My CrackMe solving

since no one replied my challenge Crack Me [?/10], i do it myself

What compiler

i use Exeinfo (SCRE plugin)
image %D0%90%D0%BD%D0%BD%D0%BE%D1%82%D0%B0%D1%86%D0%B8%D1%8F%202019-09-04%20193719

2 clue is a large number of strings go format

program written on Go.

Reversing with IDA

Load sample to ida, after few minutes you see this


What i going to do first is load this python script
image image
this better


23 line in decompiled code looks interesting, google it

Wails a framework for building desktop applications using Go & Web Technologies
let’s look at an example

find Run function
image
and xrefs at her

off_972CE0 address for higher-order functions
image
this is classic string compare function in Go

after decompile

here v2 is the length of the string, and hexadecimal values are the chunks of the string

finally get the key

2 Likes

Bookmarked for when i get home, looks like a great write up.