1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 | a = [0x02,0x8d,0x68,0x1e,0x0b,0x3f,0xde,0xff,0xFF, 0xFF, 1, 0x15, 0x17, 0x9B, 2, 0x15, 0x90, 0x1F, 0x8F, 0xFF,0xFF, 0xFF, 0x60, 0x1E, 0x49, 0x2D, 3, 1, 0x15, 0x16, 0x9B, 2,0x18, 0x90, 0x1F, 0x8F, 0xFF, 0xFF, 0xFF, 0x60, 0x1E, 0x45, 0x2D,3, 1, 0x15, 0x16, 0x9B, 2, 0x16, 0x90, 0x1F, 0x8F, 0xFF, 0xFF,0xFF, 0x60, 0x1E, 0x56, 0x2D, 3, 1, 0x15, 0x16, 0x9B, 2, 0x17,0x90, 0x1F, 0x8F, 0xFF, 0xFF, 0xFF, 0x60, 0x1E, 0x4C, 0x2D, 3,1, 0x15, 0x16, 0x9B, 2, 0x1E, 0xA, 0x90, 0x1F, 0x8F, 0xFF, 0xFF,0xFF, 0x60, 0x1E, 0x2B, 0x2D, 3, 1, 0x15, 0x16, 0x9B, 2, 0x1D,0x90, 0x1F, 0x8F, 0xFF, 0xFF, 0xFF, 0x60, 0x1F, 0xF0, 0xFF, 0xFF,0xFF, 0x2D, 3, 1, 0x15, 0x16, 0x9B, 2, 0x19, 0x90, 0x1F, 0x8F,0xFF, 0xFF, 0xFF, 0x60, 0x1E, 0x1C, 0x2D, 3, 1, 0x15, 0x16, 0x9B,2, 0x1A, 0x90, 0x1F, 0x8F, 0xFF, 0xFF, 0xFF, 0x60, 0x1E, 0x30,0x2D, 3, 1, 0x15, 0x16, 0x9B, 2, 0x1E, 8, 0x90, 0x1F, 0x8F, 0xFF,0xFF, 0xFF, 0x60, 0x1F, 0xE1, 0xFF, 0xFF, 0xFF, 0x2D, 3, 1, 0x15,0x16, 0x9B, 2, 0x1C, 0x90, 0x1F, 0x8F, 0xFF, 0xFF, 0xFF, 0x60,0x1F, 0xED, 0xFF, 0xFF, 0xFF, 0x2D, 3, 1, 0x15, 0x16, 0x9B, 2,0x1E, 9, 0x90, 0x1F, 0x8F, 0xFF, 0xFF, 0xFF, 0x60, 0x1F, 0xA2,0xFF, 0xFF, 0xFF, 0x2D, 3, 1, 0x15, 0x16, 0x9B, 2, 0x1B, 0x90,0x1F, 0x8F, 0xFF, 0xFF, 0xFF, 0x60, 0x1E, 0x74, 0x2D, 3, 1, 0x15,0x16, 0x9B, 0x29] num = 0 print hex(a[18]) print a[35] print a[52] print a[69] print a[87] print a[124] print a[141] print a[159] print a[179] print a[200] print a[220] print "\n" print "\n" for x in range(0,len(a)): a[x] += 1 a[x] &= 0xFF num += a[x] & 0xFF a[18] = (num - 38) & 0xFF a[35] = (num - 3) & 0xFF a[52] = (num ^ 39) & 0xFF a[69] = (num - 21) & 0xFF a[87] = (71 - num) & 0xFF a[124] = (num ^ 114) & 0xFF a[141] = (num ^ 80) & 0xFF a[159] = (235 - num) & 0xFF a[179] = (106 + num) & 0xFF a[200] = (36 -num) & 0xFF a[220] = (num - 3) & 0xFF print str(18) + " ====== " + hex(a[18]) print str(35) + " ====== " + hex(a[35]) print str(52) + " ====== " + hex(a[52]) print str(69) + " ====== " + hex(a[69]) print str(87)+ " ====== " + hex(a[87]) print str(124) + " ====== " + hex(a[124]) print str(141) + " ====== " + hex(a[141]) print str(159) + " ====== " + hex(a[159]) print str(179) + " ====== " + hex(a[179]) print str(200) + " ====== " + hex(a[200]) print str(220) + " ====== " + hex(a[220]) for i in range(len(a)): print hex(a[i]).replace("0x",""), | cs |
소스가 많이 더러움
이렇게 나오는데
1 2 3 4 5 6 7 8 9 10 11 12 | print chr(16^74), print chr(17^87), print chr(33^77), print chr(51^70), print chr(68^29), print chr(102^49), print chr(51^117), print chr(160^238), print chr(144^241), print chr(181^226), print chr(238^163), print chr(17^44), | cs |
이걸 돌리면 값이 나오는데 그값을 base64로 디코딩
'WARGAME > Reversing.Kr' 카테고리의 다른 글
reversing kr autohotkey2 (0) | 2016.03.30 |
---|---|
reversing kr windows kernel (0) | 2015.05.14 |
Raversing kr HateIntel (0) | 2015.04.10 |
Reversing kr CSHOP (0) | 2015.04.10 |
Reversing kr Ransomware (0) | 2015.04.07 |