import angr
p = angr.Project('路径')
state = p.factory.entry_state()
simgr = p.factory.simgr(state)
simgr.explore(find=0x08049DAD, avoid=0x08049D78)
flag = simgr.found[0].posix.dumps(0)[:15]
print(flag)
09-19
5919
![](https://csdnimg.cn/release/blogv2/dist/pc/img/readCountWhite.png)