lea eax, [ebp+phkResult]
.text:00412A29 push eax ; phkResult
.text:00412A2A push 0F003Fh ; samDesired
.text:00412A2F push 0 ; ulOptions
.text:00412A31 mov ecx, [ebp+lpSubKey]
.text:00412A34 push ecx ; lpSubKey
.text:00412A35 mov edx, [ebp+hKey]
.text:00412A38 push edx ; hKey
.text:00412A39 call ds:RegOpenKeyExA
.text:00412A3F test eax, eax
.text:00412A41 jz short loc_412A57
.text:00412A41
.text:00412A43 mov eax, [ebp+phkResult]
.text:00412A49 push eax ; hKey
.text:00412A4A call ds:RegCloseKey
.text:00412A50 xor eax, eax
.text:00412A52 jmp loc_412B12
.text:00412A52
.text:00412A57 ; ---------------------------------------------------------------------------
.text:00412A57
.text:00412A57 loc_412A57: ; CODE XREF: sub_412A10+31j
.text:00412A57 ; sub_412A10+D6j
.text:00412A57
mov ecx, 1 这句代码什么做用呢
.text:00412A5C test ecx, ecx.text:00412A5E jz loc_412AEB
.text:00412A5E
.text:00412A64 mov [ebp+cbName], 80h
.text:00412A6B push 0 ; lpftLastWriteTime
.text:00412A6D push 0 ; lpcbClass
.text:00412A6F push 0 ; lpClass
.text:00412A71 push 0 ; lpReserved
.text:00412A73 lea edx, [ebp+cbName]
.text:00412A76 push edx ; lpcbName
.text:00412A77 lea eax, [ebp+Name]
.text:00412A7D push eax ; lpName
.text:00412A7E push 0 ; dwIndex
.text:00412A80 mov ecx, [ebp+phkResult]
.text:00412A86 push ecx ; hKey
.text:00412A87 call ds:RegEnumKeyExA
[课程]FART 脱壳王！加量不加价！FART作者讲授！
