Rating:

  • Use this to convert the app0 partition to an ELF.
  • Use Ghidra to load.
  • Look for the string password.
  • Find the function that XORs two byte strings together (FUN_400d293c).
  • Manually perfoerm the XOR to get the flag.