VMProtect payload extractor with IAT reconstruction. Monitors section unpacking, dumps PE with fixed headers, reconstructs imports via module export enumeration, and scans heap for IOCs. Supports EXE and DLL targets (x86/x64).
reverse-engineering malware-analysis unpacker dumper security-tools pe-dumper vmprotect iat-reconstruction
-
Updated
Apr 14, 2026 - C