ergrelet/unlicense

Health v2 · maintenance only

Adoption not part of the score

1450 stars · 260 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python 3 command-line tool that dynamically unpacks executables protected with Themida/WinLicense 2.x and 3.x. It automatically recovers the original entry point and rebuilds obfuscated import tables for 32-bit and 64-bit PE files and .NET assemblies.

Use cases

• unpack a Themida-protected executable
• dump a WinLicense-packed binary and fix its imports
• recover the original entry point of a packed PE
• unpack a .NET assembly protected with Themida
• analyze malware samples protected with Themida in a VM
• repair obfuscated import tables of a dumped executable

When to choose

• you need to unpack Themida/WinLicense 2.x or 3.x protected binaries
• you do malware analysis or reverse engineering on Windows PEs
• you want automatic OEP recovery and import table fixing
• you prefer a scriptable Python-based unpacking tool

When to avoid

• the target uses a different protector than Themida/WinLicense
• you need runnable dumps of .NET DLLs (unsupported)
• you cannot run the target executable safely (the tool executes it)
• the WinLicense-protected binary requires a license file you don't have

Facets

cli-tool · maturity active

reverse-engineering security cli security reverse-engineering windows developer-tools windows python cli unpacker themida winlicense malware-analysis frida import-fixing portable-executable dump

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ergrelet/unlicense")