http://brightprogrammer.in/tags/vm/Recent content in Vm on Siddharth MishraHugoenSun, 14 Jun 2026 21:53:10 -0700http://brightprogrammer.in/posts/one-instruction-set-computer-challenge-from-tetctf-nor-vm-elviss-magic-box/Fri, 10 Feb 2023 07:07:01 +0000http://brightprogrammer.in/posts/one-instruction-set-computer-challenge-from-tetctf-nor-vm-elviss-magic-box/<h1 id="elvis-magic-box">Elvis Magic Box</h1> <p>After completing the <a href="http://brightprogrammer.in/posts/a-self-debugging-software-protection-challenge/">previous</a> CrackMe based on a very good Anti-Debug technique (which can be further improved as I pointed out in that post by reading a research paper), Elvis, the author of previous challenge gave me another challenge. He already gave me a major hint about the challenge which you usually don’t get in real world scenarios. This challenge is another VM challenge and is an <code>OISC</code> (<strong>One Instruction Set Computer</strong>)</p>http://brightprogrammer.in/posts/a-self-debugging-software-protection-challenge/Sat, 28 Jan 2023 05:48:16 +0000http://brightprogrammer.in/posts/a-self-debugging-software-protection-challenge/<h1 id="elvis-protected-crackme">Elvis Protected CrackMe</h1> <figure class="image-block"> <a href="images/Untitled.png"> <img src="images/Untitled.png" alt="" loading="lazy" /> </a> </figure> <p>If the named mutex <code>MATESCTF_2019</code> is not present then the control flows into second function. I debugged the process and it enters into the second one by default as it should (as expected because from the beginning, there are no mutices created automatically). There are interesting things coming… Wait for it!</p> <p>The decompiled code looks like this. Pretty neat and clean (as expected for windows programs).</p>