D:\图文处理\录像工具类\BB Flash5.70.3607
005271A9 E8 A0014400 call <jmp.&rtl170.@System@Sysutils@UpperCase$qqrx20Syst>; 这里存放的是时间
005271AE . 8D95 E0FCFFFF lea edx, dword ptr ss:[ebp-0x320]
005271B4 . 52 push edx
005271B5 . BA 582E9B00 mov edx, FlashBac.009B2E58 ; NEVER
005271BA . 8D85 DCFCFFFF lea eax, dword ptr ss:[ebp-0x324]
005271C0 . E8 C3F14300 call FlashBac.00966388
005271C5 . FF85 60F9FFFF inc dword ptr ss:[ebp-0x6A0]
005271CB . 8D95 DCFCFFFF lea edx, dword ptr ss:[ebp-0x324]
005271D1 . 58 pop eax
005271D2 E8 E9F24300 call FlashBac.009664C0 ; 这句是 判断到底是写入never 还是过期时间 nop掉
==============================
00446D0F . /75 1E jnz short FlashBac.00446D2F
00446D11 . |68 C1F97400 push FlashBac.0074F9C1 ; ASCII "BBRegSys::VerifyLicenceSignatureAndOtherParameters"
00446D16 . |68 A3F97400 push FlashBac.0074F9A3 ; ASCII "%s exit, no licence mode node"
00446D1B . |E8 F87E1B00 call FlashBac.005FEC18
00446D20 . |83C4 08 add esp, 0x8
00446D23 . |C685 43F9FFFF>mov byte ptr ss:[ebp-0x6BD], 0x0
00446D2A . |E9 E72E0000 jmp FlashBac.00449C16
00446D2F > \66:C785 54F9F>mov word ptr ss:[ebp-0x6AC], 0x36C
00446D38 . 8D85 F4FCFFFF lea eax, dword ptr ss:[ebp-0x30C]
00446D3E . E8 49D1FBFF call FlashBac.00403E8C
00446D43 . 8BD0 mov edx, eax
00446D45 . FF85 60F9FFFF inc dword ptr ss:[ebp-0x6A0]
00446D4B . 8B45 D8 mov eax, dword ptr ss:[ebp-0x28]
00446D4E . E8 ABD22E00 call <jmp.&rtl170.System::Sysutils::U>
00446D53 . 8D95 F4FCFFFF lea edx, dword ptr ss:[ebp-0x30C]
00446D59 . 52 push edx
00446D5A . BA F4F97400 mov edx, FlashBac.0074F9F4 ; UNICODE "TRIAL"
00446D5F . 8D85 F0FCFFFF lea eax, dword ptr ss:[ebp-0x310]
00446D65 . E8 3EC52E00 call FlashBac.007332A8 ; 此处非常关键