Skip to content

Releases: Hendi48/Magicmida

2024-06-22

22 Jun 18:34
Compare
Choose a tag to compare
  • Restored Windows XP compatibility.
  • Added support for Themida 1.8/early 1.9.
  • Added support for kernelbase forwards, required by some newer games.
  • Fixed TLS call detection in some cases.
  • Increased Themida v3 IAT tracing limit.

2024-05-16

16 May 19:32
Compare
Choose a tag to compare
  • Made call site tracing slightly more performant in some scenarios.
  • Fixed regression with binaries that have a TLS directory but callbacks are not called.
  • Fixed edge case in Themida v2 Special IAT Patch.
  • Fixed rare issue where IAT ended up too big.
  • Added workaround for issue where certain older binaries were incorrectly assumed to be Themida v3.

2024-05-11

11 May 19:24
Compare
Choose a tag to compare
  • Removed unnecessary checks from Themida v3 import tracing for better Delphi compatibility.
  • Fixed an issue where an exception in some random unrelated thread would interfere with import tracing.
  • Added support for targets that utilize Thread Local Storage via the PE TLS directory.
  • Changed IAT start determination to hopefully avoid unfortunate edge cases.
  • Added support for more IAT forwards (crypt32 and dbghelp).
  • Added headless/command line mode for easier automation (see README).

2024-05-05

05 May 16:09
Compare
Choose a tag to compare
  • Added support for newer Themida v3 IAT anti-dump measures.
  • Added hack for stolen/virtualized Themida v3 MSVC OEP.
  • Added support for Themida v2 binaries that aren't compressed/encrypted.

2024-05-03

03 May 19:55
Compare
Choose a tag to compare
  • Added generic data section creation functionality for MSVC 2015-2022 targets that utilize dynamic Thread Local Storage.
  • Data section creation is now attempted automatically at the end of unpacking.

2024-04-28

27 Apr 23:10
Compare
Choose a tag to compare
  • More section alignment fixes.
  • Add limited support for binaries with a virtualized entrypoint. In 99% of cases this won't do you any good though because there are numerous anti-dump types.
  • Don't apply built-in anti-debug API breakpoints when using ScyllaHide.
  • Handle rare IAT fixing case in some Themida v2 binaries.
  • Support Themida v2 binaries that require relative call fixing and have a large number of imports.

2023-01-14

14 Jan 00:18
Compare
Choose a tag to compare
  • Removed some assumptions about IAT layout to achieve broader compatibility.
  • Fixed a bug where sections were misaligned in dumped binaries.
  • Fixed a crash in Themida v3 import tracing.
  • Compiled with Delphi 10.4.

2022-03-08

08 Mar 21:21
Compare
Choose a tag to compare
  • Removed many MSVC-isms in order to improve support for other compilers, especially regarding OEP and IAT
  • Added support for some Themida v3 targets
  • Added support for ScyllaHide
  • Huge sections containing only zeroes have their raw size shrinked
  • ASLR flag will be disabled in dumps

2021-12-29

29 Dec 11:56
Compare
Choose a tag to compare

Remove some dead code and section size checks that failed in some targets

2021-12-27

27 Dec 01:57
Compare
Choose a tag to compare

Improve IAT reconstruction (ole32 imports will show up as ole32 and not as combase)