I am doing TryHackMe REloaded room, level 3.

When I got stuck I followed this tutorial which mentions an XOR by 7 operation being performed on a string, however I cannot see it anywhere.

Where is it happening in the below image from IDA Free?

Where is the XOR?

The call highlighted in yellow above:

Sub function

  • 1
    Maybe they are using a different version of the program. Couldn't find a link in that tutorial to the files. Or in your question.
    – Jester
    Apr 24, 2023 at 18:45
  • Turns out I was looking at the wrong function. Apr 25, 2023 at 15:13
  • @securityauditor if you were looking at the wrong function, you could correct your question or even close/delete it. Although -- as you can see -- time was already invested in answering your question. If the answer is acceptable to you as is (despite having looked at the wrong function etc.), please also ensure to accept it by using ✔️ icon below the vote count indicator. Thank you.
    – 0xC0000022L
    Apr 27, 2023 at 19:59

1 Answer 1


Please read the tutorial carefully.

Moreover, the pictures you provided don't say anything. As correctly noted in the comments -- without the file itself being investigated -- we have no way to help you.

Here's another picture for you enter image description here

Gist: TryHackMe - REloaded (Writeup by Isira Adithya)

Link to the Room

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.