tt3441810
用查壳软件发现不是exe或者dll文件
用记事本打开
去掉地址,尝试写脚本输出
text=[0x68,0x66,0x6C,0x00,0x00,0x48,0xBF,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,
0x8D,0x34 ,0x24, 0x48, 0xBA, 0x02 ,0x00 ,0x00 , 0x00, 0x00 ,0x00, 0x00 ,0x00, 0x48, 0xB8, 0x01,
0x00 ,0x00 ,0x00 ,0x00 ,0x00 ,0x00, 0x00, 0x0F , 0x05 ,0x68, 0x61, 0x67, 0x00 ,0x00 ,0x48, 0xBF,
0x01 ,0x00 ,0x00, 0x00 ,0x00, 0x00, 0x00, 0x00 , 0x48, 0x8D, 0x34, 0x24, 0x48, 0xBA ,0x02, 0x00,
0x00 ,0x00 ,0x00, 0x00, 0x00, 0x00, 0x48, 0xB8 , 0x01 ,0x00 ,0x00, 0x00 ,0x00 ,0x00, 0x00, 0x00,
0x0F ,0x05, 0x68, 0x7B, 0x70, 0x00, 0x00 ,0x48 , 0xBF ,0x01 ,0x00, 0x00, 0x00 ,0x00 ,0x00 ,0x00,
0x00, 0x48, 0x8D, 0x34, 0x24, 0x48 ,0xBA, 0x02 , 0x00 ,0x00, 0x00, 00, 00, 00 ,00 ,0x48,
0xB8,0x01, 00 ,00, 00 ,00, 00 ,00 ,00, 0x0F ,0x05, 0x68, 0x6F, 0x70, 00, 00,
0x48 ,0xBF, 0x01,00, 00 ,00 ,00, 00 , 00 ,00 ,0x48 ,0x8D ,0x34, 0x24, 0x48, 0xBA,
0x02, 0x00 ,00, 00 ,00 ,00, 00, 0x48 ,0xB8, 0x01, 00 ,00, 00 ,00 ,00,
0x00 ,0x00 ,0x00,0x0F ,0x05 ,0x68 ,0x70 ,0x6F ,00 ,00 ,0x48, 0xBF, 0x01, 00 ,00 ,00, 00,
0x00, 0x00 ,00 ,0x48 ,0x8D ,0x34 ,0x24 ,0x48 , 0xBA ,0x02, 00, 00 ,00 ,00, 00 ,00,
0x00 ,0x48 ,0xB8, 0x01 ,00, 00, 00 ,00 , 00 ,00 ,00 ,0x0F ,0x05 ,0x68 ,0x70, 0x72,
0x00, 0x00 ,0x48 ,0xBF, 0x01 ,00, 00, 00 ,00 ,00 ,00 ,00, 0x48, 0x8D, 0x34, 0x24,
0x48 ,0xBA ,0x02, 00 ,00 ,00, 00, 00, 00 ,00, 48, 0xB8, 0x01, 00 ,00 ,00,
0x00 ,0x00 ,00, 00 ,0x0F, 0x05 ,0x68, 0x65 , 0x74, 00 ,00, 0x48, 0xBF ,0x01 ,00 ,00,
0x00 ,0x00 ,00, 00 ,00 ,0x48 ,0x8D, 0x34 , 0x24 ,0x48, 0xBA, 0x02 ,00, 00 ,00, 00,
0x00, 0x00 ,00,0x48 ,0xB8,0x01 ,00 ,00 , 00 ,00 ,00 ,00, 00 ,0x0F ,0x05, 0x68,
0x7D ,0x0A ,00, 00, 0x48 ,0xBF ,0x01, 00, 00, 00 ,00 ,00, 00 ,00 ,0x48, 0x8D,
0x34 ,0x24 ,0x48, 0xBA ,0x02 ,00 ,00, 00 ,00, 00 ,00, 00, 0x48, 0xB8 ,0x01, 00,
0x00 ,0x00, 0x00 ,0x00, 0x00, 0x00, 0x0F, 0x05 , 0x48 ,0x31 ,0xFF ,0x48 ,0xB8, 0x3C ,0x00, 0x00,
0x00, 0x00 ,0x00, 0x00, 0x00, 0x0F, 0x05]
for i in text:
if i>=32 and i<=125:
print(chr(i),end='')
运行得
hflHH4$HHhagHH4$HHh{pHH4$HHhopHH4$HHhpoHH4$HHhprHH4$H0hetHH4$HHh}HH4$HHH1H<
去掉HH4$HHh字符就能得到flag{poppopret}