void-stack / vmunprotect Goto Github PK

VMProtect has VM detection and will often not allow programs to run if it detects a virtual machine. Does your software, which is absolutely amazing regardless, still work in this specific instance? I apologize if this is a poor question, please close if you feel its not worth answering.

Check this : https://stackoverflow.com/questions/4671186/assembly-loadfile-throws-exception-about-missing-manifest

stopped here
what's the reason?
my file is net.framework 4.7.2

Is it only for .net framework? How to use it with dotnet 3.1 and newer dlls?

Hi, i have an exe that was obfuscated with VM protect.
I have used your dumper as well as KsDumper to dump the app from memory. Now i am faced with the task of devitalizing the code and removing all the delegate calls.
Do you have any suggestions as to how i would go about using this project as a starting point for achieving such?
To date, this is the only project that ive found that can even see whats going on with this app, because it can successfully hook any delegate call that is made when i run the tool; with the exe. I'm pretty sure the exe was protected with version 3.6 of VMProtect, hence why the old 2020 projects ive found wont work.
Any help would be seriously appreciated, this project could turn into a way to fully deobfuscate these kinds of protected assemblies.

https://gofile.io/d/Y6le4a

cant manage to make it work with this exe

https://www.mediafire.com/file/ew864w0xfz2rgxd/Dream_Patch_Switcher.exe/file

I am using vs 2012 and source contains $
so

how can I fix that?

Regards,

i mean the target i try is not a .net application, are these dumpers only for .net app ??

trying harmony to hook on the bytecode dispatcher, the module ctor runs automatically(harmony trying to get info), and it runs before the patch, any idea how i can apply the patch ? one way is to patch the call in the cctor and run it after the patching?