Difficulty : 8 Language : C/C++ Platform : Windows 32-bit and 64-bit OS Version : All Packer / Protector : Themida 2.4.6.0
Description :
The objective is to interpret and reconstruct 3 procedures in each file that have been virtualized.
No additional options have been used.
The virtualized functions will execute when keys '1', '2' and '3' are pressed, respectively.
1 = WHITE 2 = RED 3 = BLACK
Only one "brand" of VM has been used per file.
I will upload additional ones when current challenges have been solved or seriously attempted.
Detailed information of the interpreting procedure/internals or a complete solution paper is preferable.
I will post similar challenges for other protectors if someone supplies me with a recent version (VMProtect, Enigma ...).
Difficulty : 8
Language : C/C++
Platform : Windows 32-bit and 64-bit
OS Version : All
Packer / Protector : Themida 2.4.6.0
Description :
The objective is to interpret and reconstruct 3 procedures in each file that have been virtualized.
No additional options have been used.
The virtualized functions will execute when keys '1', '2' and '3' are pressed, respectively.
1 = WHITE
2 = RED
3 = BLACK
Only one "brand" of VM has been used per file.
I will upload additional ones when current challenges have been solved or seriously attempted.
Detailed information of the interpreting procedure/internals or a complete solution paper is preferable.
I will post similar challenges for other protectors if someone supplies me with a recent version (
VMProtect, Enigma ...).Accepted solutions:
FISH32 : @koolk
TIGER32 : @koolk
DOLPHIN32 : @koolk
FISH64 : @koolk
TIGER64 : @koolk
Files:
devirtualizeme_tmd_2.4.6.0_fish32.rar
devirtualizeme_tmd_2.4.6.0_tiger32.rar
devirtualizeme_tmd_2.4.6.0_dolphin32.rar
devirtualizeme_tmd_2.4.6.0_fish64.rar
devirtualizeme_tmd_2.4.6.0_tiger64.rar
Screenshot :
Share this post
Link to post