# formats

**Get last available place in the finals**
- [x] DEFCON 2021
- [x] DEFCON 2022
- [ ] DEFCON 2023

--

1. [x] Crystal "easy"
- done! :smile:
2. [x] Crystal "hard"
- solved (it was only x86)
3. [ ] Seq of bitwise ORs
- Somewhat solved for ARM, MIPS and maybe x86_64 (very hacky angr probably missing a lot)
- @null was working on this but went to sleep
- appears to work with angr and s390 now! (sunday 19:00)
- [x] PPC32 252~ solves
- [x] PPC64 130~ solves quite low hmm..
- [x] MIPS 400~ solves
- [ ] MIPS64 (WIP)
- [x] ARM32 380~
- [ ] ARM64
4. [x] Mat mult
- solved, look for [CUNTS.py](https://cdn.discordapp.com/attachments/980135580853743616/980390555110481960/CUNTS.py)
- you can spot the mat mul format by looking at the bytes between the "Congrats" and the "libc" string in .rotdata; they should contain more or less 72 random bytesz
5. [ ] md5 bullshit
- 500~ done with busdma script (only x86)
- @jan is working on this
- = strings => it's md5
- @smolene is working on this
- DONE for 1 --> now writing generic script
- OK for motorola, x86-64 and Alpha AND PE windows binaries
- 2971 binaries solved
- some fail because my string extraction is janky --> i'll look into that
11. [ ] 3 checks with mults and finally xor
- angr solution solved for ppc64 some if not all of the x86_64 also done

# archs

16 in total, all binaries can be run with [run.py](https://cdn.discordapp.com/attachments/980135580853743616/980431338807124028/run.py)

| how many binaries | arch | formats (number, which ones (if known)) |
| ----------------- | ---------------------------- | --------------------------------------- |
| 1493 | 64-bit PowerPC or cisco 7500 | mat_mul |
| 1453 | Alpha (unofficial) | mat_mul |
| 1445 | ARM | mat_mul |
| 1462 | ARM aarch64 | mat_mul |
| 1480 | x86_64 for MS Windows | |
| 1433 | IBM S/390 | mat_mul |
| ???? | MIPS32 LE | mat_mul |
| ???? | MIPS32 BE | mat_mul |
| 1504 | MIPS64 | |
| 1467 | Motorola m68k | |
| 1545 | PA-RISC | mat_mul |
| 1412 | PowerPC or cisco 4500 | mat_mul |
| 1479 | Renesas SH | |
| 1479 | SPARC V9 | mat_mul |
| 1519 | UCB RISC-V | mat_mul, or, mult-xor, md5 |
| 2318 | x86-64 | crystal easy, crystal hard |

{
    "mips64": {
        "solved": 1368,
        "total": 1504
    },
    "em_s390": {
        "solved": 1196,
        "total": 1433
    },
    "mips": {
        "solved": 2539,
        "total": 2826
    },
    "powerpc64": {
        "solved": 916,
        "total": 1493
    },
    "sparc64": {
        "solved": 600,
        "total": 1479
    },
    "em_parisc": {
        "solved": 622,
        "total": 1545
    },
    "36902": {
        "solved": 590,
        "total": 1453
    },
    "pe": {
        "solved": 1474,
        "total": 1480
    },
    "em_68k": {
        "solved": 244,
        "total": 1467
    },
    "powerpc": {
        "solved": 809,
        "total": 1412
    },
    "aarch64": {
        "solved": 1330,
        "total": 1462
    },
    "em_sh": {
        "solved": 559,
        "total": 1479
    },
    "em_riscv": {
        "solved": 931,
        "total": 1519
    },
    "amd64": {
        "solved": 2313,
        "total": 2318
    },
    "arm": {
        "solved": 1154,
        "total": 1445
    }
}
# actual solves: 16645/24315 68.4556857906642

# NCuts results

collection (6377/24315) [total.pickle](https://discord.com/channels/710898833730830457/980135580853743616/980393381358370886)

# [0] 18435766412179950150
# [1] 5279907617450229761
# [2] 4828100688804315392
# [3] 1693269482603526
# [4] 433759566363494410
# [5] 1155747288296592398
# [6] None
# [7] 1882263976186091028
# [8] 2318263187421274907
# [9] 2532754898196961567
# [10] 3256152181218551849
# [11] 2954320674748958471
# [12] 1371920113376692743
# [13] 2889646412510275624
# [14] 2893606913523066920
# [15] 2893606913523066920
# [16] 2893606913523066920
# [17] 2893606913523066920
# [18] 2893606913523066920
# [19] 2893606913523122114
# [20] 4793881569034243
# [21] 81627752121303825
# [22] 144049217831174146
# [23] 216455360897089536
# [24] 515
# [25] 73188991604096964
# [26] 72340172838082816
# [27] 72057594037927936
# [28] 4295099140
# [29] 284825065553669
# [30] 14555915470906789890
# [31] 7124122581678525618
# [32] 5094745195574842198
# [33] 13999053011934435496
# [34] 625320263342768742
# [35] 9836551900177576674
# [36] 5028571182472354269
# [37] 7008313243948398693
# [38] 17468432110496834992
# [39] 11193286121814564646
# [40] 2101082141321510946
# [41] 11642158242818344997
# [42] 16596221075588400073
# [43] 11110950524815214644
# [44] 5577428249926541427
# [45] 8816869006762089927
# [46] 13079633475350746473
# [47] 5518189873410994260
# [48] 121034575865492588
# [49] 12649362606616856017
# [50] 11617051268362558748
# [51] 1588645542994950791
# [52] 6533218633105711783
# [53] 13160388977593326486
# [54] None
# [55] 9848413339312778155
# [56] 17344501832160941940
# [57] 8427444431978810436
# [58] None
# [59] 6951563120823787965
# [60] 16012212867549094176
# [61] 6964705343148530407
# [62] 9701956738565426474
# [63] 5229487096549179504
# [64] 10630196828400936126
# [65] 3181447440323701590
# [66] 4852359497451212133
# [67] 1178661740826730867
# [68] 15543980910993436830
# [69] 2552246972403321185
# [70] 12858764985417290115
# [71] 9938575079736974486
# [72] 6210864964258908955
# [73] 8683053623390053315
# [74] 4454363852064757782
# [75] 8295236359661191656
# [76] 3589601801136181395
# [77] 15047965975768846641
# [78] 16312106839590781789
# [79] 6401308097001691624
countdown: 5