##Static analysisWin32 native app, not packed, strings are not obfuscated imports CheckRemoteDebuggerPresent(),IsDebuggerPresent() The exe file supports ASLR -base address will change every run- to get the same addresses as mine you have to disable it ![](1.PNG)  There are some links in the strings ,they can help you understand the challenge.##Dynamic/Code analysisFunction sub_401070 asks for a password, it then compares the user input against hardcoded string “incorrect”,that’s the password.  
The code will then check for various condition and displays a message that indicates whether the condition failed or not.Change the destinatio of the branch if a badboy message appeared and you will solve it.
There is a call to sleep(1000) , bypass it or change the sleep duration to 1 ms or something ,so that the difference between the two calls to GetTickCount is not big.Then this is the image ![](answer.jpg)  PAN{Th3_$quirtL3_$qu@d_w@z_bLuffiNg}