Releases: Hendi48/Magicmida
Releases Β· Hendi48/Magicmida
2024-06-22
- Restored Windows XP compatibility.
- Added support for Themida 1.8/early 1.9.
- Added support for kernelbase forwards, required by some newer games.
- Fixed TLS call detection in some cases.
- Increased Themida v3 IAT tracing limit.
2024-05-16
- Made call site tracing slightly more performant in some scenarios.
- Fixed regression with binaries that have a TLS directory but callbacks are not called.
- Fixed edge case in Themida v2 Special IAT Patch.
- Fixed rare issue where IAT ended up too big.
- Added workaround for issue where certain older binaries were incorrectly assumed to be Themida v3.
2024-05-11
- Removed unnecessary checks from Themida v3 import tracing for better Delphi compatibility.
- Fixed an issue where an exception in some random unrelated thread would interfere with import tracing.
- Added support for targets that utilize Thread Local Storage via the PE TLS directory.
- Changed IAT start determination to hopefully avoid unfortunate edge cases.
- Added support for more IAT forwards (crypt32 and dbghelp).
- Added headless/command line mode for easier automation (see README).
2024-05-05
- Added support for newer Themida v3 IAT anti-dump measures.
- Added hack for stolen/virtualized Themida v3 MSVC OEP.
- Added support for Themida v2 binaries that aren't compressed/encrypted.
2024-05-03
- Added generic data section creation functionality for MSVC 2015-2022 targets that utilize dynamic Thread Local Storage.
- Data section creation is now attempted automatically at the end of unpacking.
2024-04-28
- More section alignment fixes.
- Add limited support for binaries with a virtualized entrypoint. In 99% of cases this won't do you any good though because there are numerous anti-dump types.
- Don't apply built-in anti-debug API breakpoints when using ScyllaHide.
- Handle rare IAT fixing case in some Themida v2 binaries.
- Support Themida v2 binaries that require relative call fixing and have a large number of imports.
2023-01-14
- Removed some assumptions about IAT layout to achieve broader compatibility.
- Fixed a bug where sections were misaligned in dumped binaries.
- Fixed a crash in Themida v3 import tracing.
- Compiled with Delphi 10.4.
2022-03-08
- Removed many MSVC-isms in order to improve support for other compilers, especially regarding OEP and IAT
- Added support for some Themida v3 targets
- Added support for ScyllaHide
- Huge sections containing only zeroes have their raw size shrinked
- ASLR flag will be disabled in dumps
2021-12-29
Remove some dead code and section size checks that failed in some targets
2021-12-27
Improve IAT reconstruction (ole32 imports will show up as ole32 and not as combase)