-
-
[原创]第一题答案
-
发表于:
2017-10-24 13:21
2490
-
00401841 |. 6A 00 push 0x0
00401843 |. 6A 00 push 0x0
00401845 |. 68 98354000 push hello.00403598 ; 请输入pass!
0040184A |. 8B4D FC mov ecx,[local.1]
0040184D |. E8 C0050000 call <jmp.&MFC42.#4224>
00401852 |. EB 21 jmp short hello.00401875
00401854 |> 68 80354000 push hello.00403580 ; //s2 = ASCII "WelcomeToKanXueCtf2017"
00401859 |. 8B55 F8 mov edx,[local.2] ; |
0040185C |. 52 push edx ; //s1 = 输入字符串
0040185D |. E8 2E060000 call <jmp.&MSVCRT.strcmp> ; \strcmp s1和s2比较，相等则成功。
00401862 |. 83C4 08 add esp,0x8
00401865 |. 85C0 test eax,eax
00401867 |. 75 07 jnz short hello.00401870
00401869 |. E8 02FFFFFF call hello.00401770
0040186E |. EB 05 jmp short hello.00401875
00401870 |> E8 3BFFFFFF call hello.004017B0
故正确注册码为
"WelcomeToKanXueCtf2017"
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
