_BOOL4 __cdecl native_checkFlagint a1 int a2 int a3 size_t size void v4; ebp int v5; eax size_t v6; edx char v8; esp+2Bh ebp-21h void src; esp+2Ch ebp-20h src = mallocsize; void __cdecl in
The code checks a flag by performing the following steps:
- Allocate memory for a buffer called
srcwith the size specified by thesizeparameter. - Call a function at the address stored in the
a1variable, passinga1,a3, 0,size, andsrcas arguments. - Allocate memory for another buffer called
v4with the sizesize + 1. - Set all bytes of
v4to 0. - Copy the contents of
srctov4. - Perform some operations on
v4by subtracting 5 from each byte in the first half of the buffer and swapping the bytes with their counterparts in the second half of the buffer. - Set the byte at index
sizeofv4to 0. - Free the memory allocated for
v4andsrc. - Compare the contents of
v4with the string"=0HWYl1SE5UQWFfN?I+PEo.UcshU". - Return
trueif the contents ofv4are equal to the string,falseotherwise.
The function ultimately checks if the flag stored in v4 matches the string "=0HWYl1SE5UQWFfN?I+PEo.UcshU"
原文地址: http://www.cveoy.top/t/topic/iYEH 著作权归作者所有。请勿转载和采集!