Exetools - themida-unmutate

Exetools (https://forum.exetools.com/index.php)

- Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)

- - themida-unmutate (https://forum.exetools.com/showthread.php?t=21043)

traf0

07-01-2024 19:26

themida-unmutate

A Python 3 tool to statically deobfuscate functions protected by Themida 3.x's mutation-based obfuscation.

Features
Automatically resolve trampolines' destination addresses
Statically deobfuscate mutated functions
Rebuild fully working binaries
Binary Ninja integration

Known Limitations
Doesn't support ARM64 binaries

Homepage

Code:

https://github.com/ergrelet/themida-unmutate

wilson bibe

07-01-2024 19:39

Hello can you publish the release of this? Thanks

th3tuga

07-01-2024 20:55

Quote:

Originally Posted by wilson bibe (Post 131227)

Hello can you publish the release of this? Thanks

This is a python-based plugin for Binary Ninja.
Nothing to publish in Releases except the same source code as a zip file.

blue_devil

07-02-2024 04:05

This is a standalone python script and it provides binary Ninja plugin too.

To install

Code:

pip install git+https://github.com/ergrelet/themida-unmutate.git

KockataHlava

11-16-2024 04:38

Does this project work also for the newest Themida 3.2.2.0?

All times are GMT +8. The time now is 12:33.