这段时间太忙，没时间参加本次比赛，提交签到题答案证明我来过了，祝愿看雪公司茁壮发展！

00401854  |> \68 80354000   PUSH hello.00403580                      ; /s2 = "WelcomeToKanXueCtf2017"
00401859  |.  8B55 F8       MOV EDX,DWORD PTR SS:[EBP-0x8]           ; |
0040185C  |.  52            PUSH EDX                                 ; |s1
0040185D  |.  E8 2E060000   CALL <JMP.&MSVCRT.strcmp>                ; \strcmp

int __thiscall sub_4017F0(CWnd *this)
{
  struct CString *v1; // ST08_4
  CWnd *v2; // eax
  int v3; // eax
  char *Str; // [esp+4Ch] [ebp-8h]
  CWnd *v6; // [esp+50h] [ebp-4h]

  v6 = this;
  v1 = (CWnd *)((char *)this + 100);
  v2 = CWnd::GetDlgItem(this, 1002);
  CWnd::GetWindowTextA(v2, v1);
  v3 = sub_4018D0((char *)v6 + 100);
  Str = CString::GetBuffer((CWnd *)((char *)v6 + 100), v3);
  if ( !strlen(Str) )
    return CWnd::MessageBoxA(v6, &byte_403598, 0, 0);
  if ( !strcmp(Str, "WelcomeToKanXueCtf2017") )
    return pass_401770();
  return fail_4017B0();
}

明码比较，答案：“WelcomeToKanXueCtf2017”

[培训]《安卓高级研修班(网课)》月薪三万计划，掌握调试、分析还原ollvm、vmp的方法，定制art虚拟机自动化脱壳的方法