whoamicrash / VMProtectDumper

git clone https://github.com/whoamicrash/VMProtectDumper.git

Windows tool for unpacking VMProtect-protected PE files from memory. Captures OEP, reconstructs IAT, harvests dynamic exec regions, integrates pe-sieve, extracts IOCs, and ships a password-protected archive. Supports EXE / DLL / service-DLL / dropper scenarios