HellSpider Posted May 17, 2017 Share Posted May 17, 2017 (edited) Difficulty : 8Language : C/C++Platform : Windows 32-bit and 64-bitOS Version : AllPacker / Protector : Themida 220.127.116.11 Description : The objective is to interpret and reconstruct 3 procedures in each file that have been virtualized. No additional options have been used. The virtualized functions will execute when keys '1', '2' and '3' are pressed, respectively. 1 = WHITE2 = RED3 = BLACK Only one "brand" of VM has been used per file. I will upload additional ones when current challenges have been solved or seriously attempted. Detailed information of the interpreting procedure/internals or a complete solution paper is preferable. I will post similar challenges for other protectors if someone supplies me with a recent version (VMProtect, Enigma ...). Accepted solutions: FISH32 : @koolk TIGER32 : @koolk DOLPHIN32 : @koolk FISH64 : @koolk TIGER64 : @koolk Files: devirtualizeme_tmd_18.104.22.168_fish32.rardevirtualizeme_tmd_22.214.171.124_tiger32.rardevirtualizeme_tmd_126.96.36.199_dolphin32.rardevirtualizeme_tmd_188.8.131.52_fish64.rardevirtualizeme_tmd_184.108.40.206_tiger64.rar Screenshot : Edited July 14, 2017 by HellSpider Link to comment Share on other sites More sharing options...
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!Register a new account
Already have an account? Sign in here.Sign In Now