When Crypto join hands with Reversing, things might become really messy.

Flag is the MD5() of the correct password inputted to the binary: xiomara{MD5(password)}