HN1 on 2019-05-23 00:10:
[Click to reveal]Found the password: - Password any special characters!
7eRoM on 2019-05-24 11:10:
It`s a specific word.
Hint: When you see "Congratz!", you are right!
coyote_0x90 on 2019-05-24 18:32:
spoiler alert
"Simple?"
It cleverly sends us on a wild goose chase if a debugger is attached. I'm not sure how this debugger detection works yet, but if it is detected, then it runs different code that accepts all kinds of passwords that include chars over 128 and prints "You did it!"
Kesaya on 2019-05-25 12:19:
The detection is done via the Win32 Thread Information Block (fs:[18]) which accesses offset +30 (Process Environment Block) from which offset +2 is accessed (BeingDebugged Field). The value is written in esp+14 which is later checked and then either one of the two code blocks is executed.