攻防世界 REVERSE 新手区/maze

攻防世界 REVERSE 新手区/maze

老规矩先查壳，没加壳而且是64位的

用IDA64位打开，找到main函数F5查看伪代码

这是一个迷宫题，必然是有迷宫图在里面，然后走的路径就是输出的flag

接下来还是分析代码

__int64 __fastcall main(__int64 a1, char **a2, char **a3)
{
   
  signed __int64 v3; // rbx
  signed int v4; // eax
  bool v5; // bp
  bool v6; // al
  const char *v7; // rdi
  __int64 v9; // [rsp+0h] [rbp-28h]

  v9 = 0LL;
  puts("Input flag:");
  scanf("%s", &s1, 0LL);
  if ( strlen(&s1) != 24 || strncmp(&s1, "nctf{", 5uLL) || *(&byte_6010BF + 24) != 125 )
  {
   
LABEL_22:
    puts("Wrong flag!");
    exit(-1);
  }
  v3 = 5LL;
  if ( strlen(&s1) - 1 > 5 )
  {
   
    while ( 1 )
    {
   
      v4 = *(&s1 + v3);
      v5 = 0;
      if ( v4 > 78 )
      {
   
        v4 = (unsigned __int8)v4;
        if ( (unsigned __int8)v4 == 79 )
        {
   
          v6 = sub_400650((_DWORD *)&v9 + 1);
          goto LABEL_14;
        }
        if ( v4 == 111 )
        {
   
          v6 = sub_400660((int *)&v9 + 1);
          goto LABEL_14;
        }
      }
      else
      {
   
        v4 = (unsigned __int8)v4;
        if ( (unsigned __int8)v4 ==