004022FA . 8D4424 20 lea eax,dword ptr ss:[esp+0x20]
004022FE . 64:A3 0000000>mov dword ptr fs:[0],eax
00402304 . 8BF1 mov esi,ecx
00402306 . 6A 01 push 0x1
00402308 . E8 D1670000 call 注册水印.00408ADE
0040230D . 8B46 7C mov eax,dword ptr ds:[esi+0x7C]
00402310 . 8B40 F4 mov eax,dword ptr ds:[eax-0xC]
00402313 . 85C0 test eax,eax
00402315 . 7F 1F jg short 注册水印.00402336
00402317 . 6A 00 push 0x0
00402319 . 6A 10 push 0x10
0040231B . 68 4C5A4300 push 注册水印.00435A4C ; 无效的水印加密授权文件!
00402320 . E8 682E0000 call 注册水印.0040518D
00402325 . 8B4C24 20 mov ecx,dword ptr ss:[esp+0x20] ; uxtheme.73AF18B2
00402329 . 64:890D 00000>mov dword ptr fs:[0],ecx
00402330 . 59 pop ecx ; user32.76EE66D9
00402331 . 5E pop esi ; user32.76EE66D9
00402332 . 83C4 24 add esp,0x24
00402335 . C3 retn
00402336 > 68 3C5A4300 push 注册水印.00435A3C ; \Data\upda.swk
0040233B . 8D4C24 0C lea ecx,dword ptr ss:[esp+0xC]
0040233F . 68 2C494400 push 注册水印.0044492C
00402344 . 51 push ecx
00402345 . E8 B6FEFFFF call 注册水印.00402200
0040234A . 83C4 0C add esp,0xC
0040234D . 8D4C24 0C lea ecx,dword ptr ss:[esp+0xC]
00402351 . C74424 28 000>mov dword ptr ss:[esp+0x28],0x0
00402359 . E8 58BB0000 call 注册水印.0040DEB6
0040235E . 8B5424 08 mov edx,dword ptr ss:[esp+0x8]
00402362 . 6A 00 push 0x0
00402364 . 68 01100000 push 0x1001
00402369 . 52 push edx ; ntdll.76DB7001
0040236A . 8D4C24 18 lea ecx,dword ptr ss:[esp+0x18]
0040236E . C64424 34 01 mov byte ptr ss:[esp+0x34],0x1
00402373 . E8 54BB0000 call 注册水印.0040DECC
00402378 . 85C0 test eax,eax
0040237A . 8D4C24 0C lea ecx,dword ptr ss:[esp+0xC]
0040237E . 74 30 je short 注册水印.004023B0
只有这个不填的时候显示无效，可以找到这行代码。
[培训]《安卓高级研修班(网课)》月薪三万计划，掌握调试、分析还原ollvm、vmp的方法，定制art虚拟机自动化脱壳的方法
