硕士生
 
- 金币
- 1497
- 好评
- 3
- 信誉
- 183
|
如果想跳过这个卡密应该怎么做啊,可能我的方法笨,
思路是直接搜login方法名,可以看到卡密那里,
但是真正验证逻辑在so,
- ulong sym.Java_io_github_gasdf_MainActivity_login(ulong arg3, int64_t *arg1)
- {
- int64_t iVar1;
- ulong uVar2;
- int64_t *piVar3;
- uchar *puStack120;
- ulong uStack112;
- uchar auStack104 [8];
- uchar auStack96 [8];
- uchar auStack88 [8];
- uchar auStack80 [8];
- ulong uStack72;
- int64_t iStack56;
-
- iVar1 = cRead_8(tpidr_el0);
- uStack72 = *(iVar1 + 0x28);
- uVar2 = (*(*(*0xda2060 + -0x797bcc3b442cb41c) + 0x5ba7f48520b1bb58))(arg1, arg3, 0);
- puStack120 = auStack96;
- (*(*(*0xda2060 + -0x797bcc3b442cb434) + 0x5ba7f48520b1bb58))(auStack96);
- uStack112 = uVar2;
- fcn.006d7360(auStack104, &puStack120);
- fcn.00840c74(auStack96);
- (**(*arg1 + 0x550))(arg1, arg3, uVar2);
- uVar2 = (*(*(*0xda2060 + -0x797bcc3b442cb43c) + 0x5ba7f48520b1bb58))(auStack80);
- uVar2 = (**(*arg1 + 0x538))(arg1, uVar2);
- (*(*(*0xda2060 + -0x797bcc3b442cb424) + 0x5ba7f48520b1bb58))(auStack88);
- (*(*(*0xda2060 + -0x797bcc3b442cb42c) + 0x5ba7f48520b1bb58))(auStack80);
- if (*(iVar1 + 0x28) == iStack56) {
- return uVar2;
- }
- piVar3 = sym.imp.__stack_chk_fail();
- // WARNING: Could not recover jumptable at 0x006d735c. Too many branches
- // WARNING: Treating indirect jump as call
- uVar2 = (**(*piVar3 + 0x548))();
- return uVar2;
- }
- 在so层的我只能读懂一部分,没找到下手的地方,这算是混淆么?
- 如果想过掉这个卡密,应该如何去操作,请大佬出个教程或者指点下
复制代码
↓↓↓
链接链接链接
|
本帖子中包含更多资源
您需要 登录 才可以下载或查看,没有账号?立即注册
x
|