Author: ver02
Date: 2025-02-04 07:19
Summary: I opened the executable in IDA Free and inspected the main function, where I found that the password was in plaintext and was hardcoded as "YourPass". The program performs two anti-debugging checks: CheckDebug() uses IsDebuggerPresent() to detect a debugger, and CheckDebug2() checks for a debugger via an IAT function. To bypass these checks, I modified the RIP value to skip over both functions and prevent the program from calling ExitProcess().

Download Archive Back to Crackme