BUUCTF--刮开有奖
文件链接: https://buuoj.cn/files/abe6e2152471e1e1cbd9e5c0cae95d29/8f80610b-8701-4c7f-ad60-63861a558a5b.exe?token=eyJ0ZWFtX2lkIjpudWxsLCJ1c2VyX2lkIjoxOTAzLCJmaWxlX2lkIjoyMDd9.XXT5Dg.7mQMViMZzaEYSVj_dfXyRr4aPKQ 1.准备 获取信息 32位文件 2.IDA打开 进入主函数WinMain int __stdcall WinMain ( HINSTANCE hInstance , HINSTANCE hPrevInstance , LPSTR lpCmdLine , int nShowCmd ) { DialogBoxParamA ( hInstance , ( LPCSTR ) 0x67 , 0 , DialogFunc , 0 ); return 0 ; } 找到关键的函数DialogFunc,并反编译为C代码 1 BOOL __userpurge DialogFunc@ <eax> ( int a1@ <edi> , int a2@ <esi> , HWND hDlg , UINT a4 , WPARAM a5 , LPARAM a6 ) 2 { 3 const char * v6 ;