Themida Changelog

What's new in Themida 3.1.8.0

Jan 15, 2024
  • Improved detection of false strings in STR_ENCRYPT protection macros
  • Improved protection in Advanced Option
  • x64: Improved support for try/catch inside virtualization markers
  • Added Advanced Option "OPTION_ADVANCED_REMOVE_DLL_CAN_MOVE"
  • Added Advanced Option "OPTION_ADVANCED_ACTIVE_ANTIMONITORS"
  • Improved restoration of GUI windows positions when a monitor has been disconnected

New in Themida 3.1.3.0 (Apr 26, 2022)

  • Improved compatibility with Windows 11
  • Improved detection of protection macros with specific compiler optimizations
  • Improved support with specific applications using forwarded exports
  • Improved exception handling inside virtualized code
  • Improved option "Perform protection checks on VM macros"
  • Improved support with manually mapped protected DLLs
  • Improved processing of relocations in specific DLLs
  • Added new plugin callback "SecureEngineGetFingerprint"
  • Added Advanced Option "OPTION_ADVANCED_SPLASH_HIDE_DONT_CLOSE"
  • Added Advanced Option "OPTION_ADVANCED_DONT_PROCESS_EXCEPTIONS"
  • Fixed compatiblity issue with new anti-debugger detection on Windows on ARM
  • Fixed sudden exit when runnning protected applications on specific Windows 11 machines
  • Fixed compatibility issue running protected applications under Linux/Wine
  • XBundler x64: Fixed exception will all files to be extracted to disk and option "Delete extracted on exit"
  • Fixed compatibility wrapping GetVersionEx when running in "Compatibility mode"
  • Fixed exception processing MAP functions to virtualize from command line protection
  • Fixed memory leak when unloading protected DLLs
  • Fixed construction of Exception directory with re-virtualized VMs
  • x64: Fixed deadlock when exception happened in virtualized code
  • Fixed exception on specific Windows 11 computers when protecting via the User Interface
  • Minor bugs fixed

New in Themida 3.1.1.0 (Apr 29, 2021)

  • Improved compatibility with protected plugins for AmiBroker
  • Added instances selection in Virtual Machine panel
  • Improved parsing of protection macros
  • Added support for binary files with corrupted relocs section
  • Added support for Clang Map files
  • Improved GCC Map file parser
  • Added Advanced Option "OPTION_ADVANCED_PROCESS_LOAD_CONFIG_DIRECTORY"
  • Added Advanced Option "OPTION_ADVANCED_PASS_WACK_CHECKS" for compatibility with WACK checks
  • Added Advanced Option "OPTION_ADVANCED_ANTIPATCHING_SKIP_TIMEDATESTAMP"
  • Added Advanced Option "OPTION_ADVANCED_STR_ENCRYPT_IN_DATA_SECTION" to search for strings only in the data section
  • Fixed compatibility issue with CHECK_PROTECTION, CHECK_DEBUGGER and CHECK_CODE_INTEGRITY with specific 64-bit applications
  • Fixed wrong exit code when application is already protected
  • Fixed compatibility issue with CHECK_DEBUGGER protection macro in specific applications
  • Fixed compatibility issue protecting specific applications that are already packed/compressed
  • Fixed compatibility issue with protected .NET applications on Windows 2000

New in Themida 3.0.9.0 (Sep 2, 2020)

  • Added new Protection Option "Re-Encrypt strings after decryption" for VM macros and STR_ENCRYPT macros
  • Added RDTSC virtualization
  • Improved MAP file parser
  • Improved MUTATE macro
  • CHECK_DEBUGGER protection macro works when Anti-Debug option is disabled on User Interface
  • Optimized memory consumption while protecting
  • XBundler: Re-encryption in memory of bundled files after CloseHandle
  • Added Advanced Option "OPTION_ADVANCED_DONT_PROCESS_SECTIONS" to skip sections from being compressed/encrypted
  • Improved detection of END macro marker with TCO (Tail Call Optimization)
  • Added Advanced Option "OPTION_ADVANCED_XBUNDLER_CLOSE_FILE_DONT_ENCRYPT" to avoid re-encrypting the file in memory after being
  • Fixed exception adding MAP functions with very long names
  • Fixed compatibility issue with Strings resources
  • x64: Fixed exception using the CHECK_DEBUGGER protection macro in specific 64-bit applications
  • x64: Fixed exception adding entries in the Exception Directory for specific applications
  • Fixed compatibility issue with "OPTION_MACROS_ENCRYPT_STRINGS_DECRYPT_ON_HEAP" with specific applications
  • Fixed compatibility issue with "OPTION_MACROS_ENCRYPT_STRINGS_REENCRYPT" with specific applications
  • Fixed random exception when processing MAP files with different function names pointing to the same code location
  • Fixed very rare exception analysing specific protection macros
  • XBundler: Fixed duplicated folders when dropping multiple files and folders at once
  • XBundler: Fixed parsing of specific files to bundle
  • XBundler: Fixed exception when bundling very big files (> 400Mb)

New in Themida 3.0.8.0 (Apr 16, 2020)

  • Added virtual machine selection for different functions in MAP files
  • Added protection macro "CHECK_DEBUGGER"
  • Added support to protect C++/CLI DLLs
  • Added Advanced Option "OPTION_MACROS_ENCRYPT_STRINGS_DECRYPT_ON_HEAP" for STR_ENCRYPT macros
  • Added Advanced Option "OPTION_MACROS_ENCRYPT_STRINGS_REENCRYPT" for STR_ENCRYPT macros
  • Removed previous selected Virtual Machines when refreshing the input file to protect
  • X64: Improved support for bundled DLLs with managed exceptions
  • Added option "StrEncryptInDataSectionOnly" in .INI file to find strings in data sections
  • Fixed wrong exit code when output file name was missing
  • Fixed exception in 64-bit with "OPTION_VIRTUAL_MACHINE_ISOLATE_REGS=YES"
  • Fixed compatibility issue with GetModuleFileNameA under Windows XP with long file paths

New in Themida 3.0.4.0 (Aug 16, 2019)

  • Added option "OPTION_ADVANCED_XBUNDLER_SKIP_ARCHITECTURE_CHECK" to allow bundling of 32-bit DLLs in a 64-bit application
  • Improved support for injected protected DLLs
  • Added option "OPTION_ADVANCED_SKIP_MEMORY_EXCEPTION_CHECKS" for better support with manual mapped protected DLLs
  • Improved handling of strings in STR_ENCRYPT macros
  • XBundler x64: Improved hooking on DLLs with ImageBase > 4Gb
  • XBundler: Improved ActiveX support
  • XBundler: Improved support of ReadFile with console handle
  • Allow resizing of protection panel
  • Allow nesting of STR_ENCRYPT macros within STR_ENCRYPT macros
  • Added option to perform process hooking on inserted plugins
  • Improved speed parsing MAP files
  • Improved detection of external referenced pointers to the middle of protection macros
  • Improved VMWare/VirtualBox detection
  • Fixed removal of string from original location where referenced several times within a STR_ENCRYPT macro
  • XBundler: Fixed exception on 64-bit applications when all files are marked to "Extract to disk"
  • Fixed exception when right-clicking on column title on Virtual Machines grid
  • Fixed issue with relocations in some applications using the STR_ENCRYPT macro
  • XBundler: Fixed compatibility issue in GetModuleFileName hook
  • x64: Fixed bug when bundling DLLs inside DLLs
  • Fixed exception protecting Go applications
  • Fixed runtime exception when processing relocations with virtualization macros

New in Themida 2.4.6.0 (Sep 20, 2017)

  • Improved recognition of macro markers in special code sequences in some applications
  • Fixed compatibility issue with anti-dump VM and Symantec Encryption Desktop
  • Fixed bug mutating multi-byte NOP opcodes
  • X64: Fixed exception closing the splash screen on specific applications
  • Fixed exception processing the Import Table in very specific applications

New in Themida 2.4.5.0 (Feb 1, 2017)

  • Improved support detecting dereferences macros
  • Improved protection entering into the virtual machine
  • Added command line option "/latetaggant" to protect a file and apply taggant at a later time
  • x64: Fixed .pdata section characteristics
  • x64: Fixed exception in API wrapper for very specific applications
  • Dolphin VM: Fixed exception when virtualizing a single instruction on a macro block
  • Fixed compatibility issue with CHECK_PROTECTION macro with EurekaLog 7

New in Themida 2.4.4.0 (Feb 1, 2017)

  • Improved internal protection
  • FISH VM: Added new protection templates
  • TIGER VM: Added new protection templates
  • Added support of STR_ENCRYPT macros inside MUTATE macros
  • Added option "StrEncryptLocale" in Themida.ini to set the current locale to find strings with the STR_ENCRYPT macro

New in Themida 2.4.1.0 (Apr 15, 2016)

  • Improved speed in virtual machines generation and opcodes virtualization
  • x64: Improved performance in API-Wrapper for VS2015 applications
  • Added support for enviroment variables in input/output filenames (i.e. %temp%dirfile.exe)
  • Improved support for relative paths in input/output filenames
  • Tiger64 VM: Fixed virtualization of "POP MEM16/REG16"
  • x64: Fixed compatibility issue with specific anti-debug code under "Windows 8 checked build"
  • Fixed exception on specific protected .NET applications under Windows 10 Redstone
  • Fixed exception processing very long strings in STR_ENCRYPT macros
  • Fixed wrong error code when protecting specific applications via command line
  • x64: Fixed exception in specific applications when all compression options are disabled
  • Fixed exception in the internal variables relocation engine for specific applications
  • Fixed blank messagebox when Trial was manipulated and messages handled by user
  • x64: Fixed runtime detection of specific Monitor Tools
  • Fixed LOG of CustomVM macros in TMLog.txt file
  • Minor bugs fixed

New in Themida 2.4.0.0 (Apr 15, 2016)

  • Added new protection templates for virtual machines
  • Improved speed generating Virtual Machines under multi-core processors
  • Improved speed virtualizing code
  • Improved speed processing relocations while virtualizing code
  • x64: Improved support with x64 Structured Exception Handling in virtualized code
  • Added option "DefaultDPI" to manually increase the DPI for the GUI (in Themida.ini file)
  • XBundler x64: Improved support with x64 Structured Exception Handling in bundled DLLs
  • Fixed exception when inserting Taggant and the protected file was locked
  • Fixed compatibility issue in specific applications with TLS and "Compress Application" disabled
  • Fixed compatibility issue with CHECK_CODE_INTEGRITY macro in specific applications
  • Minor bugs fixed

New in Themida 2.3.9.0 (Apr 15, 2016)

  • Added new protection templates for all protection virtual machines
  • Fish/Tiger/Dolphin VM: Modified specific protection templates
  • Changed folder layout of "custom vm" files
  • x64: Fixed compatibility issue destroying virtualized strings referenced from outside macro markers
  • Fixed virtualization bug with SCAS instruction
  • Fixed mutation of "MOV REG64, -IMM32"
  • Removed support for old CISC/RISC VMs
  • XBundler x64: Fixed exception on specific systems if file was marked to "Extract to disk"

New in Themida 2.3.8.0 (Apr 15, 2016)

  • Fish/Tiger/Dolphin VM: Added new protection template
  • Improved mutation engine
  • Improved speed searching for protection macros
  • Improved support with CheckCodeIntegrity macro in specific applications
  • Improved TLS support
  • x64: Added support for "RefixRuntimeTLS" option
  • Added internal option "SkipParallelsCheck" to allow detecting virtual machines except Parallels
  • Improved SecureEngine option "ImplicitImport"
  • XBundler: Added support for KernelBase!PathFileExists
  • Fixed wrong macro detection in specific code pattern
  • x64: Fixed mutation in specific x64 opcodes
  • x64: Fixed exception in WLBufferDecrypt for specific applications

New in Themida 2.3.7.0 (Apr 15, 2016)

  • Fixed specific mutation template for "MOV REG, [immediate]"
  • Fixed mutation in specific FPU opcodes

New in Themida 2.3.6.0 (Apr 15, 2016)

  • Improved performance in API-Wrapper
  • Improved obfuscation entering into the protection virtual machine
  • Added support in Golang applications with stack trace for virtualized code
  • Improved support mixing public with private custom vms
  • Added support to use together the "CustomLD" and "CustomImportTable" options
  • XBundler: Increased maximum size of bundled file paths
  • Dolphin VM: Fixed flags status in specific virtualized instructions
  • Dolphin VM: Fixed RIP/EIP-relative addressing

New in Themida 2.3.5.0 (Apr 15, 2016)

  • Added DOLPHIN virtual machine
  • Added EAGLE virtual machine
  • Improved speed generating internal virtual machines
  • Improved speed virtualizing code
  • Added support for DPI scaling in User Interface
  • x64: Fixed heap memory leak on exit in protected 64-bit DLLs
  • Fixed exception when applying taggant in a blocked file

New in Themida 2.3.4.0 (Jun 10, 2015)

  • FISH VM: New protection templates
  • Improved support with Unity 5
  • x64: Added support in VM macros with x64 Structured Exception Handling
  • x64: Added support with applications with no imported functions from DLL
  • Improved detection of string references in STR_ENCRYPT macro
  • Improved support with specific compiler code sequences for CHECK_PROTECTION macro
  • Improved support in disassembler for rare multi-byte NOP opcodes
  • Improved support for dereferences inside macro markers
  • Added /controldll and /controlfunction command line parameters
  • XBundler: Improved support with "XBundlerMatchPaths" option in SecureEngine Config
  • XBundler x64: Improved handling of GetFileAttributesExA / GetFileAttributesExW
  • TIGER/FISH VM: Fixed flags status after REPxx prefixes
  • x64: Fixed Taggant hash map for the digital signature directory
  • Fixed random exception when running specific protected instances in Windows XP compatibility mode
  • x64: Fixed exception on exit on very specific .NET applications
  • Fixed compatibility issue with specific anti-debug routine under Windows 10
  • x64: Fixed detection of VirtualBox
  • x64: Fixed very random memory allocation issue when reading a license file
  • x64: Fixed compatibility issue with API-Wrapper in specific applications under Windows 8 x64
  • x64: Fixed log of wrapped APIs in User Interface

New in Themida 2.3.3.0 (Jun 10, 2015)

  • Added support for IEEE Software Taggant System
  • FISH VM: Improved virtualization of "POP REG16"
  • Improved handling of STR_ENCRYPT macros
  • Added support for dereferences inside macro markers
  • Added detection for pointers outside macro markers referencing a location inside a macro
  • Preserved original Debug Directory with option "RestoreSectionsAttributes"
  • Added correct OMF LIB for x64
  • FISH64 VM: Fixed virtualization of "XCHG REG32, [MEM32]"
  • FISH64 VM: Fixed virtualization of "XCHG REG32, REG32"
  • Fixed bug with default selected VMs when opening several projects
  • Fixed exception with internal variables randomization in very specific applications

New in Themida 2.3.2.0 (Sep 26, 2014)

  • Added internal option to pass all Windows App Certification tests
  • Added support to read functions to virtualize from Excelsior MAP files
  • x64: Improved support in "Custom Messages DLL" with DLLs with "Exception Directory"
  • Added support for Load Config Directory
  • Improved merging of Virtual Machine operation handlers
  • Improved support of STR_ENCRYPT macro with specific applications
  • Redesigned target relocations module
  • Improved search of protection macros via API
  • Improved search of end function via MAP file
  • Added command line option "/xbundlerfiles" to specify a text file with all file names to embed
  • Fixed virtualization of REPxx CMPSW
  • Fixed temporal hang in User Interface while virtualizing protection macros
  • Fixed compatibility with protected DLLs against Microsoft Application Verifier
  • x64: Fixed virtualization of "XCHG RAX, R8"
  • Fixed very specific virtualizations of "MOV REG64, negative_32_bit_value"
  • Fixed memory issue when inserting very big Custom Messages DLLs
  • Fixed log of encrypted ANSI/UNICODE strings
  • Fixed exception processing files with corrupted Relocation Directory

New in Themida 2.3.1.0 (Sep 26, 2014)

  • Added new Anti-dump VM
  • Improved internal virtualized opcode tester
  • Redesigned handling of virtualized FLAGS
  • Improved virtualization of joined instructions
  • Improved protection stage on memory above 2Gb
  • Improved obfuscation to enter inside a Virtual Machine
  • Modified behavior of "RefixRuntimeTLS" option
  • TIGER VM: Fixed virtualization of "PUSH IMM16"
  • TIGER VM: Fixed restoring of Carry flag in DEC/INC opcode
  • x64: Fixed very random exception in API-Wrapper
  • FISH VM: Fixed flags in DEC/INC [word/byte] opcodes
  • Fixed exception in "Custom Messages DLL" when displaying "VMware detected" message

New in Themida 2.3.0.0 (Sep 26, 2014)

  • Added Sandbox detection option (Protection Options panel)
  • Improved performance in Virtual Machines generation (in protection stage)
  • Improved "Automatic VM Selection" in Virtual Machine panel
  • Optimized search of macros inserted via "defined assembly function"
  • Fish VM: Fixed flags operation in specific 8-bit instructions
  • x64: Fixed virtualization of REP/REPNZ/REPZ prefixes
  • Minor bugs fixed

New in Themida 2.2.9.0 (Sep 26, 2014)

  • FISH VM: New protection templates
  • Added support with McAfee Host Intrusion Prevention with internal Virtual Machine calls
  • Added support in User Interface to run under Wine
  • Improved support in option "KeepDebugInfo" for .NET applications
  • Fixed bug in ENCODE and CLEAR macros when ASRL is present
  • Fixed bug displaying the Splash screen in specific applications
  • Fixed virtualization of "REP (qword) string-op"
  • XBundler x64: Fixed compatibility issue in some applications with LoadLibrary under Windows 8

New in Themida 2.2.8.0 (Sep 26, 2014)

  • Added PUMA VM (White, Red, Black)
  • Added SHARK VM (White, Red, Black)
  • Added SecureEngine Config option "RestoreSectionAttributtes"
  • Improved TLS support
  • Added ASLR support in EXE files
  • Added support for specific Delphi 64-bit DLLs used as "Custom Messages DLL"
  • Added support with EurekaLog 7
  • Added log of processed CheckCodeIntegrity/CheckProtection/CheckVirtualPC macros
  • XBundler: Improved option "XBundlerExceptionSupport" in 64-bit applications
  • Fixed false Monitor Detection on very specific systems
  • Flags were not preserved in "RET" opcode virtualization
  • Fixed memory allocation problem when opening several projects in the User Interface
  • Fixed "Keep original date time" that was not working correctly in some protected instances
  • XBundler: Fized memory leak hooking "FindFirstFileEx"

New in Themida 2.2.7.0 (Dec 18, 2013)

  • TIGER VM: New protection templates
  • FISH VM: New protection templates
  • TIGER VM: Improved virtualization of "PUSH IMM8"
  • Improved relative paths protection
  • x32: Fixed compatibility in API wrapper with specific MingGW DLLs
  • TIGER VM: Fixed virtualization of "REPNZ SCAS"
  • FISH VM: Fixed virtualization of "REPNZ SCAS"
  • FISH VM: Fixed flags in "CMPS" virtualization
  • x64: Fixed mutation of "CQO" instruction

New in Themida 2.2.6.0 (Dec 18, 2013)

  • TIGER VM: New protection templates
  • FISH VM: New protection templates
  • x64: Improved support of 3dsMax plugins
  • Improved internal grammar to design VM architectures
  • Improved internal virtualization opcode tester
  • TIGER VM: Fixed virtualization of "PUSH IMM16"
  • FISH VM: Fixed exception generating specific instances of "FISH black" VM

New in Themida 2.2.5.0 (Dec 18, 2013)

  • New Virtual Machine model available
  • New Virtual Machine added (TIGER architecture)
  • New Virtual Machine added (FISH architecture)
  • Improved protection for AutoIT applications
  • Added virtualization of specific multi-byte NOP opcode
  • Virtual Machine generation and virtualization using multi-core processor
  • Fixed exception parsing MAP files with very long decorated names
  • XBundler: Fixed compatibility issue with "GetFileInformationByHandle" in specific applications
  • XBundler x64: Fixed compatibility issue bundling specific 64-bit DLLs
  • XBundler x64: Fixed hooking of SetFilePointerEx
  • XBundler: Fixed compatibility issue on specific Windows Embedded
  • XBundler: Fixed very rare bug on specific applications when selected option extract to disk
  • Minor bugs fixed

New in Themida 2.2.4.0 (Dec 18, 2013)

  • New interface for "Protect panel" (with detailed protection log)
  • Improved protection time
  • x64: Improved support in Thread Engine for system DLLs
  • Improved log for strings encrypted with the STR_ENCRYPTW macro
  • Improved support using a protected DLL with third parties bundling solutions
  • XBundler: Fixed compatibility issue with LoadLibraryExW in specific applications
  • Fixed bug in .NET applications that affected the return value of Directory.Exists method
  • x64: Fixed compatibility issue with some .NET applications
  • x32: Fixed compatibility issue in API-Wrapper in very specific applications
  • CodeReplace macros removed. Now they are recognized as VM macros
  • XBundler: Fixed compatibility issue in CopyFile with UNICODE filenames

New in Themida 2.2.3.0 (Jan 4, 2013)

  • Fixed compatibility issue under .NET Framework 4.5 RTM

New in Themida 2.2.2.0 (Dec 28, 2012)

  • Improved support with Billenium Effects component
  • x64: Improved mutation of negative RIP addressings
  • x64: Added support for Codejock skinable applications
  • x64: Improved internal exception handling for Windows 8 x64
  • XBundler: Improved support with Qtcore plugins
  • XBundler: Improved unloading of bundled DLLs
  • XBundler: Improved compatibility with api-ms-win-core files
  • Fixed exception loading applications with incorrect PE header
  • Fixed return date value in GetFileAttributes hooking for .NET applications
  • Fixed compatibility issue with option "ImplicitImport" in specific applications
  • Fixed exception removing the relocation section on specific EXE files
  • Fixed virtualization of "IDIV [stack_pointer]" in CISC VM
  • x64: Fixed virtualization of "MOVZX/MOVSX dword" in CISC VM
  • x64: Fixed compatibility issue in license decryption under Windows 8 x64
  • x64: Fixed compatibility issue processing Manifests in some x64 applications
  • x64: Fixed exception in protection time for some .NET applications
  • x64: XBundler: Fixed bad extraction to disk when "Extract to disk" was selected

New in Themida 2.2.1.0 (Aug 7, 2012)

  • Improved compatibility with Windows 8
  • Added macros support for PureBasic x64
  • x64: Added MSVC90 manifest for 64-bit applications in "Add Manifest" option
  • Added compatibility with IObit Malware Fighter
  • x64: Improved support for multi-byte NOP opcodes
  • XBundler: Improved support bundling protected DLLs
  • x64: XBundler: Improved compatibility embedding native DLLs inside .NET applications
  • x64: Fixed compatibility issue in internal disassembler with CVTDQ2PD and COMISD opcodes
  • x64: Fixed compatibility issue in API-Wrapper with specific applications
  • Fixed memory leak loading and unloading a protected DLL multiple times
  • Fixed compatibility with compressed resources when linking with IPHLPAPI.DLL under Windows XP
  • x64: Fixed compatibility issue with option "Hide from PE-Scanners -> Type 5"
  • x64: Fixed specific mutation in CISC-2 processors
  • x64: Fixed compatibility issue in API-Wrapper for specific applications
  • x64: Fixed relocations issue wih virtualization of negative RIP addressing
  • Fixed bug in LOG file reporting wrong number of CheckCodeIntegrity macros processed
  • Fixed length of string in STR_ENCRYPT macro for VB applications
  • x64: Fixed compatibility with STR_ENCRYPT macro in specific applications
  • Fixed bug parsing empty MAP files
  • XBundler: Fixed GUI file locking after protection
  • XBundler: Fixed compatibility issue bundling multiple empty files
  • XBundler: Fixed compatibility issue in GetFileAttributesEx with specific Qtcore applications

New in Themida 2.2.0.0 (Aug 7, 2012)

  • Added support with Rockey4ND
  • Improved module to avoid specific APIs from being wrapped
  • Improved handling of protected DLLs when they are loaded/unloaded multiple times
  • Improved extraction of strings in STR_ENCRYPT macro
  • Improved log of processed protection macros
  • Improved handling of protection macros in different code sections
  • x64: Improved handling of RIP instructions in VM macros
  • x64: Improved handling of RIP instructions in MUTATE macros
  • Added support for Drag&Drop project files
  • Added SecureEngine Config option: "ExternalEnvelope" to improve compatibility when re-packing an application
  • Added detection of Parallel Mac Desktop
  • XBundler: Improved support for Unicode FindFirstFile/FindNextFile
  • XBundler: Improved option "Extract file to disk"
  • XBundler: Added "%app_folder%" as extraction constant to extract to current folder or subfolders
  • XBundler: Added option "Extract if CRC is different" for option "Write to disk?"
  • Fixed compatibility issue with STR_ENCRYPTW returning the string size for Delphi XE2
  • x64: Fixed handling of "MOVS mem, xmm" in RISC VM
  • x64: Fixed detection of macros via "defined macros in assembly language"
  • x64: Fixed compatibility issue in MUTATE macro
  • x64: Fixed compatibility issue with CHECK_PROTECTION macro in specific applications
  • x64: Fixed compatibility issue reading from MAP file
  • x64: Fixed handling of multi-byte NOP opcodes in MUTATE macro
  • Fixed mutation of "LOOP" and "JECXZ" instructions in MUTATE macro
  • Fixed nested macro detection on specific applications
  • Minor bugs fixed

New in Themida 2.1.9.0 (Aug 7, 2012)

  • Added Macros support for Delphi XE2 64-bit applications
  • Improved support protecting AutoIt applications
  • Added macro insertion support in x64 applications without requiring SecureEngine library
  • Improved finalization of protected DLLs under Windows 9x systems
  • Improved compatibility of specific antidebug feature under GameGuard
  • Improved compatibility in STR_ENCRYPT macro with specific applications
  • Added SecureEngine option "DisableOverlayEncrypt" to support specific Macromedia Flash files
  • x32: Improved compatibility with SecureEngine option "DisablePrefetch" in DLLs
  • x64: Improved compatibility with API-Wrapper in specific applications
  • Added log of strings encrypted with STR_ENCRYPT macro
  • XBundler: Improved support for GetPrivateProfile APIs
  • XBundler: Improved support bundling big (and compressed) files
  • Fixed exit of application when monitor application is started after protected application
  • Fixed support in Anti-File patching option under Windows 9x systems
  • Fixed compatibility issue with CHECK_CODE_INTEGRITY macro in specific applications with debug code section
  • Fixed compatibility issue with STR_ENCRYPTW_START inside STR_ENCRYPT_START macro
  • Fixed log for processed CheckVirtualPC macros
  • Fixed compatibility issue in API-Wrapper under Windows 8
  • x64: Fixed compatibility issue with specific protected DLLs on Vista x64 SP2
  • x64: Fixed VMWare detection in CHECK_VIRTUAL_PC macro

New in Themida 2.1.8.0 (Aug 7, 2012)

  • Improved VMWare detection
  • Improved compatibility with IE9 plugins
  • Improved compatibility with conditional jumps in MUTATE macro
  • Improved compatibility in antidebug for embeded protected DLLs
  • Improved compatibility in applications that are using STR_ENCRYPT and STR_ENCRYPTW at the same time
  • Improved Entry Point Virtualization in protected DLLs
  • Added SecureEngine option "DisablePrefetch" to increase performance in applications that are launched multiples times per minute
  • Added detection of too big VM/CodeReplace macros
  • XBundler: Improved support with Unicode folder names
  • XBundler: Added multi selection of files
  • XBundler: Displayed number of files to bundle in User Interface
  • XBundler: Improved support when bundling thousands of files
  • XBundler: Improved handling of GetModuleFileNameW
  • XBundler: Improved support of .INI files
  • Fixed compatibility issue parsing MAP files with very long decorated names
  • Fixed hang with Splash screen on specific .NET applications
  • Fixed random hang displaying a custom splash screen on specific applications
  • XBundler: Fixed compatibility issue with Yamaha MIDI keyboards runtime DLLs
  • Fixed minor introduced bugs in latest version with new cross-platform code

New in Themida 2.1.7.0 (Aug 7, 2012)

  • Added macro "STR_ENCRYPT" to encrypt/decrypt in Virtual Machine all strings inside the macro markers
  • Added macro "MUTATE" to allow developers mutating specific code areas
  • Improved API-Wrapping in applications with huge import table
  • Improved memory allocation when protecting huge PE files (> 300Mb)
  • Improved compatibility in Thread Engine with protected plugins
  • Improved compatibility with specific .NET 4 applications
  • XBundler: Added support for LockFile/LockFileEx
  • XBundler: Improved compatibility bundling protected DLLs
  • XBundler: Improved support for GetPrivateProfile APIs in UNICODE systems
  • Fixed virtualization of specific Bit Test opcodes
  • Fixed compatibility issue with .NET applications on Windows XP Embedded
  • Fixed compatibility issue with SEH handler in specific DLLs

New in Themida 2.1.6.0 (Aug 7, 2012)

  • Added macro status (Nested, missing marker, etc.) for each macro in "Protection Macros" panel
  • Improved scanning of protection macros
  • Improved loading of last project open
  • Detection in command line protecting a 64-bit application
  • XBundler: Added support in option "XBundlerHookMainOnly" for DLLs
  • XBundler: Improved support protecting DLLs that embed other files/DLLs
  • XBundler: Added detection bundling 64-bit DLLs in 32-bit applications
  • Fixed "/ignore" command when protecting an already protected application from command line
  • Fixed compatibility issue in API-Wrapper with some Visual Basic native applications
  • Fixed compatibility issue in new Macros Engine when multiple CHECK_PROTECTION macros are present
  • Fixed processing of "cmpsd xmm, xmm, imm" in VM/CodeReplace macros

New in Themida 2.1.5.0 (Aug 7, 2012)

  • Added Protection Macros panel (instead of CodeReplace panel)
  • Redesigned Macros Engine module that supports inline and functions macro insertion
  • Added SecureEngine option "XBundlerMatchPaths"
  • XBundler: Improved bundling of files/DLLs inside protected DLLs
  • Fixed bug in protection added in version 2.1.4.0 affecting some Windows 2000 machines
  • Fixed virtualization of "POP [ESP + XX]"
  • Minor bugs fixed

New in Themida 2.1.4.0 (Aug 7, 2012)

  • Improved obfuscation engine
  • Added support for Macromedia Projector applications
  • Improved compatibility in specific systems where memory is not immediately refreshed in code decryption
  • Improved support packing big EXE files (>200Mb)
  • Improved handling of DLL_PROCESS_DETACH
  • Removed runtime changes in process priority
  • Added PowerBasic include files for protection macros
  • XBundler: Improved support of LoadImage function in specific applications
  • Fixed very random bug which produced some invalid protected instances
  • Fixed random internal exception on very specific computers
  • Fixed VMWare detection under Windows 9x
  • Fixed compatibility issue in Anti-File Patching with specific UNICODE folder names
  • Fixed compatibility issue with specific Excelsior JET applications
  • XBundler: Fixed exception bundling big files from different target path

New in Themida 2.1.3.0 (Aug 7, 2012)

  • Redesigned insertion of CodeReplace macros via MAP file
  • Added compatibility with CliSecure applications
  • Improved multithread support for .NET applications
  • Added possibility to use external compressor instead of internal one
  • Improved command line protection in case of internal error while protecting
  • Improved ImplicitImport option in SecureEngine config
  • Added SecureEngine Config option "XBundlerSkipL2"
  • Added SecureEngine option "CustomEnv" to set an environment variable to a custom value in runtime
  • XBundler: Improved compatibility with multithreaded applications
  • XBundler: Improved support in UNICODE functions
  • XBundler: Added support for DLLs with bigger RAW code section than VA code section
  • XBundler: Improved dragging of files
  • XBundler: Improved handling of several embedded files with same name
  • Fixed memory allocation error when using CheckCodeIntegrity macro with multiple VM macros
  • Fixed TYPELIB resources compression
  • Fixed compatibility issue with AntidumpVM in specific DLLs
  • Fixed issue stripping relocations in specific .NET applications
  • Minor bugs fixed

New in Themida 2.1.2.0 (Aug 7, 2012)

  • Improved compatibility in internal variables engine with specific applications
  • Improved resource compression for applications with already compressed resources
  • Improved API-Wrapping handling in applications with big amount of imported APIs
  • Improved Virtual Machine environment detection
  • Added option in Themida config file to use paths relatives to the project file
  • Added support for Director 11.5 applications
  • Improved virtualization of Bit Test opcodes
  • Improved option ImplicitImport in SecureEngine config
  • Optimized API-Wrapper for AutoIt applications
  • Added option to strip exports table in SecureEngine Config panel
  • XBundler: Added internal option to specify the CLSID of embedded DLLs to check for registration in ActiveX configuration
  • XBundler: Improved compatibility with specific Flash applications
  • XBundler: Improved compatibility for .NET applications with ELEVATECREATEPROCESS flag under Windows 7
  • XBundler: Improved "Extract always" option
  • Fixed virtualization of BTR/BTS dword
  • Fixed very random bug with API-Wrapper Level 2 on specific computers
  • Fixed support with JCLDebug
  • Fixed issue with prefetch queue on i7/i9 processors
  • Fixed protection of specific .NET applications
  • Fixed ExitProcess code for .NET applications
  • Fixed introduced bug in previous version for specific VB applications
  • Fixed random bug in compression engine for specific applications
  • Minor bugs fixed

New in Themida 2.1.1.0 (Aug 7, 2012)

  • Internal changes in protection engine
  • Tested against .NET framework 4 beta
  • Improved compatibility with CHECK_CODE_INTEGRITY macro mixing VM and ENCODE macros
  • Improved TLS handling in specific Delphi/BCB applications
  • Added compatibility in .NET applications with ELEVATECREATEPROCESS flag under Windows 7
  • Improved handling of DLLs with only ordinals in export table
  • Improved compression with StopMerging option enabled
  • Improved handling of IAT in specific C++ Builder 2010 applications
  • Improved parsing of Visual Basic macros
  • Improved processing of CodeReplace macros in applications with multiple code sections
  • Improved option "StopMerging" in SecureEngine
  • Added SecureEngine Config option "XBundlerActiveXcheck"
  • Improved concurrent projects protection via command line
  • Added command line parameter "\q" to avoid displaying protection output
  • XBundler: Improved cleaning of bundled DLLs in .NET applications
  • XBundler: Improved "ActiveX support" for specific OCXs/DLLs
  • XBundler: Improved option "Extract to disk"
  • XBundler: Added feature to skip specific DLLs from ActiveX registration
  • Fixed API-Wrapper Level 2 for applications with ordinal imports from Kernel32.dll
  • Fixed Overlay issue with Hide from PE-Scanners option
  • Fixed compatibility issue with CHECK_CODE_INTEGRITY with DLL relocations
  • Fixed antidump-VM in applications with mixed managed and unmanaged code
  • Fixed compatibility issue with specific antidump-VM in some DLLs
  • Fixed API-Wrapping of SendNotifyMessageW in specific Windows versions
  • Fixed Anti-File Patching in specific .NET applications running under Windows 2008 (under Chinesse path)
  • Fixed compatibility in specific .NET applications running under Windows XP Chinesse version
  • Minor bugs fixed

New in Themida 2.1.0.0 (Aug 7, 2012)

  • Full compatibility under MAC/Wine and MAC/Crossover
  • Improved CHECK_VIRTUAL_PC macro for protected DLLs
  • Added detection of already compressed code/data in unprotected application/DLL
  • Improved compatibility protecting specific applications with huge allocation of memory from PE header
  • Compatibility improvements in option "Protect as DLL plugin"
  • Updated PureBasic include files for CHECK_PROTECTION, CHECK_CODE_INTEGRITY and CHECK_VIRTUAL_PC macros
  • XBundler: Relative paths allowed to parents folders (drag files with CTRL key pressed)
  • Fixed introduced bug in version 2.0.9 when using 8 CISC VMs
  • Fixed hang when protecting from a Windows 9x/Me machine
  • Fixed TLS handling in specific applications
  • XBundler: Fixed compatibility issue bundling .EXE files in specific .NET applications
  • XBundler: Fixed introduced bug in 2.0.9 in data decryption in specific applications
  • Minor bugs fixed

New in Themida 2.0.9.0 (Aug 7, 2012)

  • Added macro CHECK_VIRTUAL_PC to know if an application is running under VMWare/VirtualPC
  • Improved compatibility with Crossover Mac
  • Improved virtualization of x86 Direction Flag
  • Added support to protect WinDev applications
  • Improved handling of relocations in DLLs
  • Added option "Destroy Exports" in Control Messages from DLL
  • Improved relocations of undefined opcodes in Virtual Machine
  • Improved support protecting DLLs with stripped relocations
  • XBundler: Support for KernelBase.dll hooking in Windows 7
  • XBundler: Added support for RealBasic 9.2
  • XBundler: Improved compatibility with specific Flash applications
  • XBundler: Improved ReHookingEnabled option
  • XBundler: Added error message when file cannot be extracted to disk (when "Extract to disk" option is enabled)
  • Fixed compatibility issue with multiple CISC VMs in specific DLLs
  • Fixed compatibility with Antimonitor and VPN Connector
  • Fixed compatibility with antidump VM in applications with mixed .NET and native code
  • Minor bugs fixed

New in Themida 2.0.8.0 (Aug 7, 2012)

  • Improved compatibility in CHECK_PROTECTION macro
  • Improved compatibility with CHECK_CODE_INTEGRITY macro
  • Improved compatibility with "Hide from PE Scanners --> Type 4" in specific applications
  • Improved compatibility with "ImplicitImport" option for specific DLLs
  • Improved compatibility with API-Wrapping Level 2 in specific applications
  • Opcodes inside the Unprotected macro are now scrambled
  • Added compatibility with anti-debug and Rising PC Doctor antivirus
  • XBundler: Improved compatibility with specific RealBasic applications
  • XBundler: Fixed compatibility issue with SearchPathW
  • Fixed virtualization of "xchg REG32, ESP"
  • Fixed compatibility issue in CHECK_PROTECTION for specific DLLs
  • Fixed compatibility issue with Windows 7 build 7077
  • Minor bugs fixed

New in Themida 2.0.7.0 (Aug 7, 2012)

  • Added new anti-dump VM
  • Improved detection of APIs to protect in API-Wrapping engine
  • Improved merging of sections in specific applications
  • Added compatibility with ImplicitImport option (in SecureEngine Config) and WinlicenseSDK.dll
  • Added check to detect if resources are already compressed
  • Added SecureEngine config option "NoThreadEngine" to disable the thread engine in protected application
  • Added SecureEngine config option "XBundlerHookMainOnly" to hook only main executable module
  • XBundler: Improved support for FindFirstFileW API in specific applications
  • XBundler: Improved compatibility with option "ActiveX" when DLL is selected to be extracted to disk
  • Fixed compilation error for multiple CHECK_CODE_INTEGRITY in Borland C applications
  • Fixed compatibility with CHECK_CODE_INTEGRITY in specific applications
  • Fixed exception searching for CHECK_PROTECTION macros in specific applications
  • Fixed compatibility issue in specific anti-dump VM
  • Fixed file patching check
  • Fixed exception when translating some components into Russian
  • Minor bugs fixed

New in Themida 2.0.6.0 (Aug 7, 2012)

  • Added CHECK_CODE_INTEGRITY macro to check if code section is patched
  • Improved internal variables engine
  • Improved some internal protections
  • Added new Antidump VM
  • Fully tested against Windows 7 beta
  • All protection code passes Application Verifier tests
  • Improved virtualization of "ADC [ESP + imm]" instruction
  • Improved constant hidding in Virtual Machine
  • Improved File Patching protection
  • Improved compatibility with CHECK_PROTECTION macro in specific DLLs
  • Improved compatibility protecting applications with mangled PE header
  • Improved detection and relocation control in CheckProtection macros in DLLs
  • Improved option "KeepDebugInfo" in SecureEngineConfig.ini
  • Included log of CheckProtection macros in TMlog.txt/WLlog.txt
  • XBundler: Improved handling of SearchPathW
  • Fixed compatibility with anti-debug protection in very specific computers
  • Fixed detection of nested CodeReplace macros
  • Refresh button was not updating the CodeReplace panel
  • Minor bugs fixed

New in Themida 2.0.5.0 (Aug 7, 2012)

  • Added CHECK_PROTECTION macro to check the status of the protection
  • Improved Dynamic Opcodes generation in Virtual Machine
  • Added internal option to preserve Debug data in protected application
  • Improved internal exception handler
  • Improved macro recognition in Visual Basic applications
  • Added Type 4 and Type 5 in "Hide PE Scanners" option
  • Improved loader for applications with huge allocation of memory from the PE header
  • Improved compatibility with API-Wrapper in systems with mangled Kernel32.dll
  • Added option "DelayTLSloading" in SecureEngineConfig.ini for compatibility with specific VS2005 DLLs
  • Added internal option to skip specific APIs from being protected by the API-Wrapper
  • Added option "Run as admin in Vista" manifest in Advanced Options panel
  • XBundler: Added ActiveX support
  • Fixed compatibility issue with PowerBuilder applications under Windows 9x/Me
  • Fixed compatibility issue removing relocations section in DLL with not aligned sections
  • XBundler: Fixed compatibility issue with option "Delete Extracted files on exit" in VB applications
  • XBundler: Fixed return value in kernel32._lclose
  • Minor bugs fixed

New in Themida 2.0.4.0 (Apr 19, 2010)

  • New internal protections
  • Improved .NET protection compatibility with other .NET obfuscators
  • Added Type 3 in "Hide PE Scanners" option
  • Improved support in "DLL Plugin" option
  • Improved unloading of imported libraries in protected DLLs
  • Improved compatibility with Type 2 in "Hide PE Scanners" for specific applications
  • Added option to keep original date time in protected application
  • Improved compatibility with "ImplicitImport = true" option under Windows 9x/Me
  • Improved protection of specific applications when merging .bss sections
  • Improved import of customized dialogs
  • Optimized allocation of virtual memory
  • Added relative paths support in command line protection
  • Added macros include file for D language (Thanks Bryan Power)
  • Minor improvements in User Interface
  • XBundler: Improved exception handling in ReadFile
  • Fixed compatibility with Type 2 in "Hide PE Scanners" under Windows 9x/Me
  • Fixed displaying of error messages when splash screen option is enabled
  • Improved Virtual Machine detection under Windows 9x/Me
  • Minor bugs fixed

New in Themida 2.0.3.0 (Apr 19, 2010)

  • Improved VM anti-dump technology
  • Improved compatibility with specific .NET applications
  • Improved compatibility with Application Verifier
  • Improved clean up in protected DLLs (linked with Visual Studio runtime libraries)
  • Improved protection log generation
  • Minor improvements in User Interface
  • XBundler: Improved handling of LoadLibraryExW
  • Fixed compatibility issue with "Hide Pe Scanners" option in some .NET applications
  • Fixed compatibility with option "Hide PE scanners" in some applications
  • Fixed compatibility issue compressing resources in specific .NET applications
  • Fixed compatibility issue with specific applications under Windows 2003 Server (no Service Pack)
  • Minor bugs fixed

New in Themida 2.0.2.0 (Apr 19, 2010)

  • Improved support protecting PowerBuilder 11 applications
  • Protection macros log when a file is protected
  • Added compatibility with specific DLLs used for wide API-Hooking
  • XBundler: Added extraction path constants: %userdocs%, %userappdata%, %localappdata%, %commonappdata%
  • Fixed bug loading new files to protect under Windows 2008 Server x64
  • Fixed relocations issue under Vista for specific DLLs
  • Fixed fake debugger detection when using Ultra Debugger option with XBundler
  • Minor bugs fixed

New in Themida 2.0.1.0 (Apr 19, 2010)

  • Improved Virtual Machine technology
  • Added new anti-dump Virtual Machine
  • Improved protection via command line when SecureEngineConfig.ini is present
  • Added "Hide from PE scanners" option
  • Improved Entry Point protection in some applications
  • Added support protecting applications without aligned sections
  • Added drag&drop functionality in Application Information panel
  • Added MSVCR90 (VS2008) manifest in Advanced Options panel
  • Improved command line protection
  • Added option "XBundlerExceptionSupport" in SecureEngineConfig.ini, to improve exception handling in bundled DLLs under Windows Server 2008
  • XBundler: Improved support bundling mixed .NET and native DLLs
  • XBundler: Added ReHookingEnabled option (in SecureEngineConfig.ini) to hook already hooked functions
  • Fixed compatibility issue with specific .NET applications
  • Fixed compatibility with Chinese folder paths in some .NET applications
  • XBundler: Fixed compatibility with GetPrivateProfileInt under Vista with UAC enabled
  • Minor bugs fixed

New in Themida 1.9.9.0 (Apr 19, 2010)

  • Improved option "Protect as DLL plugin" for x64 systems
  • Added compatibility with System.ExceptObjProc hooking RaiseException
  • Improved exception handling under Vista
  • Added SecureEngineConfig.ini option: "ImplicitImport" to load all imported DLLs via Windows loader
  • Added SecureEngineConfig.ini option: "ImplicitRedirection" to avoid redirection of "CALL/JMP [API]" calls
  • Added SecureEngineConfig.ini option: "DisableNetencrypt2" for .NET applications
  • Added SecureEngineConfig.ini option: "PartialHooking" for .NET applications
  • Compatibility to protect special Flash (.EXE) applications
  • Added command line swith "/h" to display help about command line options
  • Added Persian language localization (Thanks Ebrahim Mirzazadeh)
  • Fixed return value in DLLMain for protected DLLs when abnormal exit occurs
  • Fixed exception when passing relative path names in "/inputfile" command line parameter
  • Fixed compression bug which affected some embedded files with XBundler
  • Minor bugs fixed

New in Themida 1.9.8.0 (Apr 19, 2010)

  • Added support for Excelsior Jet 6.0 applications
  • Added overlay protection for AutoIt compiled applications
  • XBundler: Added support for GetPrivateProfileSectionA, GetPrivateProfileSectionW, GetPrivateProfileIntW, GetPrivateProfileStringW
  • Added support for PowerBuilder 9 applications
  • XBundler: Added option "GetPrivateProfile APIs support"
  • XBundler: Allow injection of data files and DLLs inside PowerBuilder applications and Flash applications
  • Fixed exception when AntiFile patching was enabled and rest of options disabled
  • Fixed compatibility issue emulating FPU instructions in some DLLs
  • Fixed compatibility issue protecting applications with just one byte overlay
  • XBundler: Fixed return value for SearchPath
  • XBundler: fixed compatibility issue with FindFirstFile in network shared folders
  • Minor bugs fixed

New in Themida 1.9.7.0 (Apr 19, 2010)

  • Improved compatibility in API-Wrapper with special system wide hooks
  • Added support to protect .NET applications compiled with VS 2008
  • Added compatibility with SecureWave
  • Added support to protect DLLs with empty Import Table
  • Fixed bug emulating "repnz cmps" instruction under CISC VMs
  • Fixed compatibility issue compressing resources in some .NET applications
  • Fixed compatibility issue running some .NET applications in XP Compatibility under Vista
  • Minor bugs fixed in API-Wrapper for some applications
  • Minor bugs fixeD

New in Themida 1.9.6.0 (Apr 19, 2010)

  • Added Custom DLL to give full control of each displayed message (like multilanguage support)
  • Improved protections
  • Added option to insert extra manifest information in the protected application
  • Optimized API-Wrapper
  • Compatibility with TruPrevent technology in Panda IS2008 and .NET applications
  • Improved compatibility under x64 systems for protected plugins
  • XBundler: Added support to bundle DLLs with multiple cross linking with other embedded DLLs
  • XBundler: Minor bugs fixed in FindNextFileW
  • Fixed compatibility issue virtualizing code in DLLs with null entries in relocations table
  • Minor bugs fixed

New in Themida 1.9.5.0 (Apr 19, 2010)

  • Improved protection
  • Improved compatibility loading/unloading system wide hooks
  • Improved .NET protection
  • Added antidebugger detection
  • Optimized loading of .NET framework
  • Added compatibility with "Billenium Effects VCL" API hooking
  • "IndirectAPIcall" option in SecureEngineConfig.ini for better compatibility with application API hooking
  • XBundler: Improved handling of statically linked DLLs when bundled
  • Fixed false positive detection by NOD32 in some protected applications
  • Fixed virtualization in CISC VMs for "LEA reg32, [esp + reg32 * imm + imm32]"
  • Fixed problem in very big VM macros under CISC virtual machines
  • XBundler: DLLs marked with "extract to disk" failed when statically linked with the protected application
  • XBundler: Fixed compatibility with OpenGL dlls
  • XBundler: Fixed compatibility issue with ReadFile using Overlapped.OffsetHigh
  • Minor bugs fixed

New in Themida 1.9.4.0 (Apr 19, 2010)

  • Internal protections added
  • Added new Antidump VM technique
  • Added support to protect applications with incompatible TLS directory
  • GUI improvements under Vista
  • Fixed issue with dynamic decryption in VIA Esther x86 processors
  • Fixed compatibility issue with AntiDump VM in specific applications
  • XBundler: fixed compatibility issue bundling some dlls with .bss section
  • Minor bugs fixed

New in Themida 1.9.3.0 (Apr 19, 2010)

  • Added support for VS2007 applications
  • Added File Patching option to support signed files
  • Added support to protect DLLs with empty relocation table
  • Improved compatibility with some .NET applicatins under Vista
  • Fixed compatibility wrapping ICMP.IcmpCreateFile
  • Fixed compatibility in some applicatons with API-Wrapper enabled and running under Wine
  • .NET: fixed compatibility issue loading libraries as image resource
  • Fixed compatibility with some DLLs protected with Code Virtualizer + Themida/WinLicense
  • Minor bugs fixed

New in Themida 1.9.2.0 (Apr 19, 2010)

  • Added Ultra debugger detection option
  • Improved exit of .NET applications under Vista
  • Added support protecting DLLs with EntryPoint = 0
  • Every option can be customized from command line using INI file
  • Added "Fake Stack emulation" switch for compatibility with some PureBasic applications
  • XBundler: Added "Deleted extracted on exit" for .NET applications XBundler: Added "Deleted extracted on exit" for .NET applications
  • Fixed random bug in decompression module for specific applications

New in Themida 1.9.1.0 (Apr 19, 2010)

  • New internal protections
  • Added API-Wrapper Levels (Protection Options panel)
  • .NET: Improved compatibility with some .NET applications with non standard COM directory
  • Fixed compatibility with some applications when generating a crash dump
  • Fixed compatibility issue retrieving the start address of functions in MAP files for Visual Basic applications

New in Themida 1.9.0.0 (Apr 19, 2010)

  • Multi-Language support in User Interface (Advanced Options->Localization)
  • Improved Entry Point protection
  • Improved API checksums
  • Added support to specify file to protect from command line (instead of application in project file)
  • SecureEngineConfig.ini: "ImportLib" entry is only applied when the library is imported directly
  • New include file for PureBasic macros (Thanks Mitchell Vincent)
  • Any protection message in Customized Dialogs can be skipped from being displayed
  • Fixed compatibility issue registering DLLs on Vista with UAC enabled
  • Fixed compatibility issue with Vista Themes in some protected applications
  • Fixed bug wrapping import table for specific big applications (> 20Mb)

New in Themida 1.8.9.0 (Apr 19, 2010)

  • XBundler: Improved UNICODE support in CreateFileW
  • Fixed random bug which produced invalid PE headers for some applications
  • Wine: Fixed compatibility issue with antidebug under Wine
  • Wine: Fixed compatibility issue with API-Wrapper under Wine for some applications

New in Themida 1.8.8.0 (Apr 19, 2010)

  • Improved Anti-VM dump
  • "StopMergingSection" option now works on EXEs and DLLs
  • Added option to link specific DLLs by import table
  • XBundler: Added option "Delete extracted files on exit"
  • XBundler: Improved multithread access to bundled files
  • XBundler: Drag & Drop folders
  • Advanced Options settings where not processed when protecting via command line
  • Fixed issue with DEP enabled when registering some DLLs
  • "Play sound when protection finished" made exception if no wave device present
  • Minor bugs fixed

New in Themida 1.8.7.0 (Apr 19, 2010)

  • Internal improvements
  • Process Explorer detection can be now enabled from SecureEngineConfig.ini
  • Detection of DLLs that are registered via regsvr32
  • Last Project loaded in user interface
  • XBundler: Allow injecting files from non relative path
  • XBundler: AVI support option imported to User Interface
  • Fixed memory issues in some computers with more that 2Gb memory
  • Minor bug fixed in debugger detection for very specific computers
  • Minor bugs fixed on Vista

New in Themida 1.8.6.0 (Apr 19, 2010)

  • Improved internal protection
  • New Anti-Monitors detections added
  • Optional sound when protection completes
  • Imported DLLs not required being present in protection time
  • Fixed compatibility issue with Multi-Branch Technology under Intel Core 2 duo processors
  • Fixed API-Wrapping for applications importing MSVCP80.DLL
  • Fixed hang when protecting via command line for some applications
  • Fixed virtualization of "lock XADD [reg32], reg32" instruction
  • Fixed exception compressing resources in rare applications
  • Fixed relocations problem with very specific DLLs
  • XBundler: Fixed compatibility issue with some applications bundling AVI files

New in Themida 1.8.5.0 (Apr 19, 2010)

  • Multi-Branch Technology in Virtual Machine (see Virtual Machine panel)
  • New internal mutation engine
  • Added new detections for monitor tools
  • Improved compatibility bundling protected DLLs in XBundler
  • XBundler: support for environment variables in extraction path (i.e. %TEMP%)
  • XBundler: Added support to embed protected DLLs with Anti-Patching enabled
  • Fixed compatibility with user interface when running with restricter user's rights
  • Fixed problem in some DLLs with relocations when "StopMergingSection" is enabled
  • XBundler: Fixed dependencies issues between embedded DLLs when loaded from a subdirectory

New in Themida 1.8.4.0 (Apr 19, 2010)

  • Added compatibility with Wine
  • Added anti File Patching option (Protection Options panel)
  • Added support to protect applications with invalid relocations directory
  • Added internal option to stop merging sections (SecureEngineConfig.ini)
  • Fixed compatibility issue protecting APIs in applications with side-by-side assemblies
  • Fixed memory leak unloading protected DLLs when Resources compression was enabled
  • Correct displaying of different UNICODE character sets in User Interface
  • Fixed compatibility with null TLS array for some protected ActiveX controls
  • XBundler: Fixed interaction with .NET assemblies protection in some applications

New in Themida 1.8.3.0 (Apr 19, 2010)

  • Added .NET support for Windows Vista RC2
  • Added support for "Excelsior JET" applications
  • Added new file monitor detection
  • Added log with all protection settings when an application is protected
  • XBundler: Added support for LoadImageA
  • Fixed compatibility with API-Wrapping for global hooked APIs in some systems
  • Fixed compatibility issue with .NET assemblies protection under Windows Vista
  • Debugger Message was still displayed when selecting "Exit Silently" when debugger found

New in Themida 1.8.2.0 (Apr 19, 2010)

  • Added new processor (CISC-2) in virtual machine
  • Added support for "Exe4j" applications
  • Added support for PowerBuilder applications
  • Added new anti-dump for Virtual Machine
  • Added emulation of non allocated stack values for VM macros in PureBasic
  • Added support for applications which assume the .BSS section initialized to zero
  • Improved Flash application detection
  • XBundler: Optimized search of bundled DLLs
  • Added include file and macro example for PureBasic
  • Fixed compatibility issue when using Virtual API-Wrapping + CLEAR macros in some applications
  • Fixed compatibility wrapping some APIs under specific versions of Windows 2000/XP

New in Themida 1.8.1.0 (Apr 19, 2010)

  • Added support with .NET XenoCode applications
  • Added support for DLLs with shared PE sections for API-Hooking
  • Support to load dependant DLLs when registering a protected DLL from a external directory
  • Displaying CodeReplace macros virtualization while protecting application
  • Displaying Virtual API-Wrapper status while protecting application
  • Fixed compatibility issue with anti-Monitor under Windows Vista x64
  • Fixed compatibility issue emulating some instructions with mutable CISC processors
  • Fixed problem with corrupted project files
  • Fixed compatibility issue with high percent of dynamic opcodes in mutable CISC processors
  • XBundler: Fixed compatibility with GetPrivateProfile in UNICODE systems

New in Themida 1.8.0.0 (Apr 19, 2010)

  • Added CPU customization for virtual machine
  • Added new mutable RISC-128 processor (virtual machine)
  • Added new mutable CISC processor (virtual machine)
  • Multiprocessor option for CISC virtual machine
  • Added stats (complexity, size, speed) for selected processor
  • Added hour glass icon in splash screen if displaying splash by number of seconds
  • Exact displaying time of splash screen (independently of computer speed)
  • Added compatibility with new API-Hooking in Kaspersky antivirus (from update 01-Sep-06)
  • Fixed compatibility issue with anti-debugger technique under Windows NT 4.0
  • Fixed exception compressing already compressed resources for some applications

New in Themida 1.7.60 (Apr 19, 2010)

  • Added new anti-debugger techniques
  • Splash screen now displays the Application name in the taskbar
  • Added support to protect applications with mangled PE headers
  • XBundler: Added support for GetPrivateProfileInt function
  • XBundler: Added support for GetPrivateProfileString function
  • XBundler: Added support with Kingsoft DuBa antivirus API hooking
  • XBundler: Added support with Panda antivirus API hooking
  • XBundler: Added support for SearchPathA/SearchPathW
  • Updated help file
  • Fixed compatibility issue displaying big splash screens
  • Fixed compatibility issue truncating resources in some applications
  • XBundler: Fixed compatibility issue under Windows 95
  • XBundler: Fixed compatibility issue bundling many files (more than 400) with long file names

New in Themida 1.7.3.0 (Apr 19, 2010)

  • Added new protection: "VM Hard Tracing" in Virtual Machine panel
  • Added support to put other compressors/protectors on top of protected applications
  • Added new anti-monitor thread
  • Improved detection of Visual Basic native applications
  • Added option (Advanced Options panel) to change the last section name
  • Improved internal bug fixer module
  • Minor improvements in User Interface
  • Fixed compatibility issue removing the splash screen in Windows Vista
  • Fixed compatibility issue registering DLLs (via regsvr32) under Windows Vista

New in Themida 1.7.0.0 (Apr 19, 2010)

  • Added Advanced Option: Insert splash screen in protected application
  • Added new anti-monitor technique
  • Added output file check before protection
  • Improved some internal protection engines
  • Fixed fake virus warning from Symantec antivirus
  • Disabled oreans32 service in protected applications

New in Themida 1.6.40 (Apr 19, 2010)

  • Added support for REALbasic applications
  • Speed optimization in XBundler
  • Added new anti-debugger thread
  • Added some more anti-debugger detections
  • Fixed compatibility issue on API-Wrapper for some applications
  • Fixed bug wrapping some APIs under Windows x64 systems
  • Minor bugs fixed

New in Themida 1.6.0.0 (Apr 19, 2010)

  • Added support for Windows Vista Beta 2
  • Fixed relocations problem with VM macros in some DLLs
  • Minor bugs fixed

New in Themida 1.5.6.0 (Apr 19, 2010)

  • Internal protections added
  • Added VMware/VirtualPC detection for protected DLLs
  • Added more anti-debugger detections techniques
  • Added support for Active Context based DLLs
  • Added new Advanced Option in user interface (Active Context Support)
  • Fixed compatibility in VM macros for some DLLs
  • XBundler: Wrong return value in NumberOfBytesRead when ReadFile fails

New in Themida 1.5.3.0 (Apr 19, 2010)

  • Added new anti-debugger detections
  • Added Advanced Option: Enable/Disable .NET assemblies check
  • Added Advanced Options in User Interface
  • Added log of macros into text file (MacrosLog.txt)
  • Added detection of Code Virtualizer protected applications
  • Fixed compatibility issue in anti-debugger technique in Windows 9x/Me
  • XBundler: Fixed compatibility issue compressing some embedded media files

New in Themida 1.5.0.0 (Apr 19, 2010)

  • Improved analysis of application entry point to see if it can be fully virtualized
  • Fixed compatibility issue running protected applications under Windows x64 with dual core
  • Fixed deadlock when launching several protected applications under Windows x64
  • Fixed compatibility issue adding CodeReplace automatically for some applications
  • Fixed memory leak when loading/unloading several times a protected DLL
  • Fixed compatibility issue protecting some .NET applications
  • Fixed bug when saving a project with empty file entry
  • Minor bugs fixed

New in Themida 1.3.5.5 (Apr 19, 2010)

  • XBundler: Added support to bundle DLLs inside a protected DLL
  • XBundler: Added support to load embedded files when changing the current directory in runtime
  • XBundler: Optimized hooking for file access APIs
  • XBundler: Fixed compatibility issue with special wilcards in FindNextFile
  • XBundler: Fixed memory leak in GetModuleFileName
  • XBundler: Bug fixed in FindNextFileW
  • Fixed compatibility issue protecting some BDS2006 applications
  • Fixed compatibility issue protecting from command line with MAP file
  • Minor bugs fixed in User Interface

New in Themida 1.3.4.0 (Apr 19, 2010)

  • Fixed random bug in thread engine that crashed some instances of protected application
  • Fixed bug introduced with new metamorph engine when using VM macros inside DLLs
  • Fixed bug when using Virtual API Wrapping for some DLLs
  • XBundler: fixed compatibility issue when embedding files bigger than 20Mb
  • XBundler: Fixed compatibility issue with Urlmon.dll in .NET applications

New in Themida 1.3.30 (Apr 19, 2010)

  • Added support for Macromedia Director 7 applications
  • More improvements and security in Virtual Machine
  • Improved metamorph engine
  • Improved support to protect DLLs that work as plugins for other applications
  • XBundler: Added support for OpenFile
  • XBundler: Added support to hook external DLLs for .NET applications
  • Some minor bugs fixed

New in Themida 1.3.0.0 (Apr 19, 2010)

  • Increased security in Virtual Machine
  • Virtual Machine is now 100% metamorphic
  • Opcode permutations in Virtual Machine
  • Added option in user interface to control the VM mutation level
  • Improved command line support
  • Enhancements in user interface when protecting an application
  • Fixed problem detecting addresses of macros for some applications
  • Fixed debugger detection message for DLLs
  • Minor bugs fixed

New in Themida 1.2.8.6 (Apr 19, 2010)

  • Added support in XBundler for Win9x/Me with Microsoft Layer for Unicode
  • Fixed compatibility issue when disabling Advanced API-Wrapping
  • Fxed deadlock in some applications when protecting with Ring-0 disabled

New in Themida 1.2.8.0 (Apr 19, 2010)

  • Improved analisys for .NET applications
  • Added new Virtual Machine Macro with option to specify the complexity level in each macro
  • Added support to read Fortran MAP files
  • Fixed minor compatibility issues with some protected applications under Windows x64
  • Fixed bug in Visual Basic Macros for some applications

New in Themida 1.2.6.2 (Apr 19, 2010)

  • Added support to run protected applications in Compatibility Mode (Windows 9x/Me) under Windows XP
  • Fixed compatibility issue in DLLs with option "VM Instructions Mutation"
  • Fixed compatibility issue with some DLLs when running under Windows 9x/Me
  • Fixed bug when exiting protected DLLs under Windows 9x/Me
  • Fixed compatibility issue disabling the Ring0 protection under Windows 9x/Me
  • Fixed compatibility issue running protected applications under VMWare with Windows 9x/Me
  • Minor bugs fixed running protected applications under Windows 98

New in Themida 1.2.5.2 (Apr 19, 2010)

  • Addedd support to protect strongly named applications (only for .NET 2.0)
  • XBundler .NET: Added support to bundle strongly named assemblies
  • Fixed bug in Virtual Machine macros for DLLs
  • Fixed compatibility issue inserting macros in some Visual Basic Native applications
  • XBundler .NET: Fixed bug returning the bundled file names with FindFirstFile/FindNextFile

New in Themida 1.2.3.0 (Apr 19, 2010)

  • Added option to disable the Ring-0 technology
  • Added support to protect Rockey 4 protected applications
  • XBundler: Added support for GetFileInformationByHandle
  • XBundler .NET: Added support for .NET Framework 2.0
  • Added corrected PE checksum in protected file (required for some applications)
  • Added detection of x64 PE files
  • Automatic deletion of internal generated file "AdvancedOptions.ini"
  • XBundler .NET: Fixed compatibility issue in XBundler with some .NET applications
  • XBundler .NET: Fixed compatibility issue with FindNextFileW in .NET applications
  • Fixed compatibility issue protecting some .NET applications

New in Themida 1.2.2.0 (Apr 19, 2010)

  • XBundler: Added option to allow Shell Dialogs APIs to see the embedded files
  • XBundler: Added support for FindFirstFile / FindNextFile with embedded files
  • XBundler: Added Xbundler messages when protecting via command line
  • Fixed compatibility issue merging sections in Delphi 2006 applications

New in Themida 1.2.1.0 (Apr 19, 2010)

  • Added support for Macromedia Director applications
  • Added many internal 64 bits engines to support upcoming Themida64
  • Added 64 bits Virtual Machine to support upcoming Themida64
  • Fixed faked packed detection message in Delphi 2006 applications
  • Fixed compatibility issue with some Visual C++ applications compiled in debug mode

New in Themida 1.2.0.1 (Apr 19, 2010)

  • Fixed compatibility issue mutating FPU instructions (VM Instruction Mutation option)

New in Themida 1.2.0.0 (Apr 19, 2010)

  • Improved internal virtual machine
  • Added Virtual Machine anti dumper
  • Upgraded Virtual Machine Complexity option
  • Improved driver initialization
  • Improved mutation/obfuscation engine
  • Detection of missing DLLs in command line protection
  • Added detection of nested VM macros
  • Fixed compatibility issue with AMD64 X2 Dual Core CPU
  • Fixed compatibility issue with VM macros that affected some Visual Basic applications
  • Fixed compatibility issue with emulation of POPFD and stack operations

New in Themida 1.1.1.5 (Apr 19, 2010)

  • Fixed compatibility issue with main exception handler in .NET applications
  • Fixed virtualization of instruction "SHLD/SHRD xx, xx, CL"
  • Fixed compatibility issue protecting some Delphi 2005 applications
  • Fixed compatibility issue registering DLLs and OCXs
  • Fixed compatibility issue with nested exception handling in some VC applications
  • Minor bugs fixed in User Interface

New in Themida 1.1.1.0 (Apr 19, 2010)

  • Support for Windows x64
  • Support for Windows Vista beta
  • Support for VMWare/Virtual PC
  • Support for .NET framework 2.0 (x86-32/x86-64)
  • Implemented new Virtual Machine
  • Virtual Machine exported to applications through Macros
  • Entry Point Virtualization
  • Virtual API-Wrapper against tracers
  • Multi-Thread support in Virtual Machine
  • Nested macros support
  • CodeReplace mixed with Virtual Machine technology
  • Virtual Machine macros in DLLs with fully relocation
  • Improved compression for .NET applications
  • XBundler: Unlimited files to bundle
  • Added support for Macromedia Authorware Executables
  • Improved interaction with VM macros and user interface
  • Fixed DLL exit hang when protecting several DLLs
  • Fixed compatibility issue with Macros in Visual Basic 5
  • XBundler: Fixed compatibility issue with some .NET applications
  • Fixed compatibility issue in Virtual API Wrapped with long names exported functions
  • Fixed compatibility issue with Macromedia Authorware Executables > 3.5Mb
  • Fixed buffer overflow for huge VM macros
  • Fixed compatibility issue with OCX files
  • Fixed exit problem in .NET applications
  • Fixed compatibility issue with Virtual Machine and Visual Basic
  • Fixed VMWare/VirtualPC compatibility
  • Minor bugs fixed in XBundler
  • Minor bugs fixed

New in Themida 1.0.0.8 (Apr 19, 2010)

  • Added support for XBundler .NET
  • Optimized API-Wrapper for Delphi/BCB applications
  • Improved performance in ENCODE macros
  • Added deadlock detection when booting up a protected application
  • Added new AdvanceOptions.ini settings
  • Fixed compatibility issue in XBundler for some applications
  • Fixed race condition in ENCODE macro with multiple threads
  • Fixed exception when exiting in some Windows 9x systems
  • Fixed compatibility issue updating from old driver versions

New in Themida 1.0.0.7 (Apr 19, 2010)

  • Added support to protect forms in Delphi/BCB when linking with runtime libraries
  • Added support to protect PE files with empty sections in PE header
  • Added compatibility issue with Panda Antivirus with Uknown virus protection enabled
  • Added CodeReplace module to read function addresses from a MAP file
  • Added support to protect several DLLs and the main EXE for a single application
  • Added support for XBundler plugin
  • Fixed compatibility issue when several protected DLLs are exiting at the same time
  • Fixed bug in ENCODE_START/END macro
  • Fixed compatibility issue when protecting some .NET EXEs
  • Fixed compatibility issue in Themida Demo Nag screen that interacts with some applications returning a wrong window handle
  • Fixed random bug in driver extraction for some Windows systems
  • Fixed compatibility issue with NT services protection
  • Fixed compatibility issue with CodeReplace and EurekaLog (Win9x)
  • Minor bugs fixed

New in Themida 1.0.0.6 (Apr 19, 2010)

  • Added VMWare/VirtualPC detection
  • Added new protection techniques
  • Added support for some special PE files
  • Added different paths to store files to protect and last projects opened
  • Fixed compatibility issue in Themida driver with WOWEXEC (16 bits applications)
  • Fixed compatibility issue in monitor tool detection
  • Fixed bug with Visual Basic and CodeReplace macros
  • Fixed compatibility issue when killing some protected application from the Windows task manager
  • Fixed bug in WebUpdate module
  • Minor bugs fixed

New in Themida 1.0.0.5 (Apr 19, 2010)

  • Added support for Dual Intel Xeon EM64T with WinXP SP2 (32bits)
  • Added custom switch to unlock the Themida global semaphore
  • Fixed problem with driver extraction in some machines with Windows NT/2000
  • Fixed compatibility issue with .NET applications that use the SSL protocol

New in Themida 1.0.0.4 (Apr 19, 2010)

  • Added support to protect applications with empty resources section
  • Added support to protect applications linked with PellesC linker
  • Added plugin architecture to support upcoming protection plugins
  • Fixed compatibility issue with applications that connects to the internet using the SSL protocol
  • Fixed compatibility issue with protected applications running in some dual-processor machines
  • Fixed compatibility issue with protected applications that make use of the Windows Active Directory
  • Fixed bug in WebUpdate module

New in Themida 1.0.0.3 (Apr 19, 2010)

  • Upgraded Themida device driver to support some Intel Celeron processors with bug in refreshing of TLB
  • Minor bugs fixed

New in Themida 1.0.0.2 (Apr 19, 2010)

  • Added support for AMD64 with XP-SP2 (32 bits)
  • Added support for Windows XP with PAE (Physical Address Extension) enabled
  • Fixed random bug that caused some protected applications to crash when exiting by error message
  • Fixed compatibility issue when protecting a file through the command line
  • Fixed compatibility issue with some applications that overlap their TLS section with the code section
  • Change default GUI position from desktop centered to screen centered

New in Themida 1.0.0.0 (Apr 19, 2010)

  • Themida 1.0 Beta released