Dumping a process protected with themida

[anotherprogrammer]

Hey ive been trying to dump a process that is protected with themida(Combat Arms). Ive tried loadlib + petools/pedumper with no luck. How are you guys dumping it or how should i be dumping it?

[96neko]

this , i've already answered your question , just open this and x32dbg and dump it it will work fine , and you could try google : Themida Unpack , first result is the wanted one

[vaisefud3]

this , i've already answered your question , just open this and x32dbg and dump it it will work fine , and you could try google : Themida Unpack , first result is the wanted one

Hey, tried the second method you mentioned and I got an error: No API in EAX Register...
Any Ideas?

[96neko]

Hey, tried the second method you mentioned and I got an error: No API in EAX Register...
Any Ideas?

you are doing this for crossfire and the method was for combat arms so it will give error for sure

[vaisefud3]

you are doing this for crossfire and the method was for combat arms so it will give error for sure

^^ yeah I noticed, any methods for unpacking crossfire? or a AOB for wallhack (CFBR)

[96neko]

^^ yeah I noticed, any methods for unpacking crossfire? or a AOB for wallhack (CFBR)

just use dip with present hook , it will work like magic , if you don't know dip here son