在IDA中打开要调试的文件

在框中输入以下代码
按两次回车即可
from ida_bytes import *
printable="0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ!#$%&'()*+,-./:;<=>?@[\]^_`{|}~"
table=[0x0074, 0x0073, 0x0076, 0x0075, 0x0078, 0x0077, 0x007A, 0x0079, 0x0062, 0x0061, 0x0020, 0x0023, 0x0022, 0x0025, 0x0024, 0x0027, 0x0026, 0x0029, 0x0028, 0x002B,
0x002A, 0x002D, 0x002C, 0x002F, 0x002E, 0x0031, 0x0030, 0x0033, 0x0032, 0x0035, 0x0034, 0x0037, 0x0036, 0x0039, 0x0038, 0x003B, 0x0000, 0x0003, 0x0002, 0x0005,
0x0004, 0x0007, 0x0006, 0x0009, 0x0008, 0x000B, 0x000A, 0x000D, 0x000C, 0x000F, 0x000E, 0x0011, 0x0010, 0x0013, 0x0012, 0x0015, 0x0014, 0x0017, 0x0016, 0x0019,
0x0018, 0x001B, 0x0060, 0x0065, 0x0068, 0x0067, 0x006A, 0x0069, 0x006C, 0x006B, 0x006E, 0x006D, 0x0070, 0x006F, 0x0072, 0x0071, 0x007B, 0x0063, 0x007D, 0x007C,
0x007F,0x007E, 0x0001, 0x001A, 0x001D, 0x001C, 0x001F, 0x001E, 0x0021, 0x003A, 0x003D, 0x003C, 0x003F]
enc=list(get_bytes(0x0140010010,42))
get=[0x67, 0xB8, 0x4F, 0x47, 0xAC, 0x72, 0x6D, 0xA2, 0x97, 0x13,
0x4E, 0x46, 0xDE, 0xF0, 0x31, 0x81, 0xC5, 0xE6, 0x92, 0xEE,
0x56, 0x9A, 0x52, 0x28, 0x0D, 0x6B, 0xF6, 0xE8, 0xD8, 0x24,
0x82, 0x3F, 0xAB, 0x15, 0x3E, 0x17, 0xBD, 0x91, 0x83, 0xFE,
0x7A, 0x74, 0x64, 0x4B, 0x1B, 0xAB, 0xE0, 0xB6]
for i in range(len(enc)):
enc[i]^=get[i]^0x73
for i in range(0,len(enc),2):
print(printable[table.index(enc[i])],end="")
2025年5月16日小于 1 分钟