VeryEasyCrackme |
I opened the executable in IDA Free and inspected the main function, where I found that the password was in plaintext and was hardcoded as "YourPass".
The program performs two anti-debugging checks: CheckDebug() uses IsDebuggerPresent() to detect a debugger, and CheckDebug2() checks for a debugger via an IAT function. To bypass these checks, I modified the RIP value to skip over both functions and prevent the program from calling ExitProcess().
|