Skip to content

Instantly share code, notes, and snippets.

@dirtyc0wsay
Last active February 14, 2018 07:34
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save dirtyc0wsay/db0da571bf6259aeda2ef2946479a2ec to your computer and use it in GitHub Desktop.
Save dirtyc0wsay/db0da571bf6259aeda2ef2946479a2ec to your computer and use it in GitHub Desktop.
var_30= qword ptr -30h
var_24= dword ptr -24h
var_20= dword ptr -20h
var_1C= dword ptr -1Ch
var_18= dword ptr -18h
var_14= dword ptr -14h
var_10= dword ptr -10h
var_8= qword ptr -8
push rbp
mov rbp, rsp
sub rsp, 30h
mov [rbp+var_24], edi
mov [rbp+var_30], rsi
mov esi, offset _Z13sigintHandleri ; handler
mov edi, 2 ; sig
call _signal
mov rax, [rbp+var_30]
mov rax, [rax]
mov cs:target, rax
mov eax, [rbp+var_24]
cmp eax, 2
jz short loc_400874 ;Goes here if commandline arguments are passed
loc_400874:
nop
mov rax, [rbp+var_30]
mov rax, [rax+8]
mov [rbp+var_8], rax
mov [rbp+var_20], 1
mov [rbp+var_1C], 2
mov [rbp+var_18], 3
mov [rbp+var_14], 4
mov [rbp+var_10], 5
mov edx, [rbp+var_20]
mov rax, [rbp+var_8]
movzx eax, byte ptr [rax]
movsx eax, al
add eax, edx
mov [rbp+var_20], eax
mov edx, [rbp+var_1C]
mov rax, [rbp+var_8]
add rax, 1
movzx eax, byte ptr [rax]
movsx eax, al
add eax, edx
mov [rbp+var_1C], eax
mov edx, [rbp+var_18]
mov rax, [rbp+var_8]
add rax, 2
movzx eax, byte ptr [rax]
movsx eax, al
add eax, edx
mov [rbp+var_18], eax
mov edx, [rbp+var_14]
mov rax, [rbp+var_8]
add rax, 3
movzx eax, byte ptr [rax]
movsx eax, al
add eax, edx
mov [rbp+var_14], eax
mov edx, [rbp+var_10]
mov rax, [rbp+var_8]
add rax, 4
movzx eax, byte ptr [rax]
movsx eax, al
add eax, edx
mov [rbp+var_10], eax
mov eax, [rbp+var_14]
cmp eax, 6Fh
jnz short loc_400967 ;We don't want to go here
mov eax, [rbp+var_18]
mov edx, [rbp+var_14]
add edx, 0Eh
cmp eax, edx
jnz short loc_400967 ;We don't want to go here
mov eax, [rbp+var_20]
mov edx, [rbp+var_10]
sub edx, 0Ah
cmp eax, edx
jnz short loc_400967 ;We don't want to go here
mov eax, [rbp+var_1C]
cmp eax, 35h
jnz short loc_400967 ;We don't want to go here
mov eax, [rbp+var_10]
mov edx, [rbp+var_14]
add edx, 3
cmp eax, edx
jnz short loc_400967 ;We don't want to go here
mov edi, offset aNowHereIsYourF ; "Now here is your flag: "
mov eax, 0
call _printf
lea rax, [rbp+var_20]
mov rdi, rax ; int *
call _Z7print_5Pi ; print_5(int *)
mov eax, 1
jmp short locret_400990
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment