Git clone both repositories to my kali machine.
git clone https://github.com/extremecoders-re/pyinstxtractor.git
git clone https://github.com/zrax/pycdc.git

Run PyInstaller Extractor to create the pyc file:
python ./pyinstxtractor.py FreeSki.exe

Install cmake:

sudo apt install cmake
cmake .
make

Copy the extracted folder into the /pycdc folder

Extract the code: ./pycdas ~/pycdc/FreeSki.exe_extracted/FreeSki.pyc

Free Ski Source Code

Flag Decoding Process (in SetFlag function):

1. Product Calculation: Takes the 5 collected treasure values and combines them:

python
product = 0
for treasure_val in treasure_list:
product = (product << 8) ^ treasure_val


2. Random Seeding: Uses this product as a seed:

python
random.seed(product)


3. XOR Decryption: Each mountain has an encoded_flag (bytes). The flag is decoded by XORing each byte with random values generated from the seeded RNG:

python
for i in range(len(mountain.encoded_flag)):
r = random.randint(0, 255)
decoded.append(chr(mountain.encoded_flag[i] ^ r))

There are 7 mountains with encoded flags:

• Mount Snow, Aspen, Whistler, Mount Baker, Mount Norquay, Mount Erciyes, Dragonmount

1. Treasure loacations are deterministically generated using random.seed(binascii.crc32(mountain_name)) in GetTreasureLocations()
2. Each treasure's value is (elevation * mountain_width) + horizontal_offset
3. Compute the product using XOR the 5 treasure values together with bit shifts
4. Use that product to seed random and XOR-decode the flag

Interesting strings:
"find all the lost bears. don't drill into a rock. Win game."
Combined with the victory message:
"You win! Drill Baby is reunited with all its bears."

The key insight is that the game's "randomness" is actually deterministic - everything is seeded based on the mountain name, so you can predict exactly where treasures will spawn without playing the game!

The script solvefreeski.py does the following:

1. Recreates the treasure generation algorithm - Uses the same seeding method (CRC32 of mountain name) to deterministically find where all 5 treasures are located on each mountain
2. Calculates treasure values - Each treasure's value is (elevation × 1000) + horizontal_offset
3. Computes the decryption key - XORs all 5 treasure values together with bit shifts to create a product
4. Decodes the flag - Seeds Python's random number generator with that product, then XORs each byte of the encoded flag with the generated random values

Script: Solve Free Ski

Answer: frosty_yet_predictably_random