My keygen sticks more to the disassembly.
https://pastebin.com/Tr2FaT4A |
==> |
@nightxyz Still don't quite get it. I see what you're saying, but 'bf 68 31 15 00' will do an immediate load of the value 0x153168 to rdi (not the value from the pointer 0x153168).
And where is the code that xor's the values four by four?
Don't recognize any loop in the x64 code. |
==> |
Don't get it, is the result of this the flag?
3: bf 68 31 15 00 mov edi,0x153168
8: 81 f7 74 79 65 68 xor edi,0x68657974
|
==> |