really, themida is the best, but, license have a high price.
i don't know if xtrap check themida signatures ( well, most everything in game use themida ).
u wot m8? If you have no idea what you are talking about .. just stop talking. Themida is far from being good, even their VM is, for a VM crypt, relatively easy to defeat.
Originally Posted by XarutoUsoCrack
really, themida is the best, but, license have a high price.
i don't know if xtrap check themida signatures ( well, most everything in game use themida ).
Themida ? Sa far as i know , CF ( CShell.dll ) is using themida right ? Can we still unpack / dump / search in CShell.dll without starting CF ? Well yes so that's a very good packer.
Originally Posted by bandi12
Themida ? Sa far as i know , CF ( CShell.dll ) is using themida right ? Can we still unpack / dump / search in CShell.dll without starting CF ? Well yes so that's a very good packer.
true... yeah lol
i can suspend crossfire's process and attach ollydbg freely... can see every single fucking module right there, cshell.dll, xtrapva.dll bugtrap.dll etc..
but as Ende! said it's just a crypting VM does not virtualize code ..., but i heard it does virtualize code really not sure..
but.. the last time i checked CShell.dll for protection it said it was using ACProtect 1.41 packer?? idk..
btw all that is left protecting crossfire is just the call to isDebuggerPresent ^^'
Originally Posted by somewhatpro
true... yeah lol
i can suspend crossfire's process and attach ollydbg freely... can see every single fucking module right there, cshell.dll, xtrapva.dll bugtrap.dll etc..
but as Ende! said it's just a crypting VM does not virtualize code ..., but i heard it does virtualize code really not sure..
but.. the last time i checked CShell.dll for protection it said it was using ACProtect 1.41 packer?? idk..
btw all that is left protecting crossfire is just the call to isDebuggerPresent ^^'
Hmmm. Is possible that it uses ACProtect. Anyway on some level CF is using themida to ( if you log CF's debugConsole you will see that CF initialize Themida ).
Originally Posted by bandi12
Hmmm. Is possible that it uses ACProtect. Anyway on some level CF is using themida to ( if you log CF's debugConsole you will see that CF initialize Themida ).
Yes it does use themdia !, when i unpacked it with ACProtect it gave me an error "Failed to initialize" and on the title of the messagebox it said "Themida" yep.
Originally Posted by XarutoUsoCrack
