Problem: When one unpacks a binary protected by solution such as Winlicense or Themida you are left with a sizable section of VM junk code that also contains important directories such as: EAT, TLS, relocations, debug and exceptions.
Removal of this section renders the binary unusable, under these circumstances.
Solution: We dump the required directories and move them into a new section, devoid of junk VM code, fixing section table, offsets and the checksum.
Makes analysis in IDA, etc - much nicer and faster!
Change Log: 2026-08-27 — added exception directory support 2026-08-28 — added support for moving single directory to new section