0042F6C0 /$ 6A FF PUSH -1
0042F6C2 |. 64:A1 0000000>MOV EAX,DWORD PTR FS:[0]
0042F6C8 |. 68 562A4900 PUSH HDPLAY入.00492A56
0042F6CD |. 50 PUSH EAX
0042F6CE |. B8 48100000 MOV EAX,1048
0042F6D3 |. 64:8925 00000>MOV DWORD PTR FS:[0],ESP
0042F6DA |. E8 41CF0500 CALL HDPLAY入.0048C620
0042F6DF |. A1 A8E84B00 MOV EAX,DWORD PTR DS:[4BE8A8]
0042F6E4 |. 53 PUSH EBX
0042F6E5 |. 33DB XOR EBX,EBX
0042F6E7 |. 55 PUSH EBP
0042F6E8 |. 56 PUSH ESI
0042F6E9 |. 3BC3 CMP EAX,EBX
0042F6EB |. 57 PUSH EDI
0042F6EC |. 8BF1 MOV ESI,ECX
0042F6EE |. 74 0A JE SHORT HDPLAY入.0042F6FA //
NOP后,软件就提示注册成功了。求解前面代码是检测什么的。
0042F6F0 |. B8 01000000 MOV EAX,1
0042F6F5 |. E9 5A010000 JMP HDPLAY入.0042F854
CALL
0048C620 /$ 51 PUSH ECX
0048C621 |. 3D 00100000 CMP EAX,1000
0048C626 |. 8D4C24 08 LEA ECX,DWORD PTR SS:[ESP+8]
0048C62A |. 72 14 JB SHORT HDPLAY入.0048C640
0048C62C |> 81E9 00100000 /SUB ECX,1000
0048C632 |. 2D 00100000 |SUB EAX,1000
0048C637 |. 8501 |TEST DWORD PTR DS:[ECX],EAX
0048C639 |. 3D 00100000 |CMP EAX,1000
0048C63E |.^ 73 EC \JNB SHORT HDPLAY入.0048C62C
0048C640 |> 2BC8 SUB ECX,EAX
0048C642 |. 8BC4 MOV EAX,ESP
0048C644 |. 8501 TEST DWORD PTR DS:[ECX],EAX
0048C646 |. 8BE1 MOV ESP,ECX
0048C648 |. 8B08 MOV ECX,DWORD PTR DS:[EAX]
0048C64A |. 8B40 04 MOV EAX,DWORD PTR DS:[EAX+4]
0048C64D |. 50 PUSH EAX
0048C64E \. C3 RETN
[课程]FART 脱壳王!加量不加价!FART作者讲授!