If the developer only used the "Packing" feature, your goal is to find the point in memory where the original code starts executing. VMProtect 2 - Part Two, Complete Static Analysis.md
Full "unpacking" (recovering original x86) is extremely rare. Most real-world work focuses on bypassing or stripping the VM from specific functions. Here’s the general roadmap: unpacking vmprotect