Лаборатория TJCTF 2016 - whatamitoyou [rev 90]

delimitry
, 1 июня 2016

Finn wrote a password generator but forgot how it worked. Can you help him out?
There are many passwords that can be generated, but only one is correct. You may need to do some recon to find the correct one. 

We are given a binary. It is necessary to find correct input to get a flag.

NB: This task is also by Fox Wilson, and it means that it could be harder than it seems!

After disassembling I've from that the first line is:
"Everyone... Bubblegum... I'm so dumb".
And to jump into flag printing code the last line must be:
"I'm gonna sing a song that feels so real, it'll make this door break!".

I've found this song lyrics - What Am I To You from Adventure Time.

After some time I've got an idea - that it is needed to put the song lines in the correct order.

I've debugged program, analysed the stack and understood that from each song line it is possible to jump to one of four next song lines. 

I've dumped the stack from GDB and marked lines and addresses to the next possible lines:

x/20gx $rbp-0x1d50
0x7fffffffc2a0: 0x0000000000000000 0x0000000000000000
0x7fffffffc2b0: 0x0000000000000000 0x0000000000000000
0x7fffffffc2c0: 0x0000000000000000 0x0000000000000000
0x7fffffffc2d0: 0x0000000000000000 0x0000000000000000
0x7fffffffc2e0: 0x0000000000000000 0x0000000000000000
0x7fffffffc2f0: 0x0000000000000000 0x0000000000000000
0x7fffffffc300: 0x0000000000000000 0x0000000000000000
0x7fffffffc310: 0x0000000000000000 0x0000000000000000
0x7fffffffc320: 0x0000000000000000 0x0000000000000000
0x7fffffffc330: 0x0000000000000000 0x0000000000000000
0x7fffffffc340: 0x0000000000000000 0x0000000000000000
0x7fffffffc350: 0x00007fffffffe0d8 0x0000000200000000
0x7fffffffc360: 0x2065726120756f59 0x207473656220796d # 18
0x7fffffffc370: 0x2073646e65697266 0x7720656874206e69
0x7fffffffc380: 0x0000002e646c726f 0x0000000000000000
0x7fffffffc390: 0x0000000000000000 0x0000000000000000
0x7fffffffc3a0: 0x0000000000000000 0x0000000000000000
0x7fffffffc3b0: 0x0000000000000000 0x0000000000000000
0x7fffffffc3c0: 0x0000000000000000 0x0000000000000000
0x7fffffffc3d0: 0x0000000000000000 0x0000000000000000
0x7fffffffc3e0: 0x0000000000000000 0x0000000000000000
0x7fffffffc3f0: 0x0000000000000000 0x0000000000000000
0x7fffffffc400: 0x0000000000000000 0x0000000000000000
0x7fffffffc410: 0x0000000000000000 0x0000000000000000
0x7fffffffc420: 0x0000000000000000 0x0000000000000000
0x7fffffffc430: 0x0000000000000000 0x0000000000000000
0x7fffffffc440: 0x0000000000000000 0x0000000000000000
0x7fffffffc450: 0x0000000000000000 0x0000000000000000
0x7fffffffc460: 0x00007fffffffdd80 0x00007fffffffdc50 c d
0x7fffffffc470: 0x00007fffffffcce0 0x00007fffffffd9f0 7 12
0x7fffffffc480: 0x0000000000000003 0x0000000000000000
0x7fffffffc490: 0x6a2049206e656857 0x6a202e2e2e747375 # 6
0x7fffffffc4a0: 0x2064616820747375 0x7920666f206c6c61
0x7fffffffc4b0: 0x657265687420756f 0x000000000000003f
0x7fffffffc4c0: 0x0000000000000000 0x0000000000000000
0x7fffffffc4d0: 0x0000000000000000 0x0000000000000000
0x7fffffffc4e0: 0x0000000000000000 0x0000000000000000
0x7fffffffc4f0: 0x0000000000000000 0x0000000000000000
0x7fffffffc500: 0x0000000000000000 0x0000000000000000
0x7fffffffc510: 0x0000000000000000 0x0000000000000000
0x7fffffffc520: 0x0000000000000000 0x0000000000000000
0x7fffffffc530: 0x0000000000000000 0x0000000000000000
0x7fffffffc540: 0x0000000000000000 0x0000000000000000
0x7fffffffc550: 0x0000000000000000 0x0000000000000000
0x7fffffffc560: 0x0000000000000000 0x0000000000000000
0x7fffffffc570: 0x0000000000000000 0x0000000000000000
0x7fffffffc580: 0x0000000000000000 0x0000000000000000
0x7fffffffc590: 0x00007fffffffd1a0 0x00007fffffffd530 1 14
0x7fffffffc5a0: 0x00007fffffffcce0 0x00007fffffffdb20 7 g
0x7fffffffc5b0: 0x0000000000000004 0x0000000000000000
0x7fffffffc5c0: 0x7567204920747542 0x616877202c737365 # 5
0x7fffffffc5d0: 0x692073656f642074 0x72657474616d2074
0x7fffffffc5e0: 0x0000000000000000 0x0000000000000000
0x7fffffffc5f0: 0x0000000000000000 0x0000000000000000
0x7fffffffc600: 0x0000000000000000 0x0000000000000000
0x7fffffffc610: 0x0000000000000000 0x0000000000000000
0x7fffffffc620: 0x0000000000000000 0x0000000000000000
0x7fffffffc630: 0x0000000000000000 0x0000000000000000
0x7fffffffc640: 0x0000000000000000 0x0000000000000000
0x7fffffffc650: 0x0000000000000000 0x0000000000000000
0x7fffffffc660: 0x0000000000000000 0x0000000000000000
0x7fffffffc670: 0x0000000000000000 0x0000000000000000
0x7fffffffc680: 0x0000000000000000 0x0000000000000000
0x7fffffffc690: 0x0000000000000000 0x0000000000000000
0x7fffffffc6a0: 0x0000000000000000 0x0000000000000000
0x7fffffffc6b0: 0x0000000000000000 0x0000000000000000
0x7fffffffc6c0: 0x00007fffffffd1a0 0x00007fffffffc490 1 6
0x7fffffffc6d0: 0x00007fffffffd1a0 0x00007fffffffce10 1 4
0x7fffffffc6e0: 0x00000000000003d6 0x0000000000000000
0x7fffffffc6f0: 0x6c20492074616857 0x77202e2e2e74736f # 3
0x7fffffffc700: 0x6569702061207361 0x6f7920666f206563
0x7fffffffc710: 0x2172696168207275 0x0000000000000000
0x7fffffffc720: 0x0000000000000000 0x0000000000000000
0x7fffffffc730: 0x0000000000000000 0x0000000000000000
0x7fffffffc740: 0x0000000000000000 0x0000000000000000
0x7fffffffc750: 0x0000000000000000 0x0000000000000000
0x7fffffffc760: 0x0000000000000000 0x0000000000000000
0x7fffffffc770: 0x0000000000000000 0x0000000000000000
0x7fffffffc780: 0x0000000000000000 0x0000000000000000
0x7fffffffc790: 0x0000000000000000 0x0000000000000000
0x7fffffffc7a0: 0x0000000000000000 0x0000000000000000
0x7fffffffc7b0: 0x0000000000000000 0x0000000000000000
0x7fffffffc7c0: 0x0000000000000000 0x0000000000000000
0x7fffffffc7d0: 0x0000000000000000 0x0000000000000000
0x7fffffffc7e0: 0x0000000000000000 0x0000000000000000
0x7fffffffc7f0: 0x00007fffffffd1a0 0x00007fffffffdeb0 1 10
0x7fffffffc800: 0x00007fffffffc5c0 0x00007fffffffce10 5 4
0x7fffffffc810: 0x000000000000002b 0x0000000000000000
0x7fffffffc820: 0x206d612074616857 0x756f79206f742049 # 9/11
0x7fffffffc830: 0x000000000000003f 0x0000000000000000
0x7fffffffc840: 0x0000000000000000 0x0000000000000000
0x7fffffffc850: 0x0000000000000000 0x0000000000000000
0x7fffffffc860: 0x0000000000000000 0x0000000000000000
0x7fffffffc870: 0x0000000000000000 0x0000000000000000
0x7fffffffc880: 0x0000000000000000 0x0000000000000000
0x7fffffffc890: 0x0000000000000000 0x0000000000000000
0x7fffffffc8a0: 0x0000000000000000 0x0000000000000000
0x7fffffffc8b0: 0x0000000000000000 0x0000000000000000
0x7fffffffc8c0: 0x0000000000000000 0x0000000000000000
0x7fffffffc8d0: 0x0000000000000000 0x0000000000000000
0x7fffffffc8e0: 0x0000000000000000 0x0000000000000000
0x7fffffffc8f0: 0x0000000000000000 0x0000000000000000
0x7fffffffc900: 0x0000000000000000 0x0000000000000000
0x7fffffffc910: 0x0000000000000000 0x0000000000000000
0x7fffffffc920: 0x00007fffffffd790 0x00007fffffffdeb0 16 10
0x7fffffffc930: 0x00007fffffffd9f0 0x00007fffffffc820 12 9
0x7fffffffc940: 0x00000000000001ed 0x0000000000000000
0x7fffffffc950: 0x6e6e6f67206d2749 0x6120676e69732061 # e
0x7fffffffc960: 0x6f7420676e6f7320 0x646e6120756f7920
0x7fffffffc970: 0x7375666572204920 0x6b616d206f742065
0x7fffffffc980: 0x6b61662074692065 0x0000000000002e65
0x7fffffffc990: 0x0000000000000000 0x0000000000000000
0x7fffffffc9a0: 0x0000000000000000 0x0000000000000000
0x7fffffffc9b0: 0x0000000000000000 0x0000000000000000
0x7fffffffc9c0: 0x0000000000000000 0x0000000000000000
0x7fffffffc9d0: 0x0000000000000000 0x0000000000000000
0x7fffffffc9e0: 0x0000000000000000 0x0000000000000000
0x7fffffffc9f0: 0x0000000000000000 0x0000000000000000
0x7fffffffca00: 0x0000000000000000 0x0000000000000000
0x7fffffffca10: 0x0000000000000000 0x0000000000000000
0x7fffffffca20: 0x0000000000000000 0x0000000000000000
0x7fffffffca30: 0x0000000000000000 0x0000000000000000
0x7fffffffca40: 0x0000000000000000 0x0000000000000000
0x7fffffffca50: 0x00007fffffffcce0 0x00007fffffffcf40 7 f
0x7fffffffca60: 0x00007fffffffc820 0x00007fffffffdeb0 9 10
0x7fffffffca70: 0x000000000000002f 0x0000000000000000
0x7fffffffca80: 0x646c756f68732049 0x756a206576616820 # 2
0x7fffffffca90: 0x20646c6f74207473 0x0000000000756f79
0x7fffffffcaa0: 0x0000000000000000 0x0000000000000000
0x7fffffffcab0: 0x0000000000000000 0x0000000000000000
0x7fffffffcac0: 0x0000000000000000 0x0000000000000000
0x7fffffffcad0: 0x0000000000000000 0x0000000000000000
0x7fffffffcae0: 0x0000000000000000 0x0000000000000000
0x7fffffffcaf0: 0x0000000000000000 0x0000000000000000
0x7fffffffcb00: 0x0000000000000000 0x0000000000000000
0x7fffffffcb10: 0x0000000000000000 0x0000000000000000
0x7fffffffcb20: 0x0000000000000000 0x0000000000000000
0x7fffffffcb30: 0x0000000000000000 0x0000000000000000
0x7fffffffcb40: 0x0000000000000000 0x0000000000000000
0x7fffffffcb50: 0x0000000000000000 0x0000000000000000
0x7fffffffcb60: 0x0000000000000000 0x0000000000000000
0x7fffffffcb70: 0x0000000000000000 0x0000000000000000
0x7fffffffcb80: 0x00007fffffffce10 0x00007fffffffc6f0 4 3
0x7fffffffcb90: 0x00007fffffffdeb0 0x00007fffffffd070 10 15
0x7fffffffcba0: 0x0000000000000393 0x0000000000000000
0x7fffffffcbb0: 0x20756f79202c684f 0x6220796d20657261 # 17
0x7fffffffcbc0: 0x6569726620747365 0x74206e692073646e
0x7fffffffcbd0: 0x646c726f77206568 0x000000000000002e
0x7fffffffcbe0: 0x0000000000000000 0x0000000000000000
0x7fffffffcbf0: 0x0000000000000000 0x0000000000000000
0x7fffffffcc00: 0x0000000000000000 0x0000000000000000
0x7fffffffcc10: 0x0000000000000000 0x0000000000000000
0x7fffffffcc20: 0x0000000000000000 0x0000000000000000
0x7fffffffcc30: 0x0000000000000000 0x0000000000000000
0x7fffffffcc40: 0x0000000000000000 0x0000000000000000
0x7fffffffcc50: 0x0000000000000000 0x0000000000000000
0x7fffffffcc60: 0x0000000000000000 0x0000000000000000
0x7fffffffcc70: 0x0000000000000000 0x0000000000000000
0x7fffffffcc80: 0x0000000000000000 0x0000000000000000
0x7fffffffcc90: 0x0000000000000000 0x0000000000000000
0x7fffffffcca0: 0x0000000000000000 0x0000000000000000
0x7fffffffccb0: 0x00007fffffffdc50 0x00007fffffffc360 d 18
0x7fffffffccc0: 0x00007fffffffdd80 0x00007fffffffcf40 c f
0x7fffffffccd0: 0x000000000000021f 0x0000000000000000
0x7fffffffcce0: 0x73756a204920684f 0x6c61206461682074 # 7
0x7fffffffccf0: 0x756f7920666f206c 0x7720657265687420
0x7fffffffcd00: 0x202c656d20687469 0x6e6569726620796d
0x7fffffffcd10: 0x0000002e2e2e7364 0x0000000000000000
0x7fffffffcd20: 0x0000000000000000 0x0000000000000000
0x7fffffffcd30: 0x0000000000000000 0x0000000000000000
0x7fffffffcd40: 0x0000000000000000 0x0000000000000000
0x7fffffffcd50: 0x0000000000000000 0x0000000000000000
0x7fffffffcd60: 0x0000000000000000 0x0000000000000000
0x7fffffffcd70: 0x0000000000000000 0x0000000000000000
0x7fffffffcd80: 0x0000000000000000 0x0000000000000000
0x7fffffffcd90: 0x0000000000000000 0x0000000000000000
0x7fffffffcda0: 0x0000000000000000 0x0000000000000000
0x7fffffffcdb0: 0x0000000000000000 0x0000000000000000
0x7fffffffcdc0: 0x0000000000000000 0x0000000000000000
0x7fffffffcdd0: 0x0000000000000000 0x0000000000000000
0x7fffffffcde0: 0x00007fffffffd660 0x00007fffffffd070 8 15
0x7fffffffcdf0: 0x00007fffffffd530 0x00007fffffffdd80 14 c
0x7fffffffce00: 0x000000000000003e 0x0000000000000000
0x7fffffffce10: 0x7327746920776f4e 0x67203b656e6f6720 # 4
0x7fffffffce20: 0x65726f6620656e6f 0x000000002c726576
0x7fffffffce30: 0x0000000000000000 0x0000000000000000
0x7fffffffce40: 0x0000000000000000 0x0000000000000000
0x7fffffffce50: 0x0000000000000000 0x0000000000000000
0x7fffffffce60: 0x0000000000000000 0x0000000000000000
0x7fffffffce70: 0x0000000000000000 0x0000000000000000
0x7fffffffce80: 0x0000000000000000 0x0000000000000000
0x7fffffffce90: 0x0000000000000000 0x0000000000000000
0x7fffffffcea0: 0x0000000000000000 0x0000000000000000
0x7fffffffceb0: 0x0000000000000000 0x0000000000000000
0x7fffffffcec0: 0x0000000000000000 0x0000000000000000
0x7fffffffced0: 0x0000000000000000 0x0000000000000000
0x7fffffffcee0: 0x0000000000000000 0x0000000000000000
0x7fffffffcef0: 0x0000000000000000 0x0000000000000000
0x7fffffffcf00: 0x0000000000000000 0x0000000000000000
0x7fffffffcf10: 0x00007fffffffc5c0 0x00007fffffffc820 5 9
0x7fffffffcf20: 0x00007fffffffd1a0 0x00007fffffffdc50 1 d
0x7fffffffcf30: 0x0000000000000321 0x0000000000000000
0x7fffffffcf40: 0x206f6e20656b614d 0x21656b617473696d # f
0x7fffffffcf50: 0x0000000000000000 0x0000000000000000
0x7fffffffcf60: 0x0000000000000000 0x0000000000000000
0x7fffffffcf70: 0x0000000000000000 0x0000000000000000
0x7fffffffcf80: 0x0000000000000000 0x0000000000000000
0x7fffffffcf90: 0x0000000000000000 0x0000000000000000
0x7fffffffcfa0: 0x0000000000000000 0x0000000000000000
0x7fffffffcfb0: 0x0000000000000000 0x0000000000000000
0x7fffffffcfc0: 0x0000000000000000 0x0000000000000000
0x7fffffffcfd0: 0x0000000000000000 0x0000000000000000
0x7fffffffcfe0: 0x0000000000000000 0x0000000000000000
0x7fffffffcff0: 0x0000000000000000 0x0000000000000000
0x7fffffffd000: 0x0000000000000000 0x0000000000000000
0x7fffffffd010: 0x0000000000000000 0x0000000000000000
0x7fffffffd020: 0x0000000000000000 0x0000000000000000
0x7fffffffd030: 0x0000000000000000 0x0000000000000000
0x7fffffffd040: 0x00007fffffffd9f0 0x00007fffffffdb20 12 g 
0x7fffffffd050: 0x00007fffffffdeb0 0x00007fffffffdc50 10 d
0x7fffffffd060: 0x0000000000000285 0x0000000000000000
0x7fffffffd070: 0x67696e207473614c 0x7420736177207468 # 15
0x7fffffffd080: 0x2074736f6d206568 0x65762749206e7566
0x7fffffffd090: 0x6168207265766520 0x0000000000002c64
0x7fffffffd0a0: 0x0000000000000000 0x0000000000000000
0x7fffffffd0b0: 0x0000000000000000 0x0000000000000000
0x7fffffffd0c0: 0x0000000000000000 0x0000000000000000
0x7fffffffd0d0: 0x0000000000000000 0x0000000000000000
0x7fffffffd0e0: 0x0000000000000000 0x0000000000000000
0x7fffffffd0f0: 0x0000000000000000 0x0000000000000000
0x7fffffffd100: 0x0000000000000000 0x0000000000000000
0x7fffffffd110: 0x0000000000000000 0x0000000000000000
0x7fffffffd120: 0x0000000000000000 0x0000000000000000
0x7fffffffd130: 0x0000000000000000 0x0000000000000000
0x7fffffffd140: 0x0000000000000000 0x0000000000000000
0x7fffffffd150: 0x0000000000000000 0x0000000000000000
0x7fffffffd160: 0x0000000000000000 0x0000000000000000
0x7fffffffd170: 0x00007fffffffd790 0x00007fffffffca80 16 2
0x7fffffffd180: 0x00007fffffffcf40 0x00007fffffffdeb0 10 f
0x7fffffffd190: 0x00000000000001c3 0x0000000000000000
x/20gx $rbp-0xe50
0x7fffffffd1a0: 0x656e6f7972657645 0x62627542202e2e2e # 1 (start)
0x7fffffffd1b0: 0x2e2e2e6d7567656c 0x206f73206d274920
0x7fffffffd1c0: 0x00000000626d7564 0x0000000000000000
0x7fffffffd1d0: 0x0000000000000000 0x0000000000000000
0x7fffffffd1e0: 0x0000000000000000 0x0000000000000000
0x7fffffffd1f0: 0x0000000000000000 0x0000000000000000
0x7fffffffd200: 0x0000000000000000 0x0000000000000000
0x7fffffffd210: 0x0000000000000000 0x0000000000000000
0x7fffffffd220: 0x0000000000000000 0x0000000000000000
0x7fffffffd230: 0x0000000000000000 0x0000000000000000
0x7fffffffd240: 0x0000000000000000 0x0000000000000000
0x7fffffffd250: 0x0000000000000000 0x0000000000000000
0x7fffffffd260: 0x0000000000000000 0x0000000000000000
0x7fffffffd270: 0x0000000000000000 0x0000000000000000
0x7fffffffd280: 0x0000000000000000 0x0000000000000000
0x7fffffffd290: 0x0000000000000000 0x0000000000000000
0x7fffffffd2a0: 0x00007fffffffc6f0 0x00007fffffffc820 3 9
0x7fffffffd2b0: 0x00007fffffffca80 0x00007fffffffdeb0 2 10
0x7fffffffd2c0: 0x00000000000002d4 0x0000000000000000
0x7fffffffd2d0: 0x6d6572206c6c2749 0x6874207265626d65 # b
0x7fffffffd2e0: 0x2061747361702065 0x2065772074616874
0x7fffffffd2f0: 0x6f20646572616873 0x7265687420726576
0x7fffffffd300: 0x0000000000002e65 0x0000000000000000
0x7fffffffd310: 0x0000000000000000 0x0000000000000000
0x7fffffffd320: 0x0000000000000000 0x0000000000000000
0x7fffffffd330: 0x0000000000000000 0x0000000000000000
0x7fffffffd340: 0x0000000000000000 0x0000000000000000
0x7fffffffd350: 0x0000000000000000 0x0000000000000000
0x7fffffffd360: 0x0000000000000000 0x0000000000000000
0x7fffffffd370: 0x0000000000000000 0x0000000000000000
0x7fffffffd380: 0x0000000000000000 0x0000000000000000
0x7fffffffd390: 0x0000000000000000 0x0000000000000000
0x7fffffffd3a0: 0x0000000000000000 0x0000000000000000
0x7fffffffd3b0: 0x0000000000000000 0x0000000000000000
0x7fffffffd3c0: 0x0000000000000000 0x0000000000000000
0x7fffffffd3d0: 0x00007fffffffd400 0x00007fffffffd070 a 15
0x7fffffffd3e0: 0x00007fffffffce10 0x00007fffffffcbb0 4 17
0x7fffffffd3f0: 0x0000000000000007 0x0000000000000000
0x7fffffffd400: 0x726f66206c6c2749 0x7461687420746567 # a
0x7fffffffd410: 0x2074736f6c204920 0x2065636569702061
0x7fffffffd420: 0x2072756f7920666f 0x0000002e72696168
0x7fffffffd430: 0x0000000000000000 0x0000000000000000
0x7fffffffd440: 0x0000000000000000 0x0000000000000000
0x7fffffffd450: 0x0000000000000000 0x0000000000000000
0x7fffffffd460: 0x0000000000000000 0x0000000000000000
0x7fffffffd470: 0x0000000000000000 0x0000000000000000
0x7fffffffd480: 0x0000000000000000 0x0000000000000000
0x7fffffffd490: 0x0000000000000000 0x0000000000000000
0x7fffffffd4a0: 0x0000000000000000 0x0000000000000000
0x7fffffffd4b0: 0x0000000000000000 0x0000000000000000
0x7fffffffd4c0: 0x0000000000000000 0x0000000000000000
0x7fffffffd4d0: 0x0000000000000000 0x0000000000000000
0x7fffffffd4e0: 0x0000000000000000 0x0000000000000000
0x7fffffffd4f0: 0x0000000000000000 0x0000000000000000
0x7fffffffd500: 0x00007fffffffd2d0 0x00007fffffffcf40 b f
0x7fffffffd510: 0x00007fffffffdeb0 0x00007fffffffc820 10 9
0x7fffffffd520: 0x000000000000004a 0x00000000001bd490
0x7fffffffd530: 0x77207473756a2049 0x7375206465746e61 # 14
0x7fffffffd540: 0x65687465676f7420 0x6f7420646e612072
0x7fffffffd550: 0x73612079616c7020 0x2c646e6162206120
0x7fffffffd560: 0x0000000000000000 0x0000000000000000
0x7fffffffd570: 0x0000000000000000 0x0000000000000000
0x7fffffffd580: 0x0000000000000000 0x0000000000000000
0x7fffffffd590: 0x0000000000000000 0x0000000000000000
0x7fffffffd5a0: 0x0000000000000000 0x0000000000000000
0x7fffffffd5b0: 0x0000000000000000 0x0000000000000000
0x7fffffffd5c0: 0x0000000000000000 0x0000000000000000
0x7fffffffd5d0: 0x0000000000000000 0x0000000000000000
0x7fffffffd5e0: 0x0000000000000000 0x0000000000000000
0x7fffffffd5f0: 0x0000000000000000 0x0000000000000000
0x7fffffffd600: 0x0000000000000000 0x0000000000000000
0x7fffffffd610: 0x0000000000000000 0x0000000000000000
0x7fffffffd620: 0x0000000000000000 0x0000000000000000
0x7fffffffd630: 0x00007fffffffd790 0x00007fffffffd070 16 15
0x7fffffffd640: 0x00007fffffffc820 0x00007fffffffd400 9 a
0x7fffffffd650: 0x00000000000002ed 0x00007ffff7ff94c0
0x7fffffffd660: 0x7227756f79206649 0x6d206e6576652065 # 8
0x7fffffffd670: 0x646e656972662079 0x0000000000002e73
0x7fffffffd680: 0x0000000000000000 0x0000000000000000
0x7fffffffd690: 0x0000000000000000 0x0000000000000000
0x7fffffffd6a0: 0x0000000000000000 0x0000000000000000
0x7fffffffd6b0: 0x0000000000000000 0x0000000000000000
0x7fffffffd6c0: 0x0000000000000000 0x0000000000000000
0x7fffffffd6d0: 0x0000000000000000 0x0000000000000000
0x7fffffffd6e0: 0x0000000000000000 0x0000000000000000
0x7fffffffd6f0: 0x0000000000000000 0x0000000000000000
0x7fffffffd700: 0x0000000000000000 0x0000000000000000
0x7fffffffd710: 0x0000000000000000 0x0000000000000000
0x7fffffffd720: 0x0000000000000000 0x0000000000000000
0x7fffffffd730: 0x0000000000000000 0x0000000000000000
0x7fffffffd740: 0x0000000000000000 0x0000000000000000
0x7fffffffd750: 0x0000000000000000 0x0000000000000000
0x7fffffffd760: 0x00007fffffffd790 0x00007fffffffdb20 16 g
0x7fffffffd770: 0x00007fffffffcbb0 0x00007fffffffc820 17 9
0x7fffffffd780: 0x0000000000000057 0x00000000000081ed
0x7fffffffd790: 0x6b696c206e657645 0x6877207469206465 # 16
0x7fffffffd7a0: 0x7420656874206e65 0x6f7920666f206f77
0x7fffffffd7b0: 0x20646c756f772075 0x2064616d20746567
0x7fffffffd7c0: 0x2068636165207461 0x00002e726568746f
0x7fffffffd7d0: 0x0000000000000000 0x0000000000000000
0x7fffffffd7e0: 0x0000000000000000 0x0000000000000000
0x7fffffffd7f0: 0x0000000000000000 0x0000000000000000
0x7fffffffd800: 0x0000000000000000 0x0000000000000000
0x7fffffffd810: 0x0000000000000000 0x0000000000000000
0x7fffffffd820: 0x0000000000000000 0x0000000000000000
0x7fffffffd830: 0x0000000000000000 0x0000000000000000
0x7fffffffd840: 0x0000000000000000 0x0000000000000000
0x7fffffffd850: 0x0000000000000000 0x0000000000000000
0x7fffffffd860: 0x0000000000000000 0x0000000000000000
0x7fffffffd870: 0x0000000000000000 0x0000000000000000
0x7fffffffd880: 0x0000000000000000 0x0000000000000000
0x7fffffffd890: 0x00007fffffffc820 0x00007fffffffcbb0 9 17
0x7fffffffd8a0: 0x00007fffffffdc50 0x00007fffffffc950 d e
0x7fffffffd8b0: 0x0000000000000017 0x0000000000000340
0x7fffffffd8c0: 0x7420756f79206f44 0x616874206b6e6968 # 13
0x7fffffffd8d0: 0x276e6f6420492074 0x737265646e752074
0x7fffffffd8e0: 0x0000003f646e6174 0x0000000000000000
0x7fffffffd8f0: 0x0000000000000000 0x0000000000000000
0x7fffffffd900: 0x0000000000000000 0x0000000000000000
0x7fffffffd910: 0x0000000000000000 0x0000000000000000
0x7fffffffd920: 0x0000000000000000 0x0000000000000000
0x7fffffffd930: 0x0000000000000000 0x0000000000000000
0x7fffffffd940: 0x0000000000000000 0x0000000000000000
0x7fffffffd950: 0x0000000000000000 0x0000000000000000
0x7fffffffd960: 0x0000000000000000 0x0000000000000000
0x7fffffffd970: 0x0000000000000000 0x0000000000000000
0x7fffffffd980: 0x0000000000000000 0x0000000000000000
0x7fffffffd990: 0x0000000000000000 0x0000000000000000
0x7fffffffd9a0: 0x0000000000000000 0x0000000000000000
0x7fffffffd9b0: 0x0000000000000000 0x0000000000000000
0x7fffffffd9c0: 0x00007fffffffc5c0 0x00007fffffffd530 5 14
0x7fffffffd9d0: 0x00007fffffffcbb0 0x00007fffffffdc50 17 d
0x7fffffffd9e0: 0x000000000000003f 0x00000000001c0b60
0x7fffffffd9f0: 0x6c20756f79206f44 0x6e776f64206b6f6f # 12
0x7fffffffda00: 0x2720656d206e6f20 0x2749206573756163
0x7fffffffda10: 0x65676e756f79206d 0x0000000000003f72
0x7fffffffda20: 0x0000000000000000 0x0000000000000000
0x7fffffffda30: 0x0000000000000000 0x0000000000000000
0x7fffffffda40: 0x0000000000000000 0x0000000000000000
0x7fffffffda50: 0x0000000000000000 0x0000000000000000
0x7fffffffda60: 0x0000000000000000 0x0000000000000000
0x7fffffffda70: 0x0000000000000000 0x0000000000000000
0x7fffffffda80: 0x0000000000000000 0x0000000000000000
0x7fffffffda90: 0x0000000000000000 0x0000000000000000
0x7fffffffdaa0: 0x0000000000000000 0x0000000000000000
0x7fffffffdab0: 0x0000000000000000 0x0000000000000000
0x7fffffffdac0: 0x0000000000000000 0x0000000000000000
0x7fffffffdad0: 0x0000000000000000 0x0000000000000000
0x7fffffffdae0: 0x0000000000000000 0x0000000000000000
0x7fffffffdaf0: 0x00007fffffffd8c0 0x00007fffffffdeb0 13 10
0x7fffffffdb00: 0x00007fffffffcf40 0x00007fffffffcce0 f 7
0x7fffffffdb10: 0x000000000000001f 0x00007ffff7ffa160
0x7fffffffdb20: 0x6e6e6f67206d2749 0x6120676e69732061 # g (end)
0x7fffffffdb30: 0x687420676e6f7320 0x736c656566207461
0x7fffffffdb40: 0x6c616572206f7320 0x206c6c277469202c
0x7fffffffdb50: 0x69687420656b616d 0x6220726f6f642073
0x7fffffffdb60: 0x000000216b616572 0x0000000000000000
0x7fffffffdb70: 0x0000000000000000 0x0000000000000000
0x7fffffffdb80: 0x0000000000000000 0x0000000000000000
0x7fffffffdb90: 0x0000000000000000 0x0000000000000000
0x7fffffffdba0: 0x0000000000000000 0x0000000000000000
0x7fffffffdbb0: 0x0000000000000000 0x0000000000000000
0x7fffffffdbc0: 0x0000000000000000 0x0000000000000000
0x7fffffffdbd0: 0x0000000000000000 0x0000000000000000
0x7fffffffdbe0: 0x0000000000000000 0x0000000000000000
0x7fffffffdbf0: 0x0000000000000000 0x0000000000000000
0x7fffffffdc00: 0x0000000000000000 0x0000000000000000
0x7fffffffdc10: 0x0000000000000000 0x0000000000000000
0x7fffffffdc20: 0x0000000000000000 0x0000000000000000
0x7fffffffdc30: 0x0000000000000000 0x0000000000000000
0x7fffffffdc40: 0x000000000000000b 0x00007ffff7ffd9f8
0x7fffffffdc50: 0x2c756f7920646e41 0x00002e656b614a20 # d
0x7fffffffdc60: 0x0000000000000000 0x0000000000000000
0x7fffffffdc70: 0x0000000000000000 0x0000000000000000
0x7fffffffdc80: 0x0000000000000000 0x0000000000000000
0x7fffffffdc90: 0x0000000000000000 0x0000000000000000
0x7fffffffdca0: 0x0000000000000000 0x0000000000000000
0x7fffffffdcb0: 0x0000000000000000 0x0000000000000000
0x7fffffffdcc0: 0x0000000000000000 0x0000000000000000
0x7fffffffdcd0: 0x0000000000000000 0x0000000000000000
0x7fffffffdce0: 0x0000000000000000 0x0000000000000000
0x7fffffffdcf0: 0x0000000000000000 0x0000000000000000
0x7fffffffdd00: 0x0000000000000000 0x0000000000000000
0x7fffffffdd10: 0x0000000000000000 0x0000000000000000
0x7fffffffdd20: 0x0000000000000000 0x0000000000000000
0x7fffffffdd30: 0x0000000000000000 0x0000000000000000
0x7fffffffdd40: 0x0000000000000000 0x0000000000000000
0x7fffffffdd50: 0x00007fffffffc950 0x00007fffffffc360 e 18
0x7fffffffdd60: 0x00007fffffffc6f0 0x00007fffffffdb20 3 g 
0x7fffffffdd70: 0x0000000000000011 0x0000000000000001
0x7fffffffdd80: 0x7461687420646e41 0x7468676972207327 # c
0x7fffffffdd90: 0x6174206d2749202c 0x626120676e696b6c
0x7fffffffdda0: 0x206568742074756f 0x7920666f206f7774
0x7fffffffddb0: 0x736c72696720756f 0x000000000000002e
0x7fffffffddc0: 0x0000000000000000 0x0000000000000000
0x7fffffffddd0: 0x0000000000000000 0x0000000000000000
0x7fffffffdde0: 0x0000000000000000 0x0000000000000000
0x7fffffffddf0: 0x0000000000000000 0x0000000000000000
0x7fffffffde00: 0x0000000000000000 0x0000000000000000
0x7fffffffde10: 0x0000000000000000 0x0000000000000000
0x7fffffffde20: 0x0000000000000000 0x0000000000000000
0x7fffffffde30: 0x0000000000000000 0x0000000000000000
0x7fffffffde40: 0x0000000000000000 0x0000000000000000
0x7fffffffde50: 0x0000000000000000 0x0000000000000000
0x7fffffffde60: 0x0000000000000000 0x0000000000000000
0x7fffffffde70: 0x0000000000000000 0x0000000000000000
0x7fffffffde80: 0x00007fffffffcce0 0x00007fffffffdc50 7 d
0x7fffffffde90: 0x00007fffffffc360 0x00007fffffffdeb0 18 10
0x7fffffffdea0: 0x00000000000000a5 0x00007fffffffe048
0x7fffffffdeb0: 0x6a20612049206d41 0x756f79202c656b6f # 10
0x7fffffffdec0: 0x746867696e6b2072 0x756f7920726f202c
0x7fffffffded0: 0x6568746f72622072 0x0000000000003f72
0x7fffffffdee0: 0x0000000000000000 0x0000000000000000
0x7fffffffdef0: 0x0000000000000000 0x0000000000000000
0x7fffffffdf00: 0x0000000000000000 0x0000000000000000
0x7fffffffdf10: 0x0000000000000000 0x0000000000000000
0x7fffffffdf20: 0x0000000000000000 0x0000000000000000
0x7fffffffdf30: 0x0000000000000000 0x0000000000000000
0x7fffffffdf40: 0x0000000000000000 0x0000000000000000
0x7fffffffdf50: 0x0000000000000000 0x0000000000000000
0x7fffffffdf60: 0x0000000000000000 0x0000000000000000
0x7fffffffdf70: 0x0000000000000000 0x0000000000000000
0x7fffffffdf80: 0x0000000000000000 0x0000000000000000
0x7fffffffdf90: 0x0000000000000000 0x0000000000000000
0x7fffffffdfa0: 0x0000000000000000 0x0000000000000000
0x7fffffffdfb0: 0x00007fffffffcbb0 0x00007fffffffc360 17 18
0x7fffffffdfc0: 0x00007fffffffc820 0x00007fffffffdb20 9/11 g 
0x7fffffffdfd0: 0x000000000000005b 0x00000000004004a0
0x7fffffffdfe0: 0x00000002000002d4 0x656e6f7972657645
0x7fffffffdff0: 0x0000000000000000 0x00007ffff7a33ea5
0x7fffffffe000: 0x0000000000000000 0x00007fffffffe0d8
0x7fffffffe010: 0x0000000200000000 0x0000000000400596
0x7fffffffe020: 0x0000000000000000 0xdb166bd3e89acf01
0x7fffffffe030: 0x00000000004004a0 0x00007fffffffe0d0
0x7fffffffe040: 0x0000000000000000 0x0000000000000000

Accoring to disasm code the next line is chosen from input character's ASCII value - 65 + 32. So to jump from the address with song line data to indexes 32, 33, 34, 35 of int64 array with next line addresses, input chars could be A, B, C or D.

We only need to put the line in correct order.
It was hard, because some of the lines are repeat, and some are differ from the original.

The final song lines with chars are:

01 = Everyone... Bubblegum... I'm so dumb > C
02 = I should have just told > B
03 = What I lost... was a piece of your hair! > D
04 = Now it's gone; gone forever, > A
05 = But I guess, what does it matter > B
06 = When I just... Just had all of you there? > C
07 = Oh I just had all of you there with me, my friends... > A
08 = If you're even my friends > D
09 = What am I to you > B
10 = Am I a joke, your knight, or your brother > C
11 = What am I to you > C
12 = Do you look down on me 'cause I'm younger > A
13 = Do you think that I don't understand? > B
14 = I just wanted us together and to play as a band, > B
15 = Last night was the most fun I've ever had > A
16 = Even liked it when the two of you would get mad at each other. > B
17 = Oh, you are my best friends in the world > B
18 = You are my best friends in the world. > A
0c = And that's right, I'm talking about the two of you girls > B
0d = And you, Jake. > A
0e = I'm gonna sing a song to you and I refuse to make it fake > C
09 = What am I to you > B
10 = Am I a joke, your knight, or your brother > C
11 = What am I to you > C
12 = Do you look down on me 'cause I'm younger > A
13 = Do you think that I don't understand? > B
14 = I just wanted us together and to play as a band, > D
0a = I'll forget that I lost a piece of your hair. > A
0b = I'll remember the pasta that we shared over ther > D
17 = Oh, you are my best friends in the world > B
18 = You are my best friends in the world. > A
0c = And that's right, I'm talking about the two of you girls > B
0d = And you, Jake. > A
0e = I'm gonna sing a song to you and I refuse to make it fake > B
0f = Make no mistake! > B
0g = I'm gonna sing a song that feels so real, it'll make this door break! 

And the input sequence must be:
CBDABCADBCCABBABBABACBCCABDADBABABB
Your password is tjctf{pblgjd}

And the flag is: tjctf{pblgjd}

2 комментария:

  1. RoberNage
       #   07:25, 25 мая 2017
    Cialis 20mg 12 St Preisvergleich [url=http://kama1.xyz/kamagra-tablet.php]Kamagra Tablet[/url] Baclofene Automedication Cheap Viagara 100 Mg [url=http://cial5mg.xyz/cialis-pills.php]Cialis Pills[/url] Amoxicillin Dosage Adult Male 220 Pounds Cialis Eyaculacion Precoz [url=http://propecia.ccrpdc.com/cheapest-propecia-prices.php]Cheapest Propecia Prices[/url] Global Pharmacy Canada Phone Number Cialis Tadalafil Buy Online [url=http://cial5mg.xyz/order-cialis-tablets.php]Order Cialis Tablets[/url] Name Brand Viagara Buy Viagra With Out Prescription [url=http://kama1.xyz/cheap-kamagra-pills.php]Cheap Kamagra Pills[/url] No Presciption Amoxicillin Ieson Propecia [url=http://cial1.xyz/cialis-pills.php]Cialis Pills[/url] Free Shipping Fluoxetine Amoxil False Positive Urine Test [url=http://viag1.xyz/viagra-free-trial.php]Viagra Free Trial[/url] Generic Zithromax Low Price Levitra [url=http://cytotec.ccrpdc.com/buy-cytotec-cheap.php]Buy Cytotec Cheap[/url] Cialis Levrita Achat Viagra Sur Internet Forum [url=http://kama1.xyz/cheap-kamagra-uk.php]Cheap Kamagra Uk[/url] Elocon For Sale Commande Cialis Generique [url=http://cial5mg.xyz/cost-of-cialis.php]Cost Of Cialis[/url] Levitra Per Uberweisung Kaufen Gel Viagra [url=http://cial5mg.xyz/tadalafil-online.php]Tadalafil Online[/url] Viagra Et Consequences
  2. KelDuhCrory
       #   04:42, 21 июня 2017
    Domperidone No Prescription Canada [url=http://viacheap.com]online pharmacy[/url] Propecia Hiv

Авторизуйтесь, что бы оставить комментарий