{"id":13754813,"url":"https://github.com/kcufid/my_ida_python","last_synced_at":"2025-05-10T00:31:11.794Z","repository":{"id":100693694,"uuid":"90975183","full_name":"kcufId/my_ida_python","owner":"kcufId","description":"My idapython  decode data","archived":false,"fork":false,"pushed_at":"2017-05-11T13:33:06.000Z","size":7,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2024-11-16T08:33:46.371Z","etag":null,"topics":["ida","idapython","script"],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kcufId.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2017-05-11T12:11:05.000Z","updated_at":"2017-05-13T02:47:48.000Z","dependencies_parsed_at":null,"dependency_job_id":"74dc539a-6df2-4de4-90dd-691d05640ebc","html_url":"https://github.com/kcufId/my_ida_python","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kcufId%2Fmy_ida_python","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kcufId%2Fmy_ida_python/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kcufId%2Fmy_ida_python/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kcufId%2Fmy_ida_python/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kcufId","download_url":"https://codeload.github.com/kcufId/my_ida_python/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253346377,"owners_count":21894263,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ida","idapython","script"],"created_at":"2024-08-03T10:00:34.476Z","updated_at":"2025-05-10T00:31:11.491Z","avatar_url":"https://github.com/kcufId.png","language":"Python","funding_links":[],"categories":["\u003ca id=\"c39a6d8598dde6abfeef43faf931beb5\"\u003e\u003c/a\u003e未分类"],"sub_categories":[],"readme":"# my_ida_python\nMy idapython  \n\ndriectory format: md5_[filename]\n\n0f14d93ce98f70eefd502f1cf1384d7c_systempost.exe\n    \n    crypted data format: b4 d7 b8 d7 b0 d7 b3 d7 ca d7 cb d7 cb d7 b6 d7 c9 d7 bc d7\n    Decryption every byte, will receive unicode string. I ignore 0xd7(even position),receive ascii string.\n    The main algorithm:\n    for i in xrange(size):\n        temp = ((data[i] - 0xF) \u0026 0xFF) ^ 0xC8\n        data[i] = chr(temp)\n\n9f022df0bcfded9377baf4da1fbe7b8c_Windows-KB271784-x86\n    \n    encryption algo: xor 0x15\n    for i in xrange(size):\n        temp = (data[i] ^ 0x15)\n        data[i] = chr(temp)\n\n68CF2070D8FB4963211CFA4F2DAA72E5\n    \n    encryption algo: similar base64. \n    when analyzing,coding a fucntion list_hex() to print the numer in the list:\n    \"\"\"print to hex form list, \n    eg: [11, 23, 33] to [0xB, 0x17, 0x21]\"\"\"\n    hex_list = []\n    for x in xrange(len(int_list)):\n        hex_str = hex(int_list[x])\n        hex_list.append(hex_str)\n    return '[%s]' % ', '.join(hex_list)\n \n978888892A1ED13E94D2FCB832A2A6B5_wtime32.dll\n    \n    encryption algo: xor 0x12\n    for i in xrange(size):\n        temp = data[i] ^ 0x12\n        data[i] = chr(temp)\n        \n \n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkcufid%2Fmy_ida_python","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkcufid%2Fmy_ida_python","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkcufid%2Fmy_ida_python/lists"}