BUUCTF Reverse/[FlareOn4]IgniteMe

先查看文件信息:没有加壳且为32位程序

运行,发现又是一道字符串比较的题目

用IDA32位打开分析代码
void __noreturn start()
{
DWORD NumberOfBytesWritten; // [esp+0h] [ebp-4h] BYREF
NumberOfBytesWritten = 0;
hFile = GetStdHandle(0xFFFFFFF6);
dword_403074 = GetStdHandle(0xFFFFFFF5);
WriteFile(dword_403074, aG1v3M3T3hFl4g, 0x13u, &NumberOfBytesWritten, 0);
sub_4010F0();
if ( sub_401050() )
WriteFile(dword_403074, aG00dJ0b, 0xAu, &NumberOfBytesWritten, 0);
else
WriteFile(dword_403074, aN0tT00H0tRWe7r, 0x24u, &NumberOfBytesWritten, 0);
ExitProcess(0);
}
跟进查看

看到这个只是个输入函数,将输入的字符串存储在byte_403078中
int sub_4010F0()
{
unsigned int v0;


2947





