Last active
February 14, 2018 07:34
-
-
Save dirtyc0wsay/db0da571bf6259aeda2ef2946479a2ec to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
var_30= qword ptr -30h | |
var_24= dword ptr -24h | |
var_20= dword ptr -20h | |
var_1C= dword ptr -1Ch | |
var_18= dword ptr -18h | |
var_14= dword ptr -14h | |
var_10= dword ptr -10h | |
var_8= qword ptr -8 | |
push rbp | |
mov rbp, rsp | |
sub rsp, 30h | |
mov [rbp+var_24], edi | |
mov [rbp+var_30], rsi | |
mov esi, offset _Z13sigintHandleri ; handler | |
mov edi, 2 ; sig | |
call _signal | |
mov rax, [rbp+var_30] | |
mov rax, [rax] | |
mov cs:target, rax | |
mov eax, [rbp+var_24] | |
cmp eax, 2 | |
jz short loc_400874 ;Goes here if commandline arguments are passed | |
loc_400874: | |
nop | |
mov rax, [rbp+var_30] | |
mov rax, [rax+8] | |
mov [rbp+var_8], rax | |
mov [rbp+var_20], 1 | |
mov [rbp+var_1C], 2 | |
mov [rbp+var_18], 3 | |
mov [rbp+var_14], 4 | |
mov [rbp+var_10], 5 | |
mov edx, [rbp+var_20] | |
mov rax, [rbp+var_8] | |
movzx eax, byte ptr [rax] | |
movsx eax, al | |
add eax, edx | |
mov [rbp+var_20], eax | |
mov edx, [rbp+var_1C] | |
mov rax, [rbp+var_8] | |
add rax, 1 | |
movzx eax, byte ptr [rax] | |
movsx eax, al | |
add eax, edx | |
mov [rbp+var_1C], eax | |
mov edx, [rbp+var_18] | |
mov rax, [rbp+var_8] | |
add rax, 2 | |
movzx eax, byte ptr [rax] | |
movsx eax, al | |
add eax, edx | |
mov [rbp+var_18], eax | |
mov edx, [rbp+var_14] | |
mov rax, [rbp+var_8] | |
add rax, 3 | |
movzx eax, byte ptr [rax] | |
movsx eax, al | |
add eax, edx | |
mov [rbp+var_14], eax | |
mov edx, [rbp+var_10] | |
mov rax, [rbp+var_8] | |
add rax, 4 | |
movzx eax, byte ptr [rax] | |
movsx eax, al | |
add eax, edx | |
mov [rbp+var_10], eax | |
mov eax, [rbp+var_14] | |
cmp eax, 6Fh | |
jnz short loc_400967 ;We don't want to go here | |
mov eax, [rbp+var_18] | |
mov edx, [rbp+var_14] | |
add edx, 0Eh | |
cmp eax, edx | |
jnz short loc_400967 ;We don't want to go here | |
mov eax, [rbp+var_20] | |
mov edx, [rbp+var_10] | |
sub edx, 0Ah | |
cmp eax, edx | |
jnz short loc_400967 ;We don't want to go here | |
mov eax, [rbp+var_1C] | |
cmp eax, 35h | |
jnz short loc_400967 ;We don't want to go here | |
mov eax, [rbp+var_10] | |
mov edx, [rbp+var_14] | |
add edx, 3 | |
cmp eax, edx | |
jnz short loc_400967 ;We don't want to go here | |
mov edi, offset aNowHereIsYourF ; "Now here is your flag: " | |
mov eax, 0 | |
call _printf | |
lea rax, [rbp+var_20] | |
mov rdi, rax ; int * | |
call _Z7print_5Pi ; print_5(int *) | |
mov eax, 1 | |
jmp short locret_400990 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment