w Obfuscation
Transcript of w Obfuscation
-
8/11/2019 w Obfuscation
1/120
-
8/11/2019 w Obfuscation
2/120
!" # ! $$ %% " &
'( ) ! *+ * ,$ ! -
$ . ! -$ + . ! /$$ !
& 0 12 ) $
$ 3 ( )$ " + 4$$ 5 " $& 67% )$) '( ,$, " * -
! "
& ! $& $& 8 $)&$ $4&& $-
& 6" $/
!#) ( &) " &
-
8/11/2019 w Obfuscation
3/120
)$ 5 &$)$ #" &))$ "+ &,)$$ "7 &-
)& 8 )$)) ' )&), # * 3 ))
$ $, ! ),
, 5 8 )4, 3 8 )-,$ 6+ 9 )-,& 5 ,
, #" ! ,
, 6 !" ,, 3 6 ,,$ * # ! ,$,& 5 5 ,-
,$ 5" ! ,-,$ ' # ,/,$ # * 4,$$ ! 4
,& 6: ! 4,& 8 ; * 4,& ! * 8 4
,&$ 6" * 8 4&,&& # ; * 8 4&
% &' %$4 # 4,4 9 444$ 44
( %)
**+ , -!! 0!#0 -&
! !*85< -)!$ 313#8* -)!& 5=#8* -)!) ! -,!, ;#8* -4!4 #58 --!- 5'* -/!/ '6*6#* /! '6'6 /
-
8/11/2019 w Obfuscation
4/120
**+ ( ,* , )3 '" 3 5 /3 8 /
**+ "+* , )$ # /,
? +-, " /, ? 5# "
? +-, " ? 5# " &
$ ' )$ ? +-, " ,$ ? 5# " /
**+ . ( &
-
8/11/2019 w Obfuscation
5/120
/ 0
" @)A
6+" B " + . @4A
6+" B " B + . C
@4A $ 6+" B B " +. @4A
& 6+" "
& ! DE F @)A $$
& 3 " " $)&$ 8 ". "C
. GF @)A $,&& 8 $4
) ( &) "
&)$ "
&$)& E E " "
&&)) 6+" HF "7 )
, * " ,,
3 " " 5 +-, "
/3 " " 5# 8& "C
/$3$ " "C
5 +-, " /&3& " "C
5# 8& " /)
%
-
8/11/2019 w Obfuscation
6/120
/
$ '" )$ * C " + /
& %% " ". "+ $$& '" $-
, # % ),, 6+" " 5 -$-, "F
+ )/,$ 6+" +" % )/,& H ,$,) ' ,/,, ? "+ " 5 +-, 5# 8&
" 4,4 ! % " G "
"" 4,- ? "+ " 4
,/ ? "+ " 4$, ? "+ " $ 4&, # " 7 4&, # " 7 4),$ # 7 " '6C
'6 4)
4 " 4,
! -&
3 '" " 5 +-, " /
3 '" " 5# 8& " /3$ '" " " 5 +-, /$3& '" " "
" 5 +-, /&3) '" " " 5# 8& /&3, '" " "
" 5# 8& /&
6+" " /,
%
-
8/11/2019 w Obfuscation
7/120
85*5= ' % F " "" * I " JK 3F * J 5 "" % % " 5 " " F ( " 5 7 % (
%
-
8/11/2019 w Obfuscation
8/120
391#!*5= " " ". K * " 7 F ( "" "" F % " % F " "" +
"" " ". K " * "" %" % " "" "%F " " C" ' ( C G % " % " "" "." : F 7 " +" "" " F " 85# 5# " "
* : " "" 7 " ". "+ 9 " 7 CF " " * " G " " 9 ( F F % " " K 5 ( % " "F % :
%
-
8/11/2019 w Obfuscation
9/120
&
!#* %" " "" " !C
" % L " """ F @)A* % ( I
%C + M % ( N " %
@A M : % N " F M " %
" M " " "N " "
% @$AN %
M + F " @)AF @4AN "F " % + K
* % M M
1 2 *
! %% ( +" 5 % "I
"+ C% "
7 7 ""
* " " 5 %" : " 5 ( : " F " "" " %( " " 9
-
8/11/2019 w Obfuscation
10/120
9 I " @)A
" %( ". 7 " " "
5 % C% " M M I
K " C%
" % "" C% CF " "
" " "" C% F "
( " %C
3 " F "" @,A @A F " %C"
8K " CI
!" " "+ %
" :
$ % #0F *%. (
& " "" " " "C
9 +" " B " " " "
-
8/11/2019 w Obfuscation
11/120
$
) '%" :
, 5" %" "" 7 G%
4 +" "% """
6+ " % "
! H "F F % 5 + 7 K % * " F " " % F " 7
1 &
#( "" " " F * ( // * " H %" J% * F " " J% ? % + F + " * % F*F L + ' @4A @4,A ( "
5 @)A ( ( 7 "" !
F "" "" % " >( " " F "" F " "" @&/A @)A
'G "" @4A ! " " + " % " 6" : "
#"K ". " " " # " " @,AF @$&AF @)$AF @,&A 7 F % * " @/AF @)4A
5 "" C" @)AF @$)AF @$,AF @&AF @)AF @4A #" " " "" " F " @&AF@4AF @/AF @AF @$AF @&$AF @&&A # "" % @AF @,$AF @44A
5 ( " ". ""F "" H " @$4A @/AF " F " : K "" ". + # % C "" F
-
8/11/2019 w Obfuscation
12/120
&
"" @)AF @&/AF @4A F : + + +" ""
1 *=+ " % ( "" + ( %
" $ " %" " C ! % ( % C F F "
5 " & " 7 F " % " ! "
" ) ( " M "
* " " " , 8 " :
#F "" ( " 4
' +" " % ""+I
""+ ! M "
""+ 3 M " ""
""+ M +" "
""+ ' M
5 ""+ F " +"C#
-
8/11/2019 w Obfuscation
13/120
&
0686 ( " "C F " "F
" * F C ""F 7 7%
1 .3 ,
'" + G ( " !K " % EC EF ( % @4AI
.3 1
* + C ""I "" "F % " ""+ %
% ( " "" @)A@,A ! " " " "
.3 1
!% ( " " ! "" @)A "" ( F +" CCC 7
)
-
8/11/2019 w Obfuscation
14/120
,
1 +'
3 ( "" 9 " @)AI
M O + +"
M
M "
"%% M " "
5 % " "( F ( @)A 3 " %F 5 " %%
( % " * "K %" *7 ( % C F E E " F "" F 9 J% " F " " ( +( +
( " * % "I
# M "
%F +"I
" % M " % % ""
" H M + % H "+ F % "
% " M + % F " % "
M + % *816 9!L#6 %
% M +
H
! M " " " F +C"I
% M F 7 %
M + H " C
0 % H F + J%
-
8/11/2019 w Obfuscation
15/120
-
8/11/2019 w Obfuscation
16/120
-
4 B
4 H
C"
4 F "
4 "
4 H " G "
5 ( " F C "% @$AF "% "+
1
1 % " @)A 5 " % " F " H 3F " " "
11 5
* 7 6% % % H " " HI
""F ( + H
( % "
""F % ""
7
" ""
%I !" 87 F ( % " 7 " M 7 %
3 + "F + I
L "" F I
I +F $ + "
+ I O H
$ L :
-
8/11/2019 w Obfuscation
17/120
/
L ""
$ 3 " "" # "" " "+
*" I
B " % "
" % "
"
B "
& + "" I
F % " +
F %
F % "
F % % ""
) 6+ "
, ( ""
! " "" % + " * " H " "
F ""
1 ! "
#$ # % &"
' ( )*&+ $ (
11 + 5
5 "" @4A "K " " * % "I "C " F " "
* " " " % ( " % " % I
B "
-
8/11/2019 w Obfuscation
18/120
B B "
5 ( B " % " ( * " " +
9 I 6+" B " + . @4A
* B " 5 % + F " B B " ( % % H"
* " B % F H" * "" @4A ( $ * 7 + " % F " 5 "% @4A " " "+
11
! +" " +C J% 1 "
-
8/11/2019 w Obfuscation
19/120
9 I 6+" B " B + . C @4A
" %F % ! " F *" 7 I (F H " J% + " F " " "" + ( J%? " * ( ( "F " *" +" " J% "I 'C , & 8 )
! +" % " ( &, 1 7 . C( " * " EE > " 7 % % "F " * % " 6% % EE F %
& ) , L +" "
-
8/11/2019 w Obfuscation
20/120
9 $I 6+" B B " + . @4A
9 &I 6+" "
1! 6 7
F I " C "2 * "%I % " "F
-
8/11/2019 w Obfuscation
21/120
$
" " > 7I 2 5 %F " "K ! " " 6C "K " @AF @,A " C%
" @&AF @,AF @4AF @/AF @-AF @AF @AF @,/AF % % (
#" ( " @)A 1C +" CCC I
% "7 4 M % "7 @$A
( " M " " "
( " M "F " @-AF @,/A
M " + " +@4$A
% B M "KF " " % @-AF @4AF @/AF @&A
% "% M " +F " @&4A
5 F 7F : " * " % % " C"+ "( * " "" : " K "
1 ,
* " " "F F "I
# " M 7 " C " "" @)AF @$,A
# M 7 " M F % ( @-AF @/AF @$A
$ "+ M " " 7 "N 7 @AF @4AF@$AF @$AF @$/AF @)&AF @),A
4 *8 M " F % : +" " "+
-
8/11/2019 w Obfuscation
22/120
&
5 " + @4A CI
CC% " M % " "F
" %
" " M " F %F 7
" ( M % " KF" % "
" K ( % " CC%
( M
" "" " L " (
" " % " 5 % @$A # %5 F ( " + "1 "+ "
-
8/11/2019 w Obfuscation
23/120
&
" ( " "
" * I F %F F "F %F "F
5 $ " 5 F + %. C " % #"
" F +"
* $I '" 9 "+* .*
F % " . %
% " %
P + %
" "
" I
% " %
% %" P % +
" P + 7 F N ""
P "" + %
7 P + 7 F +"
1 3
5 *%. ( % #0 F K % = ! " I
)
-
8/11/2019 w Obfuscation
24/120
,
M F "
" M % +
"
# " + * " + % H + # " " 5#!
.3 1
&(
-
# % " # +" ( % 6 "" I F + +5 " " % " F "" CC % F " F "
.3 1 "
& ' (
& (
.3 1 + "
5 F " F "" "" " %
- 5 " F
-
8/11/2019 w Obfuscation
25/120
4
"+* 1
'
' % C F . 7 F (
.3 1! ! & ( & (
!% ( " " 9 " KF ( 7 +F +" * % 7% + "F + + 6+
7 ( " K " " F " (
5 % ( $&F " 7 " ' C " C % ( $F C % M " % * ( $ $$ "" " "
1 * +
" F " " " + F % ( +
"F ( " " + " " "( +F ( I
.3 1 # " * " "& (
-
8/11/2019 w Obfuscation
26/120
-
# ( "( " +I
.3 1$ ! " * "
" & (
1 " + ( +I
.3 1% $" "
=+ " "( G +I
.3 1- -. " * " . " & (
1 / 0 " " "
,1 1 ( " + ( $ % " I
" " +F $
! ( $ $$ % " " + !K " +FFF(F + " +F 9 % + % + (I " G % F % * F " " +"F " F
-
8/11/2019 w Obfuscation
27/120
/
* $I * C " +
F * """ % + G
! ( $) $- F I
" "" $F " + "
1 / 0 " "
/
$
"
11
/ * F % " " E E
-
8/11/2019 w Obfuscation
28/120
,1
: L ( $$ " I
+" " "I
$
5 " $ F F I
$$
7% I
$&
5 $& $ I
" I
$)
6+"
" + ( $$ I
= %
-
8/11/2019 w Obfuscation
29/120
+ % F $)I
( ( $) % + F I
: 5 " $ F +" $$ F 7% $& ( " F . $ "( " + + (> %F 7% $& " EE + F $ * 7% F " + ! % F # F I
$,
* $, F " " EE " + ( " + # % " % "F EE
F " ;:F "" + 7 "
"+* 1
"
"
-
8/11/2019 w Obfuscation
30/120
12 "
" & 13(
! +"F " + "." +F " " + 7 K" % ". " > " " " + % " ! " F
" + H " 5 +" $ " " I * % "+ H( "
5 F " + % " % 7 " + ( $ +" $$ *" " "C " F " ".
1 *
" " % " " + 5 " " " " % F . " " +" ". * ( " " + " F I
( "F + " ( " !% % 1 % "
F K " = " " " + "( % "
"+* 1 / 4 56777 " "
! % 7 % +" % % F ".
#" % " F % "F "
-
8/11/2019 w Obfuscation
31/120
$
! " !
# # # "
1 ( " + " +" % ! F " " " " + F "
% " % " " +F F + " " + 5 " % + E"E E"EF " " + 7 "
9 % " F % " " +F "F
$F " + % " @,A* "" CF ( " "(I
" M 7 " + +F %I
4 %
4 + " " + % "F + % " +
M 7 +
" M F 7 % "
5 " ( "H " I
"
4
4
4 4 "
4 " (
4
4
4 O "
-
8/11/2019 w Obfuscation
32/120
&
"
4 + + 86#6*F 0!L*
4 "O" %
* " " "I
% " M " " I
%
" + F " + " + F" + N % F K CC ""
% " M
"" 5 " ( % %F % " +
! "" C C C ""+ F " ( % + F %B BI
% "
4 " % 4 " 6
-
8/11/2019 w Obfuscation
33/120
)
"+* 1! / 67165
$
%% % % % $
% + ! !F " % C+I ( M F M !! 8% " C" +F +" B
"+* 1 / 67165 ,
% %
&
%
%% % % % ' '% ! ! & '
' % '
5 " " "I
.3 1) !
% F " " " "
1! "8 ,
! ( ". 7%F . F + "F "" % 5 " " + " ( ". 7%
.3 1# ! " " " "0
" !
# !
!
% ( ( F F " % 7% + $F $ %
-
8/11/2019 w Obfuscation
34/120
,
# "" H( " "F " * ( F " 7% " +I " F " F K + "" " + ! " + "
". " %5 7% " " +I "
F " F I
* " % "F " % +
/ 1
,1 9 " ( $I
" !
# !
!
I
( $ ! "( I
1 .3 ,
1 % ( % "" +"@)A (
-
8/11/2019 w Obfuscation
35/120
4
.3 1 + " "
#7 F 7% 5 " % F + "O" 5 % "F "% % (
#" " "I F %" '( " 7% " "F
+ + * 7% " " "
"" 5 F
"+* 1$ / 67165 "! ! ! !
% %
% %
%% % % %
%% % % " %
F 7I
% %% % $" % % %
% %
%#! % % #!
% %% % $" % %% % % %
%!# % % " !#
%% % % " %
* " 7I
%!# % % !#
% %% % $" % %#! % % " #!
% %% % $" %
+ ! ! ! !
-
8/11/2019 w Obfuscation
36/120
-
1$ ,*
( $ % ""CF
1
"
,1 L
I " "
F %" F " + F % " +F M % 9 ( " " $ I
I
%
! F % F " I
1 ( % " F C% "F I
* " ( 7% "F ( $ " "
# "F D %%E +" $&F " % % % $ + + " B " + ! !
5 " "" I
/ 1 * "
-
8/11/2019 w Obfuscation
37/120
/
,1 5 F " I
+ F + " " * + " * " " + " + K $ F I
F + 5 + F "
# "" ( +"
"+* 1% / 67165 "! ! &
% %
%% % % %
% %
' % % %
() ( %
(
" " " +I
% %
%% % % %
% %
' % % %
() ( %
(
+ " G ! " I
% % % "
' *
% %
%# % %
' *
%% % % %
$ 6+ "F +" 86#6*
-
8/11/2019 w Obfuscation
38/120
$
' % ' % ' *
% %
' % % %
% %
() ( % (
! " % F 7% " ? % ( " " " 5 ( F " + F 7 " % 5 " 7 I
% % % "
% % %
" ! +" I
1! * .
,1 9 $ F " " +' " ( F "+ " " + " 9 " I
'( $ " I
7 " 5
F I
"I
F "% " + " 9 ( I
-
8/11/2019 w Obfuscation
39/120
$
! ( $
"% " 7% "
* F " "7 F " C" M F " B "
-
8/11/2019 w Obfuscation
40/120
& !
"
0686 " %( " "7 ! + "F " " * " G F 7I : % %2 * " " % 6" F """
!1 '
5 @)A F * L % "" F : % I
" M "+ "F "
M % " " C
M " +
'G "" 5
DE ( &F " F % B 5 F " &&
!11 ,'
* ( " ( F 7 " 7 " "+ 7 + @$-A 5 G F "" 1C C%
$
-
8/11/2019 w Obfuscation
41/120
$$
9 &I ! DE F
@)A
"F C% " 6+" &
* &I %% " ". "+
-
8/11/2019 w Obfuscation
42/120
$&
? "F F % " % 8 % %( % """+ ! 9 C " %
6+" F + C C F ! F "" % 7 "
" M F % " "" % CI
!1 % +
%
&(
&( 8 9:
&( 9:
&(
&( "
&( " &(
$ BM F % ) " ( & 3 ( 7 B "I
"F
5 " " I
!1 +#;4 < +);4 < 8 % +#;4 +);4 "
&( +#;4
&( = +);4 8
) % "
-
8/11/2019 w Obfuscation
43/120
$)
9 &I 3 " "
&( &( +);4
! ( **#1 **C=1 " ? B I
'('(
! +" " ,&F "" C " 6: " B * " M % M
* " % " " 5 % " "+I
!11 (
8 ( @)A " " 5 " CI
. G M " "
1. G M + " 7 : +
-
8/11/2019 w Obfuscation
44/120
$,
5 " F % "" " " " % 5 "% "" @)AF @,A 8 % I
%F F F F C
.3 !1
0 . 0 . >1
9 &$I 8 ". "C. GF @)A
. G " +"F " . G ( %I
M " :
M " 7
" M + " "
" M K " " " "
-
8/11/2019 w Obfuscation
45/120
$4
5 % "" ( %I F " " C % ". CI =C" (F ""+ ) ( &&F """ % ".
". G 5 %
1
2
3
4
5
2
34
5
wpr2
3
4
5
wpt
9 &&I 8
" "" : " ""F % . " 7 " "+ % " F 7 "+ " 5 +" " "F % @A",)- 5 F "+ F " " "+F
!11
" " 5 " " "+ 9 "+ + ' ' 5 @)A ( %I
.3 !1
-
8/11/2019 w Obfuscation
46/120
$-
" " " '
" ' " '
5 ( % F % " + " 5 " "C F "+ %F % G " " 5 " " + " ( " 5 " 9 9 * %
6" % %
+ " F G" 8" + " F " F %G " F " I
!11! 2
5 @)A " ( %5 ( I "F 5
%F " ! F ( F " F & " % F "+ " % "+ " 5 "" F "F "+ " F O " F % " F "+
* &I '"
2 ,' ( ,' %
(
%
5 ( F 7 C HI % % " F" "% I
9 " F % % " G "F "%
-
8/11/2019 w Obfuscation
47/120
$/
% " % " 5 " " F % 7 "
!1 "*
! 7 % C "" " > 7I :% " " K 2 * 7 " " F " ""
* ". " K " * " " F : "F """ "
* " 7 "F "F C " " "F K "F ( " I
M " HF % : F " +"
M " " +"F % " %
M "% CF F " "F " "
N " % % %FF N " % "+",
! * F % ". " ! % " " * % " F "4 6+" " " ,&$
, # C ""+ '4 +"I % " %
-
8/11/2019 w Obfuscation
48/120
&
06 * 7 " " 7 "
3 % "" F "( (
1 3
5 "" . ( @)AF " H F + " $ % " % # "" " ( " F % ( )
9 )I (
5 ( % F " F " 7 " L 7 +F > F
&
-
8/11/2019 w Obfuscation
49/120
&
+ 5 F ))
! ( " F 5 +F
" "+ F K "
* " 7 " ( % "F " " F ""I
I
"+ )$
" F + I
( I
" I
(-I
"I
"""
"F"F " "% +
1 ,* ,
5 " I 2* F "% "K " % % "
5 " "" " " * "" "F " "C % # " ""F +
- 5 " F % *. "
-
8/11/2019 w Obfuscation
50/120
&
.3 1 / " " !
'" +=> /> '?> I
1 /
2 #
3 * " " "
1
* ( "" ( ) 9 " F " " " " + 5 +-,FK % 5 " F " " C " ( G ( )
9 )I "
/ % % 3" " % 5 +-, " "
"
-
8/11/2019 w Obfuscation
51/120
&$
* "" +"F + " 9 )$ % "F " % " " * EE "F
5 F "
9 )$I " C
" I C
" * + " F + " " ( "C "% 9 )& F " E E "
* " +" ""+ 38 % "
9 " % ( + % " "
1
* F % % " * "F% " "F "
5 " ""+ F " + % + 5 % " ! $$ I
+ "
#" F 7 " 5 " "F "
-
8/11/2019 w Obfuscation
52/120
&&
9 )&I E E " "
% " " + "
E!E "F " +" O " + "F . B 7 % " +
"+* 1 4 56777
"
+#! #!
#! ! #
" + $I
+#! #!
, , , " ---
--- #! ! #
!. . . " ! ---
# " " * % " " B ! " " (
! " % "F "+ " * " F
$ = ---
-
8/11/2019 w Obfuscation
53/120
&)
+ " + (F % 7
5 " * " F
I
% " *
11 &*
* " + " % " " " F
I
* " + I
5 (I
" + 5I
" + " % " F % % $$
"+* 1 / 67165 "! ! !
% %
%% % % %
%% % % " %
% %
" I
-
8/11/2019 w Obfuscation
54/120
&,
% %
% %% % $" % --- %% % % %
%#! % % " #! ---
%% % % " % %,# % % ,# ---
% %
! F + F % " + !!! ! ! ! 1 " %I
% %% % $" % %,# % % " ,#
%#! % % #!
5 % " "F " 8% G " B " " " "% B * "+ "
11 *+
5 " "+ F " + F M " 5 " @)AF @4AF " " G 9 " % "+
( " " " " + " I
7 (I
"+ " K
#" "+ @)A I
+ 7% " M 7 " F 7% 7N + + ( %
-
8/11/2019 w Obfuscation
55/120
&4
+ M " + +" H"
" M "
C "
"( M + H" F G " 5 -$-, ".
% "( M + 7 "
E% E M " F 7 + " "
"7 M " "F ": % +
* : "+ F F "7 F . ""
"+* 1 / 67165 "! ! )
% %
% % %
%% % % ///
() ( 0 (
I
%% %
%% % % ---
% % %
%% % % ///
() ( 0 ( %% % % /// ---
(') ' ' ' ---
+ + ! ! ! ) 5 F F % (F H" % !" % KF
'" "F "+ " C 6: + 7% " : " + # + F % 7 "+"K
"+* 1! / 67165 0
-
8/11/2019 w Obfuscation
56/120
&-
12 . % %
# % % %
"( % I
12 34 %% % % ---
# 12 . % %
, ,! ' % % % ---
!2 34 %% % % /// ---
5 5 (') ' ---6 76 6 ( 64$1!8 % ---
* " " H"F % + /0 D"E M F 7 ( " H" * " 7 "
5 % +" F "( > % " C * " " "
11 *8
1 " F % + + +F 7 * " EE > % * "% : F
"( " F + " " " + * "( "" " " " % "+
* "7 ( @,AF ( %
.3 1 + 8 &
5 % " % F 5 %
F
"+* 1 "65 " ! !
% %
%% % % %
% %
"7 I
& 0 " "+
-
8/11/2019 w Obfuscation
57/120
&/
%!# % !#
% %
%% % % %
%% % % !#
%! % !#$$! #.' %% % % 493 % :; %% % % % %
% %
! + "7 F !% * " "7 %F 7 " %
"7 % G 5 % +" " +" 5 +" + 1 "
H" H" 5 "" @,A "7 % *
% % 7 +" "+ C % "+ * " " " @$AF @A I
& 1 $ ?
2 "
3 #
1 & ( " @ A @ A
> ; 8 !!"#
* % % I
G " " C "
. "F " "F @,A
" " + " "
* % C% "" " " % + " " * +"@,AI
-
8/11/2019 w Obfuscation
58/120
)
"+* 1$ ='
9 3 "Q "Q.* *816 9!L#6 " ' " '
" " " H 'I * + ( )) * ")F , - %F " H I )F , * - +
9 ))I 6+" HF "7
* " ( *F +I
-
8/11/2019 w Obfuscation
59/120
)
$
-
8/11/2019 w Obfuscation
60/120
)
" * "% : F " % "
0 "7 " ! " F
" " + %F + "7 " * " % * "" @,A 5 " G "7 % " !""" " 7F "" " " % "7 "
* " F 7 "7 F 7 5 " "F " * "7 7F "7 " %4 * : "7 F
%
"+* 1- / 4 56777 "
# #
A ( / 0 ( ! " !
"7 ( I
/
M % "
/M
" ! " I
, , --- , , , " ---
# " #
A ( # / 0 ( , , , ---
! " !
' , , , 493 ---
+!, , , ! ---
( , $ / 0 ( ---
4 5 "
-
8/11/2019 w Obfuscation
61/120
)$
+ + F H" D (E % + 5 " "7 7
"7 " "
)$$ 5 " " "+ %" # % " "F ""
1! (
* " ". 5"" F + "F 7 + 5 F " %F " 5 F H" K 7 + 7 * G %F H" F B
"+* 1) / 4 56777
+
:; :;
# # #
! ! !
I
:; :;
+
! ! !
# # #
% " !% "F +
"+* 1# / 4 56777
:; :;
:; :;
# # ! !
, - ,
-
I
-
8/11/2019 w Obfuscation
62/120
)&
#
! !
,
, - , -
! !
:; :;
:; :;
# #
' # # / ' # ! !
, ,!
" " * H" " 1 7 G F K " F " + % :
5 I
"""
"F "F " " "F % ) !"" " I
%
( R " 7 I
%
% 9 +" F % % " " : " "
8 ( 7
" " % H" > " 7
1 .
' " "" @)AF @,AF + "" > " " "
"+* 1 / 67165 8
-
8/11/2019 w Obfuscation
63/120
))
%, % ,
% % %
1% 1 %
' , , ,
* K % 7 K ! & % " + ! I
% %% % ---
% % % BC
% %, % $" , --- % % ---
%, % % ,
#% # %
' , , ,
! + ! F " 7 I * + ( 3 F %
5 "" "F " F + F + :
1$ &'
9 " I
" " +F " " F
"7 " F "
: ( + "7
* + "7 C 5 G 5 7 F " F % " "
-
8/11/2019 w Obfuscation
64/120
& $
=5= I " "F % C
% % 1 " " " % G C 5 + 7
$1 F % "F "
5 % " ,F 7 9 +" &111(1 % 111" " %
* ,I # % ' .*
& + ' ' (
),
-
8/11/2019 w Obfuscation
65/120
)4
$11 (
5 7 F 7 + " # ( %
% " F . F " " )&
"+* $1 / 67165
% %
%% % % ///
(') ( ' ( % %
( ' '(
%# % #
'
I
%% % % ///
% %
%# % #
() ( D (( ' '
(
% %
'
5 F H"F
* % +" F 7 % * " " ( " F " )I
" " D"% C + E-
F H"/
"+ " " " "
- ! +" " % " I %
%%/ 5 "(
-
8/11/2019 w Obfuscation
66/120
)-
$11 (
5 "" F C H" " * "
" : 5 @$AF H" " " F ' K " 7 % " H" 5 ( %" " (
% H"F "F % " + " " " G H" :
"+* $1 / 4 56777
# #
!# # # !A ( # / 0 ( # #
(
#:; :; #
I
( ((
#:; :; #
' '
(# !# # # !
A ( # / 0 ( (! (!
(
# #
' (# # / ' (# !# # # !
A ( # / 0 ((!
# #
( ('
! " B " ( * D 'DD#E ( F G % %
$11 "+ 0
* F " G , # % " % %
-
8/11/2019 w Obfuscation
67/120
)/
+" ,$ 5 + % " 5 " F " : " * % 7
+ F
* ,I 6+" " 5 -$-, "F +
,
% % %%
% %%
%%
%%
%%
%
( DD
' %
DD
A
% %% %%
* ,$I 6+" +" %"+*
0 !
"+* $1 / % 67165
%% % %
%% % % %
%% % % - %
%% % % - %
%% % % " %
+ +" %B I
%% % % %% % % " %
%% % % - %
%% % % - %
%% % % %
! 8K + " 7 "
B F "K F + " "" 5 % "F " 5 F
-
8/11/2019 w Obfuscation
68/120
,
"F " " %B ! 7 F "" + " )
$11!
* " %F E EF ( " " )$I
" +
% " " +
"7
* ""
B + " C$ 5 + 7F C "
* " : B C " +" @,AF " &&5" + "
"+* $1! / 67165 ' " "! ! ! ! )
.,1 ! ! ! ! )
% < < %# < < *.F #" L = " # % $/F "" C-F #3F !F =%
@A 0!F , # $" *F 5666 * # 6F ? /F = ,F =% /-$F "" ,,&C,4
@A , .F - 8 8F J !F &I,/C/F J //)
@A " ' $& . 1!'F F! #5L!= = ),I/,C$F J //
@$A " " .F = F 5666* # 6F ,I&4,C&/$F J //&
@&A " "F # -F
-
8/11/2019 w Obfuscation
88/120
-
@)A " "F $ - $, , F #+ 8% 6CF !F 1#!F ///F 5666C# F "" ,,C4,
@,A " " & F ! B $F *C 8" &&-F '" " # 6 6F * 1C% ;F #" ///
@4A " " F - * H $ F * 8" &F '" " # 6 6F * 1% ;F ' //4
@-A " " F # # B ,"F 5 # F 3F 5F //4F "" --C/)F 5666C#
@/A " "F - * -F J LCF ? &F J //,F "" 44C//
@A " "F , , ," !F !C( # 6 !#6F 5666 C" # 3F !F ' //)F "" &C&/
@A " " . *&F - B !F # C U 6+"F ? )4F J //)F "" -C-/
@A " " . *&F 4 -F
-
8/11/2019 w Obfuscation
89/120
-
@$A " "& "' #F G8 ! + *./F //F #" L = " # %&4$F //F "" &4&C&-
@$&A 3 !'F , $ F J L *F
F //@$)A 4 5F $ ," #
F "F $I,M$&F 9 //-
@$,A *F# 4 IF 8>*.-) T !% "CF ! /-)F "" &M)4
@$4A 0F J8 $ +F !#5!8>*. T !% "F 5 ! " 8F RF J"F
@$-A 0 0F , # #F 6% =C0F /44
@$/A $ 0 . + &F " F #5CL!= = ,$I,$C4&F /-
@&A 0! F ' F #5!J "F % &F ' /4)F "" )/C)$
@&A 0(& F! F ! * C" #F )&I$4C$/$F =% /-4
@&A 0(& * .F + F & J 5*F JF 5F !" /-&
@&$A *% 0,2F-F ' 'F 1% F 5%F "
#F /4-
@&&A " 0F # - 4 H 4 F ' 'F 1%F " #F ! /4$
@&)A $ % F # " !F * 8"F '" " #F 8 1%F =3F //
@&,A $ %F ! !F ' 'F 'C" " #F 8 1%F = 3F J //
-
8/11/2019 w Obfuscation
90/120
-
@&4A %!F - F C 5 J * # '%C" *!#9*F 3F /-)
@&-A - * %( " .' ** , ' F 8 F " 8F 6%F =
@&/A & %2F K $ * +F # *F '" " #F * 1% ! //-
@)A & %2F ! K F ! F #" //-
@)A !F + ! # +F * "F '" " #F 1% F 3F ' //-
@)A !'F ! )-*F J //$F '
@)$A 6 F ,? # ! #F 595 #+! 5 #F F 9F J
@)&A # !"F " F 5666 * # 6F&I$-C$F ' /4,
@))A 4 F, 4 # - ,F * J # #F = F /-F "" $/C&,
@),A " #& .&F4 "F J
# #F I4C)F //$@)4A 4& "' # " "&F * " #
G8F ! " # !#F F !CF !
@)-A )'F ? F !% "I8>*.-/F 3F ! //F #"F "" ,C,
@)/A 7 + )F $ * - * ! $"F #! -F 5LF /-F ""&,C)
@,A ! ' * .F 8 $ 48
#F # " F F F !" //-F "" -C$-
@,A # F $ - !F C0 5F = J //
@,A 0 .F # 'F 5666* # 6F 4)I)C)-F #" /-
@,$A F 0 IF 5666 #CF J //F "" /C/,
-
8/11/2019 w Obfuscation
91/120
-$
@,&A # " #!F + # ! * HF # " 5 0F #" L = " #
@,)A % F ! ! H , , $
+ + F
@,,A &2!'F L8 F ! F "" -&4C-)4
@,4A & F# F 0 F * 1% ;F'" " # 6 6F //4
@,-A 82'FG8 #M8 8!8F K KF K /,,
@,/A ' #,F F J LF$$IM-/F #" //)
@4A "3 $& 0 .& !' # +
# !F * 8"F 1% ?F '"C " #F
@4A "3 $& 0 .& !' ! # # 4F 5 '" # =FWF #F J
@4A "3 $&F # # 4F ' 'F1% ?F '" " #F
@4$A 0 $ F # 8F J !F &&,I-,C-&/F =% //4
@4&A $ *F F "F /I-4C/F =% //
@4)A $'F , # $" 4F 5666 * #C 6 ? &F = /F #" /--
@4,A *(&( $92'F / 4 ! $ +F 5 # 6 8 #68 FL ?F 1#!F J F "" )$C)/
@44A ' 1 0&5 /& $ " "F , 4 #" ,F 5 # 6 8
#68 F L ?F 1#!F J F "" ,C,4
-
8/11/2019 w Obfuscation
92/120
**+
,
9 " % " " G ! " " "
" % " + 3 " "
* !I 9 .*
0!#0 $C
!*85< "
5=#8* "
313#8* ! C +
;#8* 7
#58 " "
5'* % '6*6#* C
'6'6 "
1 , 6&6
* " $C F % ! + ( +
' :'' -;
E
'' ' %#!,.51
:-*;
::$$6;:#!;;F-'
G
-&
-
8/11/2019 w Obfuscation
93/120
-)
1 ,
-
8/11/2019 w Obfuscation
94/120
-,
:$';E
:D(($'(;:($D;E
D(
(
G
D
G
G
1 ,
-
8/11/2019 w Obfuscation
95/120
-4
'
G
1$ , B&(5 " " 7 F @,,A * & % %
A:' -' '' -D;
E
' '#'(
D D
:*;
E
D"" D"":$;
''
" (
:;
E
:(;:(;
D
:"";:;
D:(;
D
(
(
G
:"";
E D D"
D D
G E
D D
D D"
G
G
G
-
8/11/2019 w Obfuscation
96/120
--
1% , &
-
8/11/2019 w Obfuscation
97/120
-/
:$ ! ($ (! D$ D!;'
:D*;
(D
D
5
'
D
'
G
G
'
G
1- , .
C -+- % % !2. " " F : (+ " "
:' -D' --' -;
E
' ( D
' &
: $1 ; :( ($1 (;E
&
:D D$1 D;& :D(-D1-D;#
1-( &
G
:( ($1 (;
: $1 ;E&
:D D$1 D;& :D-1-D(;#
&
D1-( :$"#.; / "#. ::#; / # ;G
G
-
8/11/2019 w Obfuscation
98/120
/
1) , .""&
* " % ( " % G * %
C% ( " + " "
:' -' ';
E
'
:$';:;F
:*%#!,.51;
:$';E
%#!,.51F
""
G
:$'";:%#!,.51;
F"
G
1# , ."."
* " F % * % % " 4 * F H "
:'' ' -' ''' ' D0;
E
'' ' (%15.,!#
:$';E
(F:FD0;5(F:FD0;$$#D0(FD0F%#!,.51
(
G
G
-
8/11/2019 w Obfuscation
99/120
**+
( ,* ,
" " C * " " " % "
5 I " "F " C > " " "F "
1 .*
* " " " + " ""+ ! 97 " + F ? H * " " " "I 5 +-, 5#8& 8 5 " 3 5# " M
3
* 3I '" " 5 +-, ", G G G G! G G$ G%
0!#0 &, / / & )
!*85< &$ $ & 5=#8* $ - ) &
313#8* & $ / / $ ! && 4 &
;#8* &) - - $
#58 &) / ) , )
5'* $- ) ) , ) )
'6*6#* & 4 $ & ) '6'6 ) & $ - /
!% #1! #1 #1#% #1 #1#- #1#) #1#%
!% " " (3 3 5 5 " " H % % 5 F " (% %
/
-
8/11/2019 w Obfuscation
100/120
/
* 3I '" " 5# 8& ", G G G G! G G$ G%
0!#0 && 4 4 -
!*85< & 4 )5=#8* $- / / $ $ &313#8* &, , )
! & & &
;#8* ) $ 4 , & #58 &$ & ,
5'* )$ , &'6*6#* &/ / & ,
'6'6 , $ , ,
!% #1!% #1#% #1#! #1#! #1# #1# #1#
9 3I " " 5 +-, "
J " ( ) F 7 F " 5 +-, 5# " + G 5# 85# % G
1 ( ,
" " " % " * " I " % " " " C " "
-
8/11/2019 w Obfuscation
101/120
/$
9 3I " " 5# 8& "C
"% $/* " "I 5 +-, 5# 9 "
" I
8 " 3$ 3) M " G I
F " G % 8!=' 8!='
8 " " 3& 3, M " %G I F " G % 8!=' 8!='
* 3$I '" " " 5 +-,, ;: G G G G! G G$ G%
8!=' 4 , & &
8!=' , / / - ) / $8!=' - , $ & 8!=' , / / - ) - $
!% #1% #1 #1- #1$ #1 #1# #1
J " " " ( 3$ 3& 5 F " "
J " ( )$ )&
$/ 5 "F %
-
8/11/2019 w Obfuscation
102/120
/&
* 3&I '" " " "C 5 +-,
, ;: G G G G! G G$ G%
8!=' /- )) / - 8!=' / &- - - & & ,
8!=' /- )) / - /
8!=' / &- - - & & ,
!% #1) #1 #1) #1# #1$ #1 #1
* 3)I '" " " 5# 8&, ;: G G G G! G G$ G%
8!=' , & , $8!=' / 4 4 , , & &
8!=' , & , $8!=' / 4 4 , , & &
!% #1#- #1#) #1#$ #1#$ #1#) #1# #1#!
* 3,I '" " " "C 5# 8&
, ;: G G G G! G G$ G%
8!=' /
8!=' - )
8!=' / 8!=' - )
!% #1-$ #1#! #1# #1# #1# #1# #1#
9 3$I " " 5 +-, "
-
8/11/2019 w Obfuscation
103/120
/)
9 3&I " " 5# 8& "
-
8/11/2019 w Obfuscation
104/120
**+
"+* ,
* " " F "I " 313#8*F '6C
*6#* '6'6 * " G "F ( G 7 L C" 5# F ""
5 " " F % "C F " + "7 +"
1 & ,
* " 97 "
" + & 8 F ".
11 H +-$ *
* G " B " 5 : " "7 7 % ! "" M " ,&I
"I
N "
N B
N % "
I
* I 6+" ""+* .*
#% " +
#% % "
. "7
/,
-
8/11/2019 w Obfuscation
105/120
/4
I "
", "1 "#
1 '# %. %## %!#,
HI
3JBC3 KLC #
# '
#% #%
HI
' 3JBC3 KLC #
%# ''" %
#%HI.
3JBC3 KLC "1 ' 3JBC3 KLC "1
.
!
.
( HI11
HI#
' 3JBC3 KLC "1
3JBC3 KLC "1 :*;( HI#6
#
3JBC3 KLC "1
( HI
3JBC3 KLC "# .
6
( HI.
( HI %#
-
8/11/2019 w Obfuscation
106/120
/-
%#,
( HI
HI,
%"# %
%
#,
6!
( HI.
%
"#%HI
%"# :'; %#
( HI#5
' 3JBC3 KLC 1
%"#
' 3JBC3 KLC 1
%1' %
%"# ' %
1
%1
%,
%3JBC3 KLC %%-, %!
%3JBC3 KLC %-,,( HI#! :;
HI5!
%#,
%,1
HI5
( HI!,
%
%
%"# %!
%1
-
8/11/2019 w Obfuscation
107/120
//
%3JBC3 KLC %%-, .
.6
( HI#6
HI11
",% ' 3JBC3 KLC "#
3JBC3 KLC "#
%"# %5
%1
%"#
%"1
1 %#,
%##6
( HI!
%3JBC3 KLC %-,,
3JBC3 KLC %%-,%
!
%"1 %5
%"# %1
%",
HI.
"#$%" &'% (
3JBC3 KLC %%-,% "#$%" &'% (
%#
% %.,,5
( HI5!
3JBC3 KLC "1 HI#!
%!
%
%
( HI,HI#5
-
8/11/2019 w Obfuscation
108/120
( HI#' 3JBC3 KLC 1
HI#6
%.
HI!
%
%1
( HI5
HI!,
%
(
11 H
-
8/11/2019 w Obfuscation
109/120
H,1:H#6; **!
*-*-
HH,,.. *!*-*!
% HHH#
H,H,H6
% H,H,H#
H#,H,H H#:H#,;
H#1H5
H#1H#1.
H#1H#1!
H#1!!HI!,
H1H,H
H6,:H1; HHH,
*!!+*,*
H#H6HI15 :;% HHH#!
% HH,,
1 ,
" + F
" G & 97 8 F ( "
11 H +-$ *
* " 7 F " % +" " " + ! I
"I N " N B N % "
I
I "
"1 ", 1 '#
1 '
-
8/11/2019 w Obfuscation
110/120
3JBC3 KLC ",
3JBC3 KLC "1 !
( HI.
HI
%"1
%
"1%
HI.
%"1
%#
( HI, :';
%"1
%1.
%",
%3JBC3 KLC %%-,
%"1 -
%1
% %3JBC3 KLC %%-, :;F
",% :;F
( HI
HI,
3JBC3 KLC ",!,616.
( HI1, :*%#!,.51;
3JBC3 KLC "1
( HI,
-
8/11/2019 w Obfuscation
111/120
$
HI,1
%"1
%
"1%
HI,
%"1.
%#
( HI :';
%"1
%1
%"1
%3JBC3 KLC %%-,
% %!,616. :;F%#!,.51
%",
%% ! ",% %#!,.51F
.
%"1
%
"1% "
( HI,1
HI1,
3JBC3 KLC "1
( HI6,
HI11
%"1
%
-
8/11/2019 w Obfuscation
112/120
&
"1%
HI6,
%#
%
"1%
( HI#. :'";
3JBC3 KLC ",!,616.
( HI#, :%#!,.51;
%"1.
%1
%"1. (
%3JBC3 KLC %%-,,
%",
% %% F"
%"1
%1
3JBC3 KLC %%-,% F".
HI#,
( HI11 (
HI#.
(
11 H
-
8/11/2019 w Obfuscation
113/120
)
I
I "
HI
H, 'H ,:H#6; :H#6; H#61 ' H,:H#6; H:H#6;
.. ***
HHI!# :';.. ***!
HI.
H,,:H#6;
*** H:H#6;
*-*
H#,H, **-
H#H,H#, *-*-
H1:H#; .. **-*!
H6H,H1) *!+*,
HH,H#, *!+*,* H:H;
***
% H#H6H :;F) *!+*,
H#,:H#6; :;F *+*,
H!H *+*,
H!:H#6; *-**!
H!HHI. *
1 . ,
F +" "7 9C7 % (% " " + & * F " ( ".
-
8/11/2019 w Obfuscation
114/120
,
11 H +-$ *
* +" " !C " (F *
: I
"I N " N B N % "
I
I "
", ("1 1 '# D0.
3JBC3 KLC 1
1 ' 1"1
1"1
3JBC3 KLC "1"##!,.1 (%15.,!#
3JBC3 KLC ", "1%
( HI#
HI
( HI5
HI#
%1 %"1
.%
(
3JBC3 KLC %%-,% ( %
( HI
HI!
.% D0(FD0F%#!,.51 .
% ",
%",( HI#
HI!
"1% (F:FD0;#
-
8/11/2019 w Obfuscation
115/120
4
.
%"1 %#
%#
% %. (FD0( HI5!
HI,,
%1 "1%
%3JBC3 KLC %%-, % ",
%
' 3JBC3 KLC .
%
% %. FD0 %# :FD0;#
"1%
3JBC3 KLC #
"1%
"1%
%"1( HI.5
HI6
' 3JBC3 KLC #
' 3JBC3 KLC #
( HIHI.#% .%
' 3JBC3 KLC 1
( HI6
HI.5
% %%( HI!
HI.6
( HI,,
HI5!
% %!,616. (FD0F%#!,.51
%#.
( HI!
HI56
%
%5 :FD0;5 %"1
-
8/11/2019 w Obfuscation
116/120
-
%!
%!
% %% (F::FD0;5;' %
%
"1% (F:FD0;5
%",' 3JBC3 KLC .
( HI.6
HI6!
( HI56
HI6
HI
% .%
( HI6
HI!
%#.
( HI!
HI
( HI.# :'; %",
3JBC3 KLC #
' 3JBC3 KLC 1
% .% %1 %3JBC3 KLC %%-,
% %. FD0' %
( HI6!
HI5
%",' 3JBC3 KLC 1
%
",% % .%
#
HI#
"1%
' 3JBC3 KLC 1
' 3JBC3 KLC 1
% .%
-
8/11/2019 w Obfuscation
117/120
/
#
%", #
%# ' ///( HI
11 H
-
8/11/2019 w Obfuscation
118/120
H#H#,,.. **-*!
% H#H#H#
% H#H#H#
H,H,H#
H1H,H# H6:H1;
HH#!
H.H.H,
H.H.H,
% HH6H. FD0 *!+*,*
,6
HI,
H#,H,,
. *!+*,* H5H5H#
1,
HI,6
HH5 :FD0;5% HH,,
% HH,,
HH#!
HH,
% H#HH H#,:H#6; (F:FD0;5
H,H,H5 H!,:H#6; H5H5H#
**
-
8/11/2019 w Obfuscation
119/120
**+ .
( &
! "F 5 * / " " * "
( HI
6 "
M
DD M " E E
%%QQ M " %
#( " " G
)'MM . "
AM'M G. "
D'')MM *. "
''M ' L. "
MM * . "
$ G
'()M JX""I J% ?
D'DMM I 0''M =6* ?
& 80F % "C "
M 9%I
%DM ".
D'M
"M "
-
8/11/2019 w Obfuscation
120/120
9 " " I
" M " "
" G M "F " " D E
M " " "
9% M F F " "F %
"M % I F F "%