BUUCTF Reverse [GXYCTF2019]luck_guy WriteUp

luck_guy-WP

首先用hxd打开看一下，发现是elf文件，直接拖入ida64中F5反编译。

进入patch_me

进入get_flag

unsigned __int64 get_flag()
{
   
  unsigned int v0; // eax
  int i; // [rsp+4h] [rbp-3Ch]
  int j; // [rsp+8h] [rbp-38h]
  __int64 s; // [rsp+10h] [rbp-30h] BYREF
  char v5; // [rsp+18h] [rbp-28h]
  unsigned __int64 v6; // [rsp+38h] [rbp-8h]

  v6 = __readfsqword(0x28u);
  v0 = time((time_t *)'\0');
  srand(v0);
  for ( i = 0; i <= 4; ++i