1
import struct
2

3
def rol8(val, r_bits):
4
    r_bits = r_bits % 8
5
    return ((val << r_bits) | (val >> (8 - r_bits))) & 0xFF
6
def ror8(val, r_bits):
7
    r_bits = r_bits % 8
8
    return ((val >> r_bits) | (val << (8 - r_bits))) & 0xFF
9

10
v7 = -557828333
11
v8 = -26302
12
key_bytes = list(struct.pack('<i', v7) + struct.pack('<h', v8))
13
buf2_values = [
14
    0x8751729E0871B2AA,
15
    0x27AFCE16D405B447,
16
    0x54E3517471E2E4AD,
17
    0xD70C4F97FB5A5DBC
18
]
19
target_bytes = []
20
for val in buf2_values:
21
    target_bytes.extend(struct.pack('<Q', val))
22

23
flag_content = []
24

25
for i in range(32):
26
    v25 = target_bytes[i]
27
    shift_4 = (i % 5) + 1
28
    v25 = rol8(v25, shift_4)
29
    xor_mask = ((11 * i) & 0xFF) ^ 0xA5
30
    v25 = v25 ^ xor_mask
31
    shift_3 = (i % 3) + 1
32
    v25 = ror8(v25, shift_3)
33
    sub_val = (7 * i + 3) & 0xFF
34
    v25 = (v25 - sub_val) & 0xFF
35
    v25 ^= key_bytes[i % 6]
36
    flag_content.append(chr(v25))
37

38
print("flag{" + "".join(flag_content) + "}")

1
import struct
2
v5_vals = [
3
    0x44EA959867464376,
4
    0xC99C0A263BC3136F,
5
    0x52236BE1265FA8E7,
6
    0x86B984038ED0E321
7
]
8
target_bytes = b''.join(struct.pack('<Q', val) for val in v5_vals)
9

10
v6 = bytearray(7)
11
struct.pack_into('<I', v6, 0, 2018915346)
12
struct.pack_into('<i', v6, 3, -558065032)
13

14
flag_content = ""
15
for i in range(32):
16
    t = target_bytes[i]
17
    k = v6[i % 7]
18
    m = (13 * i + 7) & 0xFF
19

20
    char_code = t ^ k ^ m
21
    flag_content += chr(char_code)
22
print(f"flag{{{flag_content}}}")