It uses dnlib and AsmResolver to read and write .NET assemblies, helping to identify tampered or virtualized code blocks.
The tool acts as a dynamic logger and manipulator rather than a full devirtualizer. Its primary functions include: VMUnprotect.NET.rar
By utilizing the Harmony library, it hooks into the runtime to log the behavior of protected assemblies. It uses dnlib and AsmResolver to read and write
A companion project by the same author that specifically focuses on dynamically unpacking VMProtect-protected assemblies. VMUnprotect.NET.rar