maze
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
| int64 sub_5605D8C00940()
{
int v0;
int v2;
int v3;
char v4[520];
unsigned __int64 v5;
v5 = __readfsqword(0x28u);
v3 = 0;
memset(v4, 0, 0x200uLL);
_isoc99_scanf(&unk_5605D8C01278, v4, v4);
while ( 1 )
{
do
{
v2 = 0;
sub_5605D8C0086C();
v0 = v4[v3];
if ( v0 == 100 )
{
v2 = sub_5605D8C00E23();
}
else if ( v0 > 100 )
{
if ( v0 == 115 )
{
v2 = sub_5605D8C00C5A();
}
else if ( v0 == 119 )
{
v2 = sub_5605D8C00A92();
}
}
else
{
if ( v0 == 27 )
return 0xFFFFFFFFLL;
if ( v0 == 97 )
v2 = sub_5605D8C00FEC();
}
++v3;
}
while ( v2 != 1 );
if ( dword_5605D8E02AB0 == 2 )
break;
++dword_5605D8E02AB0;
}
puts("success! the flag is flag{md5(your input)}");
return 1LL;
}
|
根据在内存中的情况可列为下图(3个迷宫):
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
| 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00
01 01 01 01 01 00 03 01 01 00 00 00 00 00 00
01 01 01 01 01 00 00 00 01 00 00 00 00 00 00
01 01 01 01 01 00 00 00 01 00 00 00 00 00 00 ddsssddddsssdss
01 01 01 01 01 00 00 00 01 01 01 01 01 00 00
01 01 01 01 01 00 00 00 00 00 00 00 01 00 00
01 01 01 01 01 00 00 00 00 00 00 00 01 00 00
01 01 01 01 01 00 00 00 00 00 00 00 01 01 00
01 01 01 01 01 00 00 00 00 00 00 00 00 01 00
01 01 01 01 01 00 00 00 00 00 00 00 00 04 00
01 01 01 01 01 01 01 01 01 01 01 01 01 01 01
01 01 01 01 01 01 01 01 01 01 01 01 01 01 01
01 01 01 01 01 01 01 01 01 01 01 01 01 01 01
01 01 01 01 01 01 01 01 01 01 01 01 01 01 01
01 01 01 01 01 01 01 01 01 01 01 01 01 01 01
01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 dddddsssddddsssaassssddds
01 01 00 03 01 01 01 01 01 00 00 00 00 00 00
01 01 00 01 01 00 00 00 01 00 00 00 00 00 00
01 01 00 00 00 00 00 00 01 00 00 00 00 00 00
01 01 00 01 01 00 00 00 01 01 01 01 01 00 00
01 01 00 01 01 00 00 00 00 00 00 00 01 00 00
01 01 00 01 01 00 00 00 00 00 00 00 01 00 00
01 01 00 01 01 00 00 00 00 00 01 01 01 01 00
01 01 00 01 01 00 00 00 00 00 01 00 00 01 00
01 01 00 01 01 00 00 00 00 00 01 00 00 00 00
01 01 00 01 01 01 01 01 01 00 01 00 01 01 00
01 01 00 01 01 01 01 01 01 01 01 01 01 01 00
01 01 00 00 00 00 00 00 00 00 00 00 00 04 00
01 01 01 01 01 01 01 01 01 01 01 01 01 01 01
01 01 01 01 01 01 01 01 01 01 01 01 01 01 01
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 ddssddwddssssssdddssssdddss
00 00 00 01 00 01 01 01 00 00 00 00 00 00 00
00 00 00 01 01 01 00 01 00 00 00 00 00 00 00
00 00 00 00 01 00 00 01 00 00 00 00 00 00 00
00 01 01 00 01 00 00 01 00 00 00 00 00 00 00
00 00 01 01 01 00 00 01 00 00 00 00 00 00 00
00 00 00 00 00 00 00 01 00 00 00 00 00 00 00
00 00 00 00 00 00 00 01 01 01 01 00 00 00 00
00 00 00 00 00 00 00 00 00 00 01 00 00 00 00
00 00 00 00 00 00 00 00 00 00 01 00 00 00 00
00 00 00 00 00 00 00 00 00 00 01 00 00 00 00
00 00 00 00 00 00 00 00 00 00 01 01 01 01 00
00 00 00 00 00 00 00 00 00 00 00 00 00 01 00
00 00 00 00 00 00 00 00 00 00 00 00 00 04 00
|
答案是D0g3{ddsssddddsssdssdddddsssddddsssaassssdddsddssddwddssssssdddssssdddss}
居然没用md5，被骗了 doge
