Skip to content

Instantly share code, notes, and snippets.

@0xd0cf11e
0xd0cf11e / extract_lucify_rsrcs.py
Last active August 24, 2020 19:19
Scripts for extracting payloads from Lucifer's resources.
import struct
import pefile
import argparse
def decrypt_payload(payload):
# The xor key hasn’t changed
size = len(payload)
key = 0x58
decoded = b''
for x in range(size):

Keybase proof

I hereby claim:

  • I am 0xd0cf11e on github.
  • I am 0xd0cf11e (https://keybase.io/0xd0cf11e) on keybase.
  • I have a public key ASBr_4EpK2bSUVE_kwSRdxNLliM5A_qkEIOrIfg5-abQIAo

To claim this, I am signing this object: