Processing math: 100%

Tags: x86 reverse 

Rating: 5.0

Task: The flag is inside, but take it easy and don't waste your time, file Validator3000.zip attached.

Solution:

  1. Just in case you run the executable in virtual environment you’ll get in return this error: "Checker module not available";
  2. So you have to run it on a “real” PC -> press button "Check flag";
  3. Use "ProcessHacker" tool to dump memory and then search for strings inside the running module;
  4. There you’ll see string "0x1bbf3b4 38 ctfzone{R3Flec7i0n}";
  5. Bingo!