A 27B Model That Reverse-Engineered a License Check (And How to Run It)

Sun, 23 Aug 2026 00:00:02 -0800

XDA ran a piece that stopped me mid-scroll: a 27B open-weights model reverse-engineered a commercial application’s license check — recovered a deliberately obscured crypto key out of ARM64 assembly, caught and corrected its own mistake without being told, and produced a working bypass PoC. In about thirty minutes. On a desktop box. I have (a version of) that box. So I went and set it up.

Sglang on Greg Herlein

A 27B Model That Reverse-Engineered a License Check (And How to Run It)