Exeinfo PE

    C# .NET언어로 컴파일되어있다.

    Decompiled-src

    using System;
    using System.ComponentModel;
    using System.Drawing;
    using System.Windows.Forms;
    
    namespace CSHOP
    {
    	// Token: 0x02000003 RID: 3
    	public class FrmMain : Form
    	{
    		// Token: 0x06000002 RID: 2 RVA: 0x00002067 File Offset: 0x00000267
    		public FrmMain()
    		{
    			this.InitializeComponent();
    		}
    
    		// Token: 0x06000003 RID: 3 RVA: 0x00002078 File Offset: 0x00000278
    		private void Form1_Load(object sender, EventArgs e)
    		{
    			this.lbl\u007F\u0014.Text = " ";
    			this.lbl\u007F\u000A.Text = " ";
    			this.lbl\u007F\u000D.Text = " ";
    			this.lbl\u007F\u0011.Text = " ";
    			this.lbl\u007F\u0003.Text = " ";
    			this.lbl\u007F\u0019.Text = " ";
    			this.lbl\u007F\u0015.Text = " ";
    			this.lbl\uFFFD\u0014.Text = " ";
    			this.lbl\u007F\u000A.Text = " ";
    			this.lbl\u007F\u0002.Text = " ";
    			this.lbl\uFFFD\u0014.Text = " ";
    			this.lbl\u007F\u0015.Text = " ";
    			this.lbl\u007F\u0001.Text = " ";
    		}
    
    		// Token: 0x06000004 RID: 4 RVA: 0x00002158 File Offset: 0x00000358
    		private void \uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD_Click(object sender, EventArgs e)
    		{
    			this.lbl\u007F\u0014.Text = "W";
    			this.lbl\u007F\u000A.Text = "5";
    			this.lbl\u007F\u000D.Text = "4";
    			this.lbl\u007F\u0011.Text = "R";
    			this.lbl\u007F\u0003.Text = "E";
    			this.lbl\u007F\u0019.Text = "6";
    			this.lbl\u007F\u0015.Text = "M";
    			this.lbl\uFFFD\u0014.Text = "I";
    			this.lbl\u007F\u000A.Text = "P";
    			this.lbl\u007F\u0002.Text = "S";
    			this.lbl\uFFFD\u0014.Text = "P";
    			this.lbl\u007F\u0015.Text = "6";
    			this.lbl\u007F\u0001.Text = "S";
    		}
    
    		// Token: 0x06000005 RID: 5 RVA: 0x00002238 File Offset: 0x00000438
    		protected override void Dispose(bool disposing)
    		{
    			if (disposing && this.components != null)
    			{
    				this.components.Dispose();
    			}
    			base.Dispose(disposing);
    		}
    
    		// Token: 0x06000006 RID: 6 RVA: 0x00002258 File Offset: 0x00000458
    		private void InitializeComponent()
    		{
    			ComponentResourceManager componentResourceManager = new ComponentResourceManager(typeof(FrmMain));
    			this.\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD = new Button();
    			this.lbl\u007F\u000A = new Label();
    			this.lbl\u007F\u000D = new Label();
    			this.lbl\u007F\u0014 = new Label();
    			this.lbl\u007F\u0015 = new Label();
    			this.lbl\u007F\u0011 = new Label();
    			this.lbl\uFFFD\u0014 = new Label();
    			this.lbl\u007F\u0019 = new Label();
    			this.lbl\u007F\u0001 = new Label();
    			this.lbl\u007F\u0003 = new Label();
    			this.lbl\u007F\u0002 = new Label();
    			base.SuspendLayout();
    			this.\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD.Location = new Point(165, 62);
    			this.\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD.Name = "btnStart";
    			this.\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD.Size = new Size(0, 0);
    			this.\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD.TabIndex = 0;
    			this.\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD.UseVisualStyleBackColor = true;
    			this.\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD.Click += this.\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD_Click;
    			this.lbl\u007F\u000A.Location = new Point(43, 123);
    			this.lbl\u007F\u000A.Name = "lblGu";
    			this.lbl\u007F\u000A.Size = new Size(53, 23);
    			this.lbl\u007F\u000A.TabIndex = 1;
    			this.lbl\u007F\u000A.Text = "label1";
    			this.lbl\u007F\u000D.Location = new Point(90, 123);
    			this.lbl\u007F\u000D.Name = "lblNu";
    			this.lbl\u007F\u000D.Size = new Size(53, 23);
    			this.lbl\u007F\u000D.TabIndex = 2;
    			this.lbl\u007F\u000D.Text = "label2";
    			this.lbl\u007F\u0014.Location = new Point(135, 123);
    			this.lbl\u007F\u0014.Name = "lblSu";
    			this.lbl\u007F\u0014.Size = new Size(53, 23);
    			this.lbl\u007F\u0014.TabIndex = 3;
    			this.lbl\u007F\u0014.Text = "label3";
    			this.lbl\u007F\u0015.Location = new Point(182, 123);
    			this.lbl\u007F\u0015.Name = "lblTu";
    			this.lbl\u007F\u0015.Size = new Size(53, 23);
    			this.lbl\u007F\u0015.TabIndex = 4;
    			this.lbl\u007F\u0015.Text = "label4";
    			this.lbl\u007F\u0011.Location = new Point(228, 123);
    			this.lbl\u007F\u0011.Name = "lblKu";
    			this.lbl\u007F\u0011.Size = new Size(53, 23);
    			this.lbl\u007F\u0011.TabIndex = 5;
    			this.lbl\u007F\u0011.Text = "label4";
    			this.lbl\uFFFD\u0014.Location = new Point(278, 123);
    			this.lbl\uFFFD\u0014.Name = "ppppp";
    			this.lbl\uFFFD\u0014.Size = new Size(53, 23);
    			this.lbl\uFFFD\u0014.TabIndex = 6;
    			this.lbl\uFFFD\u0014.Text = "label4";
    			this.lbl\u007F\u0019.Location = new Point(324, 123);
    			this.lbl\u007F\u0019.Name = "lblMu";
    			this.lbl\u007F\u0019.Size = new Size(53, 23);
    			this.lbl\u007F\u0019.TabIndex = 7;
    			this.lbl\u007F\u0019.Text = "label4";
    			this.lbl\u007F\u0001.Location = new Point(369, 123);
    			this.lbl\u007F\u0001.Name = "lblXu";
    			this.lbl\u007F\u0001.Size = new Size(53, 23);
    			this.lbl\u007F\u0001.TabIndex = 8;
    			this.lbl\u007F\u0001.Text = "label4";
    			this.lbl\u007F\u0003.Location = new Point(413, 123);
    			this.lbl\u007F\u0003.Name = "lblZu";
    			this.lbl\u007F\u0003.Size = new Size(53, 23);
    			this.lbl\u007F\u0003.TabIndex = 9;
    			this.lbl\u007F\u0003.Text = "label4";
    			this.lbl\u007F\u0002.Location = new Point(457, 123);
    			this.lbl\u007F\u0002.Name = "lblQu";
    			this.lbl\u007F\u0002.Size = new Size(53, 23);
    			this.lbl\u007F\u0002.TabIndex = 10;
    			this.lbl\u007F\u0002.Text = "label4";
    			base.AutoScaleDimensions = new SizeF(7f, 12f);
    			base.AutoScaleMode = AutoScaleMode.Font;
    			base.ClientSize = new Size(626, 316);
    			base.Controls.Add(this.lbl\u007F\u0002);
    			base.Controls.Add(this.lbl\u007F\u0003);
    			base.Controls.Add(this.lbl\u007F\u0001);
    			base.Controls.Add(this.lbl\u007F\u0019);
    			base.Controls.Add(this.lbl\uFFFD\u0014);
    			base.Controls.Add(this.lbl\u007F\u0011);
    			base.Controls.Add(this.lbl\u007F\u0015);
    			base.Controls.Add(this.lbl\u007F\u0014);
    			base.Controls.Add(this.lbl\u007F\u000D);
    			base.Controls.Add(this.lbl\u007F\u000A);
    			base.Controls.Add(this.\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD);
    			base.FormBorderStyle = FormBorderStyle.FixedSingle;
    			base.Icon = (Icon)componentResourceManager.GetObject("$this.Icon");
    			base.MaximizeBox = false;
    			base.Name = "FrmMain";
    			base.StartPosition = FormStartPosition.CenterScreen;
    			this.Text = "CSHOP";
    			base.Load += this.Form1_Load;
    			base.ResumeLayout(false);
    		}
    
    		// Token: 0x04000001 RID: 1
    		private IContainer components;
    
    		// Token: 0x04000002 RID: 2
    		private Button \uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD;
    
    		// Token: 0x04000003 RID: 3
    		private Label lbl\u007F\u000A;
    
    		// Token: 0x04000004 RID: 4
    		private Label lbl\u007F\u000D;
    
    		// Token: 0x04000005 RID: 5
    		private Label lbl\u007F\u0014;
    
    		// Token: 0x04000006 RID: 6
    		private Label lbl\u007F\u0015;
    
    		// Token: 0x04000007 RID: 7
    		private Label lbl\u007F\u0011;
    
    		// Token: 0x04000008 RID: 8
    		private Label lbl\uFFFD\u0014;
    
    		// Token: 0x04000009 RID: 9
    		private Label lbl\u007F\u0019;
    
    		// Token: 0x0400000A RID: 10
    		private Label lbl\u007F\u0001;
    
    		// Token: 0x0400000B RID: 11
    		private Label lbl\u007F\u0003;
    
    		// Token: 0x0400000C RID: 12
    		private Label lbl\u007F\u0002;
    	}
    }

    InitializeComponent 함수를 확인해보면 btnStart 버튼의 사이즈가 new Size(0, 0);,
    즉 너비와 높이가 0으로 되어있어서 보이지 않는다.

    만약에 그 버튼을 찾아서 클릭했을시에는 private void \uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD_Click(object sender, EventArgs e) 함수가 호출되어 문자를 띄워준다.

    Solution

    너비와 높이를 임시로 각각 0x20만큼 늘려주도록 바이너리를 패치하였다.

    이제 버튼이 생겼다. 눌러서 확인해보면,

    FLAG를 확인할 수 있다.

    FLAG

    P4W6RP6SES

    답글 남기기

    이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다