BUUCTF 内涵的软件 WP

 

 

 没壳，但32位，别用错ida了囧

 找到main_0，f5

int main_0()
{
  int result; // eax
  char v1; // [esp+4Ch] [ebp-Ch]
  const char *v2; // [esp+50h] [ebp-8h]
  int v3; // [esp+54h] [ebp-4h]

  v3 = 5;
  v2 = "DBAPP{49d3c93df25caad81232130f3d2ebfad}";
  while ( v3 >= 0 )
  {
    printf(&byte_4250EC, v3);
    sub_40100A();
    --v3;
  }
  printf(asc_425088);
  v1 = 1;
  scanf("%c", &v1);
  if ( v1 == 89 )
  {
    printf(aOd);
    result = sub_40100A();
  }
  else
  {
    if ( v1 == 78 )
      printf(&byte_425034);
    else
      printf(&byte_42501C);
    result = sub_40100A();
  }
  return result;
}

可以看到，v2没有被引用，想起开头，粗心的程序员忘记变量了，应该就是这个v2

试试DBAPP{49d3c93df25caad81232130f3d2ebfad},不对

看眼题目，应该是flag括起来

flag{49d3c93df25caad81232130f3d2ebfad}