gereeter / hsdecomp

A decompiler for GHC-compiled Haskell
MIT License
103 stars 17 forks source link

fails on CSAW CTF'19 Quals > wizkid #4

Open evandrix opened 4 years ago

evandrix commented 4 years ago

https://ctf.csaw.io/challenges

No rust or go binaries this time ;) nc rev.chal.csaw.io 1002

https://ctf.csaw.io/files/8f347a362c16c610a9594104c8d43540/wizkid mirror https://www.ninefile.com/mv6826fi7dvc.html

$ python3 -u runner.py wizkid
Error in processing case at c4no_info
    Error:
    Error Location: 143
    Disassembly:
        mov rax, qword ptr [rbp + 8]
        mov rcx, qword ptr [rbp + 0x10]
        mov rdx, rbx
        and edx, 7
        cmp rdx, 1
        jne 0x40a97a
        mov ebx, 0x6ef418
        add rbp, 0x18
        jmp 0x4b0980

Error in processing case at c4mg_info
    Error:
    Error Location: 143
    Disassembly:
        mov rax, rbx
        and eax, 7
        cmp rax, 1
        jne 0x40a2b6
        jmp 0x40a258

Error in processing case at c4hg_info
    Error:
    Error Location: 143
    Disassembly:
        mov rax, rbx
        and eax, 7
        cmp rax, 1
        jne 0x409dd0
        mov ebx, 0x6f90a9
        add rbp, 8
        jmp qword ptr [rbp]

Error in processing case at c3GS_info
    Error:
    Error Location: 143
    Disassembly:
        mov rax, rbx
        and eax, 7
        cmp rax, 1
        jne 0x405798
        mov ebx, 0x6f01b1
        add rbp, 8
        jmp qword ptr [rbp]

Error in processing case at c3FH_info
    Error:
    Error Location: 143
    Disassembly:
        mov rax, rbx
        and eax, 7
        cmp rax, 1
        jne 0x4059d8
        mov ebx, 0x6f01b1
        add rbp, 8
        jmp qword ptr [rbp]

Error in processing case at c4du_info
    Error:
    Error Location: 143
    Disassembly:
        mov rax, rbx
        and eax, 7
        cmp rax, 3
        jb  0x409527
        add r12, 0x20
        cmp r12, qword ptr [r13 + 0x358]
        ja  0x4095a5
        mov rax, qword ptr [rbx + 5]
        mov rbx, qword ptr [rbx + 0xd]
        mov qword ptr [r12 - 0x18], 0x4093e8
        mov qword ptr [r12 - 8], rax
        mov qword ptr [r12], rbx
        lea rax, [r12 - 0x18]
        mov r14d, 0x6f0910
        mov qword ptr [rbp - 0x10], 0x4b46e0
        mov qword ptr [rbp - 8], 0x6fc6f9
        mov qword ptr [rbp], rax
        add rbp, -0x10
        jmp 0x411930

Main_main_closure = >> $fMonadIO (putStrLn (unpackCString# "Do you know the secret code?:")) (>>= $fMonadIO getLine (\s3Fd_info_arg_0 -> !!ERROR!!))
xtrm0 commented 4 years ago

I would greatly appreciate if this is fixed in the next 3 minutes

0xMirasio commented 1 month ago

ahahha