One Local Workstation, a 27B Model, Half an Hour: A Commercial App's License Check Taken Apart by Static Analysis
XDA lead technical editor Adam Conway published a hands-on test on August 22: running Q8-quantized Qwen 3.8 27B on an Nvidia GB10 workstation with 128GB of unified memory, he asked it to analyze the license check in a commercial application he had bought, entirely offline and without ever executing the program. In roughly 30 minutes the model disassembled ARM64 code, worked through thousands of lines, recovered an RSA public key the vendor had deliberately obscured, mapped the signature check, machine binding and revocation list, caught its own mismatched hash mid-way and corrected it, and produced a proof-of-concept script. Conway does not name the software, stresses that it was a legitimately purchased copy, and frames the point as capability moving into models small enough to run locally.











