app.
The.Oreans.(Themida&Winlicense).VM.antidumps-Q
An article covering all antidumps, including more newer ones.
Running.Winlicense.Protected.Applications.Without.Licenses-SND
An article on how to run Winlicense protected apps without licenses.
I owe my gratitude to the whole of the webscene for support,
inspiration , ideas and the supply of information/executables.
Especially;
-A lot of suppliers.
-ARteam for being rumored to be the first to have found the first antidumps.
-An unnamed American.
-Lena for showing so many people the way.
-Teddy, for supplying us tuts4you.
-Team SND old and new members.
And most of all just have fun with this all. Use it for knowledge, the challenge and fun.
Monetary gain is never to be aspired.
