IDA查看源代碼
src長度32,encrypt函數加密,工4個參數,_FFFC雙擊,可以看到是個長度為7的固定值FnTest!
加密函數將4個參數又重新命名,混淆視聽,但是還是可以看到是嵌套循環,動態調試直接看結果可以發現,函數將32個字符分成7個一組,每組分別異或這個7長度的字符串 。根據異或的性質
enc = [0x20, 0x0c, 0x30, 0x57, 0x43, 0x47, 0x14, 0x77, 0x0c, 0x66, 0x54, 0x17, 0x43, 0x19, 0x71, 0x59,0x67, 0x53, 0x17, 0x45, 0x18, 0x77, 0x5c, 0x36, 0x5d, 0x45, 0x42, 0x45, 0x22, 0x08, 0x35, 0x57
]
s = "FnTest!"decrypted = ''.join(chr(enc[i] ^ ord(s[i % 7])) for i in range(len(enc)))
print(decrypted)
flag: fbd20351b21d787736d1912b866ddfa2