nx3n's Find a password

Author:
nx3n

Language:
Assembler

Upload:
2026-11-08 23:53

Download

Platform:
Windows

Difficulty:
1.3

Quality:
3.7

Arch:
x86-64

Downloads:
151

Size:
56.70 KB

Writeups:
0

Comments:
6

Description

Find the password! Challenges: - String obfuscation, - Junk code.

Labels ?

Custom / generic obfuscation

Comments (6)
Writeups (0)

You must be logged in to post a comment

arshi on 2026-11-09 07:30: [Click to reveal]

OmarDecryptX on 2026-11-09 11:23: [Click to reveal]lea rdx,qword ptr ds:[140009030] call <JMP.&scanf> lea rcx,qword ptr ds:[140009030] cmp byte ptr ds:[140004005],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004001],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004002],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004003],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004004],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004005],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004006],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004007],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004008],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004009],al je my_first_crackme.1400020BB cmp byte ptr ds:[14000400A],al je my_first_crackme.1400020BB cmp byte ptr ds:[14000400B],al je my_first_crackme.1400020BB call my_first_crackme.140002110 cmp byte ptr ds:[140004000],al je my_first_crackme.1400020BB cmp byte ptr ds:[14000400C],al je my_first_crackme.1400020BB cmp byte ptr ds:[14000400D],al je my_first_crackme.1400020BB cmp byte ptr ds:[14000400E],al je my_first_crackme.1400020BB cmp byte ptr ds:[14000400F],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004010],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004011],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004012],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004013],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004014],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004015],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004016],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004017],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004018],al je my_first_crackme.1400020BB cmp byte ptr ds:[140004019],al je my_first_crackme.1400020BB cmp byte ptr ds:[14000401A],al je my_first_crackme.1400020BB cmp byte ptr ds:[14000401B],al je my_first_crackme.1400020BB cmp byte ptr ds:[14000401C],al je my_first_crackme.1400020BB cmp byte ptr ds:[14000401D],al je my_first_crackme.1400020BB mov rax,A21676E6F7257 mov qword ptr ss:[rsp+20],rax lea rcx,qword ptr ss:[rsp+20] call <JMP.&printf> Password is ASOINdiu129021j90e12

micky23310 on 2026-11-09 14:23: [Click to reveal]

liboxin on 2026-11-09 14:39: [Click to reveal]

CGOfficial on 2026-11-09 17:25: [Click to reveal].text:00007FF74FD02110 ; void __fastcall __noreturn cmpr(__int64) .text:00007FF74FD02110 public cmpr .text:00007FF74FD02110 cmpr proc near ; CODE XREF: main+ED↑p .text:00007FF74FD02110 push r12 .text:00007FF74FD02112 sub rsp, 20h .text:00007FF74FD02116 mov r12, rcx .text:00007FF74FD02119 cmp byte ptr [r12], 41h ; 'A' .text:00007FF74FD0211E jnz wrong .text:00007FF74FD02124 cmp byte ptr [r12+1], 53h ; 'S' .text:00007FF74FD0212A jnz wrong .text:00007FF74FD02130 cmp byte ptr [r12+2], 4Fh ; 'O' .text:00007FF74FD02136 jnz wrong .text:00007FF74FD0213C cmp byte ptr [r12+3], 49h ; 'I' .text:00007FF74FD02142 jnz wrong .text:00007FF74FD02148 cmp byte ptr [r12+4], 4Eh ; 'N' .text:00007FF74FD0214E jnz wrong .text:00007FF74FD02154 cmp byte ptr [r12+5], 64h ; 'd' .text:00007FF74FD0215A jnz short wrong .text:00007FF74FD0215C cmp byte ptr [r12+6], 69h ; 'i' .text:00007FF74FD02162 jnz short wrong .text:00007FF74FD02164 cmp byte ptr [r12+7], 75h ; 'u' .text:00007FF74FD0216A jnz short wrong .text:00007FF74FD0216C cmp byte ptr [r12+8], 31h ; '1' .text:00007FF74FD02172 jnz short wrong .text:00007FF74FD02174 cmp byte ptr [r12+9], 32h ; '2' .text:00007FF74FD0217A jnz short wrong .text:00007FF74FD0217C cmp byte ptr [r12+0Ah], 39h ; '9' .text:00007FF74FD02182 jnz short wrong .text:00007FF74FD02184 cmp byte ptr [r12+0Bh], 30h ; '0' .text:00007FF74FD0218A jnz short wrong .text:00007FF74FD0218C cmp byte ptr [r12+0Ch], 32h ; '2' .text:00007FF74FD02192 jnz short wrong .text:00007FF74FD02194 cmp byte ptr [r12+0Dh], 31h ; '1' .text:00007FF74FD0219A jnz short wrong .text:00007FF74FD0219C cmp byte ptr [r12+0Eh], 6Ah ; 'j' .text:00007FF74FD021A2 jnz short wrong .text:00007FF74FD021A4 cmp byte ptr [r12+0Fh], 39h ; '9' .text:00007FF74FD021AA jnz short wrong .text:00007FF74FD021AC cmp byte ptr [r12+10h], 30h ; '0' .text:00007FF74FD021B2 jnz short wrong .text:00007FF74FD021B4 cmp byte ptr [r12+11h], 65h ; 'e' .text:00007FF74FD021BA jnz short wrong .text:00007FF74FD021BC cmp byte ptr [r12+12h], 31h ; '1' .text:00007FF74FD021C2 jnz short wrong .text:00007FF74FD021C4 cmp byte ptr [r12+13h], 32h ; '2' .text:00007FF74FD021CA jnz short wrong .text:00007FF74FD021CC cmp byte ptr [r12+14h], 0 .text:00007FF74FD021D2 jnz short wrong .text:00007FF74FD021D4 mov al, 1 .text:00007FF74FD021D6 jmp short exit_1 .text:00007FF74FD021D8 ; --------------------------------------------------------------------------- .text:00007FF74FD021D8 .text:00007FF74FD021D8 wrong: ; CODE XREF: cmpr+E↑j .text:00007FF74FD021D8 ; cmpr+1A↑j ... .text:00007FF74FD021D8 mov al, 0 .text:00007FF74FD021D8 cmpr endp ; Every character is in hexadecimal Simple take each one and put them together and convert from hex to ascii 65 83 79 73 78 100 105 117 49 50 57 48 50 49 106 57 48 101 49 50 = ASOINdiu129021j90e12

wesker on 2026-11-10 18:13: IDA Has been leaking password. bool __fastcall sub_7FF6BF102110(_BYTE *a1) { return *a1 == 65 && a1[1] == 83 && a1[2] == 79 && a1[3] == 73 && a1[4] == 78 && a1[5] == 100 && a1[6] == 105 && a1[7] == 117 && a1[8] == 49 && a1[9] == 50 && a1[10] == 57 && a1[11] == 48 && a1[12] == 50 && a1[13] == 49 && a1[14] == 106 && a1[15] == 57 && a1[16] == 48 && a1[17] == 101 && a1[18] == 49 && a1[19] == 50 && a1[20] == 0; } And x64dbg 00007FF6BF102110 | 41:54 | push r12 00007FF6BF102112 | 48:83EC 20 | sub rsp,20 00007FF6BF102116 | 49:89CC | mov r12,rcx ; r12 = "123" (input) 00007FF6BF102119 | 41:803C24 41 | cmp byte ptr ds:[r12],41 ; 'A' 00007FF6BF10211E | 0F85 B4000000 | jne my_first_crackme.7FF6BF1021D8 00007FF6BF102124 | 41:807C24 01 53 | cmp byte ptr ds:[r12+1],53 ; 'S' 00007FF6BF10212A | 0F85 A8000000 | jne my_first_crackme.7FF6BF1021D8 00007FF6BF102130 | 41:807C24 02 4F | cmp byte ptr ds:[r12+2],4F ; 'O' 00007FF6BF102136 | 0F85 9C000000 | jne my_first_crackme.7FF6BF1021D8 00007FF6BF10213C | 41:807C24 03 49 | cmp byte ptr ds:[r12+3],49 ; 'I' 00007FF6BF102142 | 0F85 90000000 | jne my_first_crackme.7FF6BF1021D8 00007FF6BF102148 | 41:807C24 04 4E | cmp byte ptr ds:[r12+4],4E ; 'N' 00007FF6BF10214E | 0F85 84000000 | jne my_first_crackme.7FF6BF1021D8 00007FF6BF102154 | 41:807C24 05 64 | cmp byte ptr ds:[r12+5],64 ; 'd' 00007FF6BF10215A | 75 7C | jne my_first_crackme.7FF6BF1021D8 00007FF6BF10215C | 41:807C24 06 69 | cmp byte ptr ds:[r12+6],69 ; 'i' 00007FF6BF102162 | 75 74 | jne my_first_crackme.7FF6BF1021D8 00007FF6BF102164 | 41:807C24 07 75 | cmp byte ptr ds:[r12+7],75 ; 'u' 00007FF6BF10216A | 75 6C | jne my_first_crackme.7FF6BF1021D8 00007FF6BF10216C | 41:807C24 08 31 | cmp byte ptr ds:[r12+8],31 ; '1' 00007FF6BF102172 | 75 64 | jne my_first_crackme.7FF6BF1021D8 00007FF6BF102174 | 41:807C24 09 32 | cmp byte ptr ds:[r12+9],32 ; '2' 00007FF6BF10217A | 75 5C | jne my_first_crackme.7FF6BF1021D8 00007FF6BF10217C | 41:807C24 0A 39 | cmp byte ptr ds:[r12+A],39 ; '9' 00007FF6BF102182 | 75 54 | jne my_first_crackme.7FF6BF1021D8 00007FF6BF102184 | 41:807C24 0B 30 | cmp byte ptr ds:[r12+B],30 ; '0' 00007FF6BF10218A | 75 4C | jne my_first_crackme.7FF6BF1021D8 00007FF6BF10218C | 41:807C24 0C 32 | cmp byte ptr ds:[r12+C],32 ; '2' 00007FF6BF102192 | 75 44 | jne my_first_crackme.7FF6BF1021D8 00007FF6BF102194 | 41:807C24 0D 31 | cmp byte ptr ds:[r12+D],31 ; '1' 00007FF6BF10219A | 75 3C | jne my_first_crackme.7FF6BF1021D8 00007FF6BF10219C | 41:807C24 0E 6A | cmp byte ptr ds:[r12+E],6A ; 'j' 00007FF6BF1021A2 | 75 34 | jne my_first_crackme.7FF6BF1021D8 00007FF6BF1021A4 | 41:807C24 0F 39 | cmp byte ptr ds:[r12+F],39 ; '9' 00007FF6BF1021AA | 75 2C | jne my_first_crackme.7FF6BF1021D8 00007FF6BF1021AC | 41:807C24 10 30 | cmp byte ptr ds:[r12+10],30 ; '0' 00007FF6BF1021B2 | 75 24 | jne my_first_crackme.7FF6BF1021D8 00007FF6BF1021B4 | 41:807C24 11 65 | cmp byte ptr ds:[r12+11],65 ; 'e' 00007FF6BF1021BA | 75 1C | jne my_first_crackme.7FF6BF1021D8 00007FF6BF1021BC | 41:807C24 12 31 | cmp byte ptr ds:[r12+12],31 ; '1' 00007FF6BF1021C2 | 75 14 | jne my_first_crackme.7FF6BF1021D8 00007FF6BF1021C4 | 41:807C24 13 32 | cmp byte ptr ds:[r12+13],32 ; '2'

Show all spoilers

You must be logged in to submit a writeup

crackmes.one

crackmes.one

nx3n's Find a password