simple CRC (2千字)
015F:00430CB7 CALL CS:[KERNEL32!GetModuleFileNameA]015F:00430CBE MOV EDX,80000000
015F:00430CC3 LEA EAX,[EBP-0108]
015F:00430CC9 CALL 004355B1 //CreateFileA( )
015F:00430CCE MOV ECX,EAX
015F:00430CD0 CMP EAX,-01
015F:00430CD3 JNZ 00430CDF
015F:00430CD5 MOV EAX,FFFFFFFB
015F:00430CDA JMP 00430DD3
015F:00430CDF MOV EAX,[0044D214]
015F:00430CE4 CALL 00436690
015F:00430CE9 MOV [00453840],EAX
015F:00430CEE TEST EAX,EAX
015F:00430CF0 JNZ 00430CFC
015F:00430CF2 MOV EAX,FFFFFFFE
015F:00430CF7 JMP 00430DD3
015F:00430CFC MOV EBX,[0044D214]
015F:00430D02 MOV EDX,EAX
015F:00430D04 MOV EAX,ECX
015F:00430D06 CALL 00435633 //ReadFile( )
015F:00430D0B CMP EAX,[0044D214] //检查文件长度
015F:00430D11 JZ 00430D1D
015F:00430D13 MOV EAX,FFFFFFFA
015F:00430D18 JMP 00430DD3
015F:00430D1D MOV EAX,ECX
015F:00430D1F CALL 004355FE
015F:00430D24 MOV EAX,[00453840]
015F:00430D29 ADD EAX,[0044D218]
015F:00430D2F MOV DWORD PTR [EAX],00000000
015F:00430D35 MOV EBX,FFFFFFFF
015F:00430D3A MOV EDX,[0044D214]
015F:00430D40 MOV EAX,[00453840]
015F:00430D45 CALL 0042B3A0 //calculate CRC
015F:00430D4A CMP EAX,[0044D21C] //compare CRC
015F:00430D50 JZ 00430D6E //只需把这里改成jmp即可
015F:00430D52 PUSH 30
015F:00430D54 PUSH 0044D230
015F:00430D59 PUSH 0044AEC0
015F:00430D5E PUSH 00
015F:00430D60 CALL CS:[USER32!MessageBoxA]
015F:00430D67 MOV EAX,FFFFFFFF
015F:00430D6C JMP 00430DD3
015F:00430D6E MOV EAX,[00453840]
015F:00430D73 XOR ECX,ECX
015F:00430D75 MOV ESI,EAX
015F:00430D77 ADD EAX,[0044D218]
015F:00430D7D ADD ESI,00405504
015F:00430D83 SUB EAX,00000108
015F:00430D88 SUB ESI,00400A80
015F:00430D8E MOV [EBP-04],EAX
015F:00430D91 MOV EAX,FFFFFFFF
015F:00430D96 JMP 00430DB8
