https://github.com/void-stack/VMUnprotect.Dumper

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.
https://github.com/void-stack/VMUnprotect.Dumper

antitamper deobfuscator dotnet dumper unpacker vmp vmprotect

Last synced: about 2 months ago
JSON representation

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.

• Host: GitHub
• URL: https://github.com/void-stack/VMUnprotect.Dumper
• Owner: void-stack
• License: mit
• Created: 2022-02-20T16:17:19.000Z (over 2 years ago)
• Default Branch: master
• Last Pushed: 2022-08-30T19:21:33.000Z (about 2 years ago)
• Last Synced: 2024-06-12T05:32:47.432Z (3 months ago)
• Topics: antitamper, deobfuscator, dotnet, dumper, unpacker, vmp, vmprotect
• Language: C#
• Homepage:
• Size: 182 KB
• Stars: 301
• Watchers: 19
• Forks: 62
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

README

        


  

VMUnprotect.Dumper



  VMUnprotect.Dumper is a project engaged in hunting tampered VMProtect assemblies. It makes use of AsmResolver to dynamically unpack VMP protected assembly. Works on VMProtect 3.7.0 (Latest) and few versions back.





  

  



# Before usage of VMUnprotect.Dumper



# After usage of VMUnprotect.Dumper



# Usage

```sh

VMUnprotect.Dumper.exe example.vmp.exe

```

> If the target app has a different framework, it probably won't work. Compile it yourself for your needs. 


### Checkout also:

* [VMUnprotect](https://github.com/void-stack/VMUnprotect) - VMUnprotect can dynamically log and manipulate calls from virtualized methods by VMProtect.

# Credits

* [wwh1004](https://github.com/wwh1004) - Idea.

* [(Discord) MrToms#1244]() - Resources

This tool uses the following (open source) software:

* [AsmResolver](https://github.com/Washi1337/AsmResolver) by [Washi](https://github.com/Washi1337), licensed under the MIT license, for reading/writing assemblies.

## 💵 Want to buy me a Coffee?

     - Donate BTC at `bc1q048wrqztka5x2syt9mtj68uuf73vqry60s38vf`

     - Donate ETH at `0x86b2C17C94A1E6f35d498d17a37dc1f8A715139b`