Intelligent_Word_283

home

Madison Howard

[email protected]

Profile
Inbox
Activity

Setting
Sing out

?>

timeline
about
photos
friends
more

page you may like

Casino Plus

casino plus login
PHFun casino

Claim Your Bonus
PHFun

PHFun login
Glory Casino

Glory Casino লগইন - Bangladesh

Share Your Mood

Intelligent_Word_283

2025-02-12 09:19:57

Pre and after school fees for children with Autism - Victoria

Plenty-Ad519

2023-06-24 12:11:14

Shlayer MacOS Malware - Q7

Recent Notifications

What about Q6 (_host)?

1688478009
In Ghidra search for scallars and type in the name of the function, inside you have obfuscated hex strings which you can decipher using the xor key you got before. Cyberchef is good for that. From Hex /Reverse/Xor . You will get the name of the host this way. It does start with "c"

1688516072
yep ,that is exactly what I did... but, the hex string is 14 hex (7 characters) and the loop inside function is "while counter < 0xc" (which is 12)...

1688547256
All encrypted data required to answer is in DAT and the encrypted function holds longer strings of hexadecimal numbers in it. There is no reason to look for loops, only for longer strings which might be words if converted back and go from the top of the function to the bottom.

1688554859