OD载入,运行
7C812AEB 5E pop esi
7C812AEC C9 leave
7C812AED C2 1000 retn 10
7C812AF0 85FF test edi, edi
7C812AF2 ^ 0F8E 3693FFFF jle 7C80BE2E
7C812AF8 8B55 FC mov edx, dword ptr [ebp-4]
7C812AFB 8955 0C mov dword ptr [ebp+C], edx
7C812AFE 0FB716 movzx edx, word ptr [esi]
7C812B01 8B7D F8 mov edi, dword ptr [ebp-8]
7C812B04 8A143A mov dl, byte ptr [edx+edi]
7C812B07 8811 mov byte ptr [ecx], dl
7C812B09 8B78 0C mov edi, dword ptr [eax+C]
7C812B0C 0FB6D2 movzx edx, dl
7C812B0F 66:8B1457 mov dx, word ptr [edi+edx*2]
7C812B13 66:3B16 cmp dx, word ptr [esi]
7C812B16 0F85 888B0300 jnz 7C84B6A4
7C812B1C 8B50 08 mov edx, dword ptr [eax+8]
7C812B1F 66:8B5A 04 mov bx, word ptr [edx+4]
7C812B23 3819 cmp byte ptr [ecx], bl
7C812B25 0F84 868B0300 je 7C84B6B1
7C812B2B 46 inc esi
7C812B2C 46 inc esi
7C812B2D 41 inc ecx
7C812B2E FF4D 0C dec dword ptr [ebp+C]
7C812B31 ^ 75 CB jnz short 7C812AFE
7C812B33 ^ E9 F692FFFF jmp 7C80BE2E
OD初步分析是伪装,检测不出来,大家来看看吧
[课程]Android-CTF解题方法汇总!