Reverse

from typing import *
flag = '30466633346f59213b4139794520572b45514d61583151576638643a'
res = bytes([int(flag[i*2:i*2+2], 16) for i in range(len(flag) // 2)])
length = len(res)
raw = []
for i in range(length):
trueraw.append(res[i] ^ i)
for i in range(length // 2):
trueraw[i*2], raw[i*2+1] = raw[i*2+1], raw[i*2]
print(''.join(list(map(lambda i : chr(i),raw))))

key = '97 99 9C 91 9E 81 91 9D 9B 9A 9A AB 81 97 AE 80 83 8F 94 89 99 97'
key = list(map(lambda x : int(x, 16), key.split(' ')))
print(key)
flag = ''
i = 0
d = 0xff
while i < 22:
true
trueflag += chr(key[i] ^ d)
truei += 1
trued -= 1
print(flag)

from Crypto.Cipher import AES

a = '39383162303261336136653563306232'
b = [chr(int(a[i*2:i*2+2], 16)) for i in range(len(a) // 2)]
# 大小端
print(''.join(reversed(b)))
# passwd1
passwd1 = ''.join(reversed(b))

key = passwd1[0]
for i in range(1,16):
truekey += chr(ord(passwd1[i]) ^ i)
key = key.encode('utf8')
print(key)
iv = bytes([x for x in range(16)])

secret_text = '7EF602D5625F4E3F65797607D9FEFEB7'
secret_text = ''.join(reversed([secret_text[i*2:i*2+2] for i in range(len(secret_text) // 2)]))
print(secret_text)
secret_text = bytes.fromhex(secret_text)
aes = AES.new(key=key, iv=iv, mode=AES.MODE_CBC)
#print(aes.decrypt(secret_text).hex())

def toStr(a):
trueb = [chr(int(a[i*2:i*2+2], 16)) for i in range(len(a) // 2)]
truereturn ''.join(b)
true
print(toStr(aes.decrypt(secret_text).hex()))

from pwn import *
import re

flag = 'hgame{aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
while True:
trueprint(flag)
truep = remote('101.132.177.131', 9999)
truep.recvuntil('now!\n')
truep.sendline(flag)
truep.recvuntil('-----\n')
truei = 0
truewhile flag[i] != '}' or i == len(flag):
truetrueprint(flag[i])
truetruep.sendline(' ')
truetruel = p.recvuntil('-----\n').decode('utf8')
truetruem1 = re.search(r'ebx: (.+?)\n', l).groups()[0]
truetruep.sendline(' ')
truetruel = p.recvuntil('-----\n').decode('utf8')
truetruem2 = re.search(r'ebx: (.+?)\n', l).groups()[0]
truetrueif int(m1) ^ int(m2) == ord(flag[i]):
truetruetruei += 1
truetrueelse:
truetruetrueflag = list(flag)
truetruetrueflag[i] = chr(int(m1) ^ int (m2))
truetruetrueflag = ''.join(flag)
truetruetruebreak
truep.close()
trueif flag[i] == '}':
truetrueprint(flag)
truetruebreak
    
# hgame{You_Kn0w_debuGg3r}aaaaaaaaaaaaaaaaaaaaaaaaaaa

from z3 import *
import numpy as np
v2 = [0] * 36
v3 = [0] * 36
v4 = [0] * 36

v3[0] = 55030;
v3[1] = 61095;
v3[2] = 60151;
v3[3] = 57247;
v3[4] = 56780;
v3[5] = 55726;
v3[6] = 46642;
v3[7] = 52931;
v3[8] = 53580;
v3[9] = 50437;
v3[10] = 50062;
v3[11] = 44186;
v3[12] = 44909;
v3[13] = 46490;
v3[14] = 46024;
v3[15] = 44347;
v3[16] = 43850;
v3[17] = 44368;
v3[18] = 54990;
v3[19] = 61884;
v3[20] = 61202;
v3[21] = 58139;
v3[22] = 57730;
v3[23] = 54964;
v3[24] = 48849;
v3[25] = 51026;
v3[26] = 49629;
v3[27] = 48219;
v3[28] = 47904;
v3[29] = 50823;
v3[30] = 46596;
v3[31] = 50517;
v3[32] = 48421;
v3[33] = 46143;
v3[34] = 46102;
v3[35] = 46744;
v2[0] = 104;
v2[1] = 103;
v2[2] = 97;
v2[3] = 109;
v2[4] = 101;
v2[5] = 123;
v2[6] = 64;
v2[7] = 95;
v2[8] = 70;
v2[9] = 65;
v2[10] = 75;
v2[11] = 69;
v2[12] = 95;
v2[13] = 102;
v2[14] = 108;
v2[15] = 97;
v2[16] = 103;
v2[17] = 33;
v2[18] = 45;
v2[19] = 100;
v2[20] = 111;
v2[21] = 95;
v2[22] = 89;
v2[23] = 48;
v2[24] = 117;
v2[25] = 95;
v2[26] = 107;
v2[27] = 111;
v2[28] = 110;
v2[29] = 119;
v2[30] = 95;
v2[31] = 83;
v2[32] = 77;
v2[33] = 67;
v2[34] = 63;
v2[35] = 125;

v2, v3 = np.array(v2).reshape(6,6), np.array(v3).reshape(6,6)
flag = np.matmul(v3,np.linalg.inv(v2))
flag = flag.reshape(1, -1)
flag = flag.tolist()[0]
flag = ''.join(list(map(lambda x: chr(round(x)), flag)))
print(flag)
# hgame{E@sy_Se1f-Modifying_C0oodee33}

datanum = [[0] * 37 for i in range(36) ]
def gauss(a):
    for i in range(len(a)):
        if(a[i][i]==0):
            for k in range(i+1,len(a)):
                if(a[k][i]!=0):
                    a[k],a[i]=a[i],a[k]
                    break
        tmp = a[i][i]
        for j in range(i,len(a[i])):
            a[i][j] = a[i][j] / tmp
        for j in range(len(a)):
            if j!=i:
                for k in range(len(a[i])-1,i-1,-1):
                    a[j][k] = a[j][k]-a[j][i]*a[i][k]
    return a
v2 = [0]*36
v2[0] = 104
v2[1] = 103
v2[2] = 97
v2[3] = 109
v2[4] = 101
v2[5] = 123
v2[6] = 64
v2[7] = 95
v2[8] = 70
v2[9] = 65
v2[10] = 75
v2[11] = 69
v2[12] = 95
v2[13] = 102
v2[14] = 108
v2[15] = 97
v2[16] = 103
v2[17] = 33
v2[18] = 45
v2[19] = 100
v2[20] = 111
v2[21] = 95
v2[22] = 89
v2[23] = 48
v2[24] = 117
v2[25] = 95
v2[26] = 107
v2[27] = 111
v2[28] = 110
v2[29] = 119
v2[30] = 95
v2[31] = 83
v2[32] = 77
v2[33] = 67
v2[34] = 63
v2[35] = 125   
v3 = [0] *36
v3[0] = 55030
v3[1] = 61095
v3[2] = 60151
v3[3] = 57247
v3[4] = 56780
v3[5] = 55726
v3[6] = 46642
v3[7] = 52931
v3[8] = 53580
v3[9] = 50437
v3[10] = 50062
v3[11] = 44186
v3[12] = 44909
v3[13] = 46490
v3[14] = 46024
v3[15] = 44347
v3[16] = 43850
v3[17] = 44368
v3[18] = 54990
v3[19] = 61884
v3[20] = 61202
v3[21] = 58139
v3[22] = 57730
v3[23] = 54964
v3[24] = 48849
v3[25] = 51026
v3[26] = 49629
v3[27] = 48219
v3[28] = 47904
v3[29] = 50823
v3[30] = 46596
v3[31] = 50517
v3[32] = 48421
v3[33] = 46143
v3[34] = 46102
v3[35] = 46744
for i in range(6):
    for j in range(6):
        for k in range(6):
            datanum[6*i+j][6*i+k] = v2[6*k+j]
for l in range(6):
    for m in range(6):
        datanum[6*l+m][36] = v3[6*l+m]
res = gauss(datanum)
for i in res:
    print(chr(round(i[36])),end='')

from typing import *
import re
import os
order = 'ol jm fn aj xl yn qm ao vn wm wj xn jk nl co um nn ll ul uj ln el vk hj cl ti cn kk tl go pm wi fm uk bl rk bo lk bj rl il ko yi pk gm dn km sm yk on al qk hl pj pi qi qj sj yj kl vi gj nk ej vl nm bm ri dl kn mn sn ok gl eo do xj zj fl dk fj im zk hm xm vm ij fo oj em kj zi zm rj ho ek dm un tj xi qn ml cj wn zn bk in jl hk jn an vj tm xk sl bn nj gn wk am hn ik mj zl sk mm om rm gk rn io tk en jo pn ym lj dj ql ck cm tn yl jj fk lm wl pl ak si ui mk'.split(' ')

dic = {}
for i in order:
trueurl = os.path.join('/Users/zrzz/Downloads/com.ryen.gun', i + '.java')
truewith open(url, 'r') as f: 
truetruecontent = f.read()
truetrueif "hgame.vidar.club" in content:
truetruetruea = re.search(r'fd\.h\(\"bullet\", \"name\", \"(.)\", \"value\"\);', content).groups()[0]
truetruetruetime = re.search(r'v0_1, (.+?)L, new mr', content).groups()[0]
truetruetrueif '0x' in time:
truetruetruetruetime = int(time, 16)
truetruetrueelse:
truetruetruetruetime = int(time)
truetruetruedic[time] = a
dic = sorted(dic.items(), key=lambda x: x[0])
flag = list(map(lambda x:x[1], dic))
print(''.join(flag))
# tsmyq{dQh3x_y3_nk_z4F1h3_0d_zi7I0dw}