Unpacking VMProtect is rather straightforward and there are many ways in which it is documented for userland processes -

A few months ago, while hunting for vulnerable drivers to abuse for BYOVD on operations, I stumbled upon a repository of