Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.
Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.
WIP PoC for license emulation in Oreans products
A Binary Ninja plugin to deobfuscate Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
Generic Themida/WinLicense payload extractor. Launches protected PE as suspended process, detects section decryption, dumps unpacked binary with fixed headers, and scans process memory for IOCs. Supports EXE and DLL targets (x86/x64).
To associate your repository with the winlicense topic, visit your repo's landing page and select "manage topics."