bronze ASM

Challenge Information

• Category: Digital Forensics

• Level: easy

• Points: 50

description

An image was leaked from a babies store. the manager is so annoyed because he needs to identify the image to fire charges against the responsible employee. the key is the md5 of the image

Solution

we we'll start review source code and implementaion it

becuse my information in assembly is so limited I'll get info from other blog the function means to take the local variable stored in rbp-4 multiply it by 8 (left shift by 3) and compare the result with 5744.

Yes ! The parameter that we are looking for is the value stored in rbp-4, but how we are supposed to know it ? Simply suppose that parameter*8=5744, that makes the parameter=718.

Still have the message wrong submission popping up ? Easy, just have another look in the challenge description, it indicates that the format should be : FLAG{0_%X_0}, %X refers to Hexadecimal; As you can already guess the flag is : FLAG{0_2CE_0}

done 🎉

---