| Obsidian |
[Click to reveal]Nvm. You didn't only house anti debug logic in two functions. You added code integrity checks as well and I suspect... VEH+INT3 catching?
I'm honestly having more fun tackling the anti debug techniques than the keygen.
Though I did find the HWID generator and instrumented it with a basic Frida script. So I can invoke it, get the uint64_t and plug on instead of reimplementing your logic.
Want to see if I can observe your keygen logic dynamically. So I'm gonna continue disarming the anti-analysis. I like this crackme. Good work.
|
2026-07-30 20:28 |
| Obsidian |
The anti-debug checks were mainly contained in two functions. Patching them to always return false was a bit trivial. Maybe consider code integrity checks next go around if you decide to harden this crackme.
|
2026-07-28 18:25 |