morimolymoly / VMUnprotect.Dumper

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.

VMUnprotect.Dumper

VMUnprotect.Dumper is a project engaged in hunting tampered VMProtect assemblies. It makes use of AsmResolver to dynamically unpack VMP protected assembly. Works on VMProtect 3.5.1 (Latest) and few versions back.

Before usage of VMUnprotect.Dumper

After usage of VMUnprotect.Dumper

Usage

VMUnprotect.Dumper.exe example.vmp.exe

If the target app has a different framework, it probably won't work. Compile it yourself for your needs.

Checkout also:

• VMUnprotect - VMUnprotect can dynamically log and manipulate calls from virtualized methods by VMProtect.

Credits

• wwh1004 - Idea.
• (Discord) MrToms#1244 - Resources

This tool uses the following (open source) software:

• AsmResolver by Washi, licensed under the MIT license, for reading/writing assemblies.

💵 Want to buy me a Coffee?

 - Donate BTC at `bc1q048wrqztka5x2syt9mtj68uuf73vqry60s38vf`
 - Donate ETH at `0x86b2C17C94A1E6f35d498d17a37dc1f8A715139b`