HugeH4rD

reverse1

0x01

---

Exeinfo PE Check

64位 无壳

0x02

---

IDA

分析主函数 sub_1400118C0()

sub_1400111D1("input the flag:");
sub_14001128F("%20s", Str1); /* Str1 是我们输入的字符串 */
v3 = j_strlen(Str2);
if ( !strncmp(Str1, Str2, v3) ) /* Str1 与 Str2 进行比较，Str2即为flag */
  sub_1400111D1("this is the right flag!\n");
else
  sub_1400111D1("wrong flag\n");
sub_14001113B(v5, &unk_140019D00);

追踪 Str2 字符串

.data:000000014001C000	0000000E	C	{hello_world}

flag{hello_world}