Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.
Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.
WIP PoC for license emulation in Oreans products
A Binary Ninja plugin to deobfuscate Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
Generic Themida/WinLicense payload extractor. Launches protected PE as suspended process, detects section decryption, dumps unpacked binary with fixed headers, and scans process memory for IOCs. Supports EXE and DLL targets (x86/x64).
Add a description, image, and links to the winlicense topic page so that developers can more easily learn about it.
To associate your repository with the winlicense topic, visit your repo's landing page and select "manage topics."