Enable/Disable XBundler on Themida/WL Without Change Key

yoza

Tutorial : My Little Analysis - How to Enable or Disable XBundler
on ThemIDA/WinLicense Without Change Serial Key Info
====================================================
This tricks is different approach to ZeNiX's Method.

Firstly, I apologize, I'm not a good explainer/Tutor.

Assumed : 1. Use HT SRl License or a License key that not have XBundler Enable(to Enable)
           2. Use Full Mode License (to Disable)
Inspired : 1. HT SRl Licenseor a License key that not have XBundler Enable           
           2. XBundler Enable Tricks by ZeNiX (an awesome trick)
              ---> Serial Key Info changed!     
Targets  : Beginners, who's curious to learn, and myself.

Starting from my curiosity and learning, as well as pay attention that all releases of THEMIDA / WL cracked version, always between:
1. Changing Serial Key Info
2. Create a new custom made key.
That is, HT srl License be ignored and not used again.

In this cases, I try to give a solution to enable/disable a key without changing Serial Key Info.

Oreans Use a function to Enable/Disable XBundler.
This function located in MainDLL.dll modules, that named : Fn6468
Name of function is the same for Themida/WinLicense, since v2.1.6.0 until Now.

How to patch Enable/Disable XBundler Checking Without Changing Serial Key Info ??
An example :

- For Themida 2.3.7.0, we can patch like this:          
  005F4808  E84BFAFFFF    ; call jmp_maindll.dll!Fn6468    <--- Patch : B801000000  ; mov eax,1 (Enable) or
  005F480D  C3            ; retn                                        B800000000  ; mov eax,0 (Disable)

- For Winlicense 2.3.7.0, we can patch like this:
  00604848  E8ABF9FFFF    ; call jmp_maindll.dll!Fn6468    <--- Patch : B801000000  ; mov eax,1 (Enable) or
  0060484D  C3            ; retn                                        B800000000  ; mov eax,0 (Disable)

This trick I had apply to:
http://www.52pojie.cn/thread-415886-1-1.html
http://forum.exetools.com/showthread.php?t=17148

This tricks has been tested and it works for Old Themida/WinLicense v1.9.1.0 until Now.
See the lists of Call to XBundler Enable/Disable Check Function on Themida/Winlicense.
(Full list, from version 1.9.1.0 to 2.3.7.0) :

FULL LIST ABOUT BUNDLER ENABLE_DISABLE CHECK.txt (5.69 KB, 下载次数: 34)

2015-9-27 12:03 上传

点击文件名下载附件

You can refers to my tutorial : How to Enable/Disable XBundler on Themida/Winlicense Without Changing Serial Key Info,
here :

__httx://pan.baidu.com/s/1sjFZiPn
__httxx://www.sendspace.com/file/az057z
__httxx://mega.nz/#!uhc1HIqD!F1qnML62Xeb2_Ld4P2RryR28gto1GKU_5tdQBfnoHOQ

Added:
This is sources files. (BBFlashback Format)

http://pan.baidu.com/s/1o61mnTS

Please, someone translate it, for other members !!

Special Thanks:
1. Sound[R.E.T] for provide Themida
2. ZeNiX for awesome XBunlder Enable Tricks.
3. MistHill for his Repacked Version.


Try it...

Hopefully useful for someone.      

Best regards,
-=yoza=-

yoza

White 发表于 2015-9-29 09:41
Hi,yoza.
If TMD did not show after its nag screen popup, this would be a same GUI bug as WL.

OK White, Thanks for your info and for your work hard.
I have tested on other OS, all its perfect. Your work is OK.
I will check my Win8.1 System. My Win8.1 seems like stranges.

Once again, thank you White.

Best regards,
-=yoza=-

White

yoza 发表于 2015-9-28 20:58
In My Win8.1 x64..
TMD not display/disappear...

Hi,yoza.
If TMD did not show after its nag screen popup, this would be a same GUI bug as WL.

I have reported this to Oreans in may, and they have solved it in next version 235.
Maybe you can email Angie to have known this problem again ~

萋小磊

小学英语看不懂怎么办

dqy13020940

亲，你是外国人吗

yoza

萋小磊 发表于 2015-9-27 12:15
小学英语看不懂怎么办

Fine, I understand...
I will attached the sources files (BB Flashback format). Soon or possible.
Please, someone help to translate to..

Best regards,
-=yoza=-

879154904

大神上吧,这壳不在我的能力范围之内

spguangz

thanks，yoza~

萋小磊

yoza 发表于 2015-9-27 12:28
Fine, I understand...
I will attached the sources files (BB Flashback format). Soon or possible.
...

好，我明白…
我会附上源文件（BB闪回格式）。很快或可能的。
请，有人帮忙翻译一下..
最好的问候，
yoza = =—

babmf

yoza 发表于 2015-9-27 12:28
Fine, I understand...
I will attached the sources files (BB Flashback format). Soon or possible.
...

好，我明白…
我会附上源文件（BB闪回格式）。很快或可能的。
请，有人帮忙翻译一下..
最好的问候，
yoza = =—

yoza

Please, be patient and wait...
I am looking for this sources files... he...he.. I forgot where is ?
I will attach sources at Pan.baidu....
I apologize to all friends..

Best regards,
-=yoza=-

Sound

yoza 发表于 2015-9-27 12:41
Please, be patient and wait...
I am looking for this sources files... he...he.. I forgot where is ? ...

Snigger..

Thanks for sharing

regards,
Sound