[MTCTF 2021]Random-入土为安的第二十二天

考点：

动调，随机数，xor

动调在 v4 = rand()和 byte_2D3370[v5] ^= rand()F2下断点F9调试

按yes,一直单步调试 F8,到xor是看右边第一行，记录下来

返回主函数，点byte_2D2138[v8]找key值

exp

random = [0x58,0xa1,0xCB,0xE9,0xED,0x2C,0xEC,0xFB,0xE9,0xC4,0x16,0x97,0x99,0xb1,0xa4,0xe9,0xc3,0xc6,0x80,0xBF,0x3e,0x44,0x18,0x2e,0x73,0x56,0x52,0xB8,0x5B,0x66,0xED,0xBC,0x8a,0xd8,0x36,0x8f,0xe6,0xd3,0xb1,0x51,0xb9,0x59,0xd3,0x5a]
key=[0x3E, 0xCD, 0xAA, 0x8E, 0x96, 0x1F, 0x89, 0xCD, 0xDB, 0xF1, 0x70, 0xF2, 0xA9, 0x9C, 0xC2,
0x8B, 0xF2, 0xFE, 0xAD, 0x8B, 0x58, 0x7C, 0x2F, 0x03, 0x4A, 0x65, 0x31, 0x89, 0x76, 0x57, 0x88,
0xDF, 0xB8, 0xE9, 0x01, 0xE9, 0xDE, 0xE5, 0x86, 0x68, 0x8F, 0x24, 0xD3, 0x5A]
flag = ""
for i in range(len(key)):
    flag += chr(key[i] ^ random[i])
print(flag)
#flag{3e625fe0-fb18-4f87-93c1-1ec217f86796}