Themida Anti Debugger - نسخة قابلة للطباعة +- الفريق العربي للهندسة العكسية (https://www.at4re.net/f) +-- قسم : منتديات الهندسة العكسية - Reverse Engineering Forums (https://www.at4re.net/f/forum-4.html) +--- قسم : البرامج و أدوات الهندسة العكسية - RCE Tools (https://www.at4re.net/f/forum-29.html) +--- الموضوع : Themida Anti Debugger (/thread-2345.html)

Themida Anti Debugger - vosiyons - 09-12-2020 Themida 3.x Anti-Debugger x64dbg Plugin x64dbg plugin to bypass Themida 3.x Anti-Debugger / VM / Monitoring programs checks (64bits only) x64dbg DLL injection (LoadLibrary) Hooks (MinHook) Usage Download the latest version of Themidie and extract Themidie.dll and Themidie.dp64 to x64dbg's plugins folder Download the latest version of ScyllaHide and extract HookLibraryx64.dll and ScyllaHideX64DBGPlugin.dp64 to x64dbg's plugins folder Start x64dbg, click on the plugins tab, go to ScyllaHide -> Options Disable everything, enable "Kill Anti-Attach" only and click on the "OK" button Go back to the plugins tab, go to Themidie -> Start, then select and open the executable that you want to debug When this MessageBox will apear, you will be able to attach x64dbg to the target process and debug it. Hooks Themidie hooks the following functions: Module    Function name kernel32.dll    GetModuleHandleA user32.dll    FindWindowA Advapi32.dll    RegOpenKeyA Advapi32.dll    RegQueryValueExA ntdll.dll    NtSetInformationThread ntdll.dll    NtQueryVirtualMemory RE: Themida Anti Debugger - Newhak - 21-12-2020 Can you upload a compiled version as I cannot see any TheMida.dll file in the attached folder. RE: Themida Anti Debugger - vosiyons - 21-12-2020 Scyllahide setting image . Inject BBT32.dll After that run, the program will start without Antidebugger message from Themida. https://www.youtube.com/watch?v=2bY23kdLfuQ&feature=youtu.be Download: https://s7.dosya.tc/server18/0ldf0y/Themida_Anti_Debugger.rar.html RE: Themida Anti Debugger - Newhak - 21-12-2020 Thank you my brother RE: Themida Anti Debugger - vosiyons - 07-10-2022 Link Updated... https://mega.nz/file/YdsXxa6I#M9S38qHjP956DaMXCIl9Xd8rNXAQBm9iTaWcq5zji90