-
-
[原创]看雪CTF.TSRC 2018 团队赛 第一题 WriteUp
-
发表于: 2018-12-3 09:39 2164
-
int __stdcall WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nShowCmd) { ::hInstance = hInstance; DialogBoxParamA(hInstance, (LPCSTR)0x65, 0i64, (DLGPROC)sub_140001340, 0i64); return 0; } INT_PTR __fastcall sub_140001340(HWND a1, int a2, unsigned __int16 a3) { int v3; // ebx unsigned __int16 v4; // si HWND v5; // rdi int v6; // ebx int v7; // ebx UINT v9; // ebx CHAR *v10; // rdx HICON v11; // rax HWND v12; // rax CHAR String2[16]; // [rsp+30h] [rbp-D0h] int v14; // [rsp+40h] [rbp-C0h] __int16 v15; // [rsp+44h] [rbp-BCh] char v16; // [rsp+46h] [rbp-BAh] char v17[15]; // [rsp+48h] [rbp-B8h] CHAR inputKey[100]; // [rsp+60h] [rbp-A0h] CHAR String; // [rsp+D0h] [rbp-30h] v3 = a2; v4 = a3; v5 = a1; memset(&String, 0, 0x50ui64); memset(inputKey, 0, 0x64ui64); *(_DWORD *)&v17[8] = 0xA6B9C9B3; *(_WORD *)&v17[12] = 0xA1A3u; v17[14] = 0; v14 = -827016238; *(_QWORD *)v17 = 0xA1A3E3C4B2CFA7B9i64; v15 = 0xA1A3u; v16 = 0; *(_OWORD *)String2 = xmmword_1400453C0; v6 = v3 - 16; if ( !v6 ) { DestroyWindow(v5); return 0i64; } v7 = v6 - 256; if ( !v7 ) { v11 = LoadIconA(hInstance, (LPCSTR)0x70); SendMessageA(v5, 0x80u, 1ui64, (LPARAM)v11); SendDlgItemMessageA(v5, 1000, 0xC5u, 0x50ui64, 0i64); v12 = GetDlgItem(v5, 1000); SetFocus(v12); return 0i64; } if ( v7 != 1 ) return 0i64; if ( v4 == 1002 ) { SendMessageA(v5, 0x10u, 0i64, 0i64); return 1i64; } if ( v4 != 1013 ) { if ( v4 == 1014 || v4 == 40002 ) { DialogBoxParamA(hInstance, (LPCSTR)0x67, v5, (DLGPROC)DialogFunc, 0i64); return 1i64; } return 1i64; } v9 = GetDlgItemTextA(v5, 1000, &String, 81); GetDlgItemTextA(v5, 1000, inputKey, 101); if ( v9 != '\x06' || inputKey[0] != '6' || inputKey[1] != 'E' || inputKey[2] != 'w' || inputKey[3] != 'i' || inputKey[4] != '9' || inputKey[5] != 'H' ) { v10 = String2; } else { v10 = v17; } lstrcpyA((LPSTR)&String1, v10); DialogBoxParamA(hInstance, (LPCSTR)0x79, v5, sub_1400012E0, 0i64); return 1i64; }
可知 sn = 6Ewi9H
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课
赞赏
他的文章
- 看雪CTF 2019总决赛 第六题 三道八佛 IDA脱壳脚本 5668
- [原创]看雪CTF2019Q3第四题WP 5934
- [原创]看雪CTF2019Q3 第二题WP 6760
- [2019看雪CTF晋级赛Q3第九题WP 12490
- [原创]看雪CTF2019晋级赛Q2第三题 5022
看原图
赞赏
雪币:
留言: