Enable/Disable XBundler on Themida/WL Without Change Key
本帖最后由 Sound 于 2015-11-4 20:38 编辑Tutorial : My Little Analysis - How to Enable or Disable XBundler
on Themida/WinLicense Without Change Serial Key Info
====================================================
This tricks is different approach to ZeNiX's Method.
Firstly, I apologize, I'm not a good explainer/Tutor.
Assumed : 1. Use HT SRl License or a License key that not have XBundler Enable(to Enable)
2. Use Full Mode License (to Disable)
Inspired : 1. HT SRl Licenseor a License key that not have XBundler Enable
2. XBundler Enable Tricks by ZeNiX (an awesome trick)
---> Serial Key Info changed!
Targets: Beginners, who's curious to learn, and myself.
Starting from my curiosity and learning, as well as pay attention that all releases of THEMIDA / WL cracked version, always between:
1. Changing Serial Key Info
2. Create a new custom made key.
That is, HT srl License be ignored and not used again.
In this cases, I try to give a solution to enable/disable a key without changing Serial Key Info.
Oreans Use a function to Enable/Disable XBundler.
This function located in MainDLL.dll modules, that named : Fn6468
Name of function is the same for Themida/WinLicense, since v2.1.6.0 until Now.
How to patch Enable/Disable XBundler Checking Without Changing Serial Key Info ??
An example :
- For Themida 2.3.7.0, we can patch like this:
005F4808E84BFAFFFF ; call jmp_maindll.dll!Fn6468 <--- Patch : B801000000; mov eax,1 (Enable) or
005F480DC3 ; retn B800000000; mov eax,0 (Disable)
- For Winlicense 2.3.7.0, we can patch like this:
00604848E8ABF9FFFF ; call jmp_maindll.dll!Fn6468 <--- Patch : B801000000; mov eax,1 (Enable) or
0060484DC3 ; retn B800000000; mov eax,0 (Disable)
This trick I had apply to:
http://www.52pojie.cn/thread-415886-1-1.html
http://forum.exetools.com/showthread.php?t=17148
This tricks has been tested and it works for Old Themida/WinLicense v1.9.1.0 until Now.
See the lists of Call to XBundler Enable/Disable Check Function on Themida/Winlicense.
(Full list, from version 1.9.1.0 to 2.3.7.0) :
You can refers to my tutorial : How to Enable/Disable XBundler on Themida/Winlicense Without Changing Serial Key Info,
here :
__httx://pan.baidu.com/s/1sjFZiPn
__httxx://www.sendspace.com/file/az057z
__httxx://mega.nz/#!uhc1HIqD!F1qnML62Xeb2_Ld4P2RryR28gto1GKU_5tdQBfnoHOQ
Added:
This is sources files. (BBFlashback Format)
http://pan.baidu.com/s/1o61mnTS
Please, someone translate it, for other members !!
Special Thanks:
1. Sound for provide Themida
2. ZeNiX for awesome XBunlder Enable Tricks.
3. MistHill for his Repacked Version.
Try it...
Hopefully useful for someone.
Best regards,
-=yoza=-
White 发表于 2015-9-29 09:41
Hi,yoza.
If TMD did not show after its nag screen popup, this would be a same GUI bug as WL.
OK White, Thanks for your info and for your work hard.
I have tested on other OS, all its perfect. Your work is OK.
I will check my Win8.1 System. My Win8.1 seems like stranges.
Once again, thank you White.
Best regards,
-=yoza=- yoza 发表于 2015-9-28 20:58
In My Win8.1 x64..
TMD not display/disappear...
Hi,yoza.
If TMD did not show after its nag screen popup, this would be a same GUI bug as WL.
I have reported this to Oreans in may, and they have solved it in next version 235.
Maybe you can email Angie to have known this problem again ~ 小学英语看不懂怎么办 亲,你是外国人吗
萋小磊 发表于 2015-9-27 12:15
小学英语看不懂怎么办
Fine, I understand...
I will attached the sources files (BB Flashback format). Soon or possible.
Please, someone help to translate to..
Best regards,
-=yoza=- 大神上吧,这壳不在我的能力范围之内 thanks,yoza~{:301_974:} yoza 发表于 2015-9-27 12:28
Fine, I understand...
I will attached the sources files (BB Flashback format). Soon or possible.
...
好,我明白…
我会附上源文件(BB闪回格式)。很快或可能的。
请,有人帮忙翻译一下..
最好的问候,
yoza = =—
{:301_995:} yoza 发表于 2015-9-27 12:28
Fine, I understand...
I will attached the sources files (BB Flashback format). Soon or possible.
...
好,我明白…
我会附上源文件(BB闪回格式)。很快或可能的。
请,有人帮忙翻译一下..
最好的问候,
yoza = =— Please, be patient and wait...
I am looking for this sources files... he...he.. I forgot where is ?
I will attach sources at Pan.baidu....
I apologize to all friends..
Best regards,
-=yoza=- yoza 发表于 2015-9-27 12:41
Please, be patient and wait...
I am looking for this sources files... he...he.. I forgot where is ? ...
Snigger..
Thanks for sharing
regards,
Sound