A static devirtualizer for VMProtect x64 3.x. powered by VTIL.
Playing with the VMProtect software protection. Automatic deobfuscation of pure functions using symbolic execution and LLVM.
protector & obfuscator & code virtualizer
VMUnprotect can dynamically log and manipulate calls from virtualized methods by VMProtect.
VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.
An x86-64 code virtualizer for VM based obfuscation
Experimental disassembler for x86 binaries virtualized by VMProtect 3
A Dynamic Study Vmprotect 1.x-1.9X Unpacking Toolkit, Recovery OEP, FIX PE, IAT and bypass protection with custom Loader and interceptor vmexit(aka context exchange) from packer stub.
A tool that aims to aid in finding VM entries in binaries protected by VMProtect 3.5
CVM is a header-only turing-complete virtual machine engine made in pure C.
Bypasses VMProtect's VMWare & VMWare Tools detection trough user-mode API hooks.
