HITCON Training Lab4 Writeup

首先查看文件的基本属性：

查看整个文件反编译出来的结果：

int __cdecl main(int argc, const char **argv, const char **envp)
{
  char **v3; // ST04_4@1
  int v4; // ST08_4@1
  __int16 v6; // [sp+12h] [bp-10Eh]@1
  __int16 v7; // [sp+112h] [bp-Eh]@1
  _DWORD *v8; // [sp+11Ch] [bp-4h]@1

  puts("###############################");
  puts("Do you know return to library ?");
  puts("###############################");
  puts("What do you want to see in memory?");
  printf("Give me an address (in dec) :");
  fflush(stdout);
  read(0, &v7, 0xAu);
  v8 = (_DWORD *)strtol((const char *)&v7, v3, v4);
  See_something(v8);
  printf("Leave some message for me :");
  fflush(stdout);
  read(0, &v6, 0x100u);
  Print_message((char *)&v6);
  puts("Thanks you ~");
  return 0;
}

查看See_something与Print_message函数的内容：

int __cdecl See_something(_DWORD *a1)
{