我用W32DASM大概看出一点眉目：注册时“标识号”为自动取硬盘号，注册码输入正确的话就将SN写到注册表的SOFTWARE，同时提示注册成功；注册码不正确则提示出错信息。所以
.....
MOV ECX,DWORD PTR [0062A0A0]
MOV EDX,00605078
MOV EAX,DWORD PTR [EBP-04]
CALL 0059F8D0 ->关键CALL
CMP AL,01 ->比较
JNE 00605036 ->一跳就出现“注册码不正确”的提示。
MOV ECX,DWORD PTR [EBP-04]
...
我试着爆破，将JNE 00605036 改为JMP。就注册成功了。但不能算成功。因为每次进这个软件时它还会读注册表的SN，运算对比发现不正确的话又变为试用版了。得重新注册。哪位兄弟帮忙帮忙。。。
跟进CALL 0059F8D0的一些内容如下:(请帮忙解读一下是什么意思)谢谢!
0167:0059F8D0 55 PUSH EBP
0167:0059F8D1 8BEC MOV EBP,ESP
0167:0059F8D3 51 PUSH ECX
0167:0059F8D4 B904000000 MOV ECX,04
0167:0059F8D9 6A00 PUSH BYTE +00
0167:0059F8DB 6A00 PUSH BYTE +00
0167:0059F8DD 49 DEC ECX
0167:0059F8DE 75F9 JNZ 0059F8D9
0167:0059F8E0 51 PUSH ECX
0167:0059F8E1 874DFC XCHG ECX,[EBP-04]
0167:0059F8E4 53 PUSH EBX
0167:0059F8E5 56 PUSH ESI
0167:0059F8E6 57 PUSH EDI
0167:0059F8E7 894DF4 MOV [EBP-0C],ECX
0167:0059F8EA 8955F8 MOV [EBP-08],EDX
0167:0059F8ED 8945FC MOV [EBP-04],EAX
0167:0059F8F0 8B45FC MOV EAX,[EBP-04]
0167:0059F8F3 E86056E6FF CALL 00404F58
0167:0059F8F8 8B45F8 MOV EAX,[EBP-08]
0167:0059F8FB E85856E6FF CALL 00404F58
0167:0059F900 33C0 XOR EAX,EAX
0167:0059F902 55 PUSH EBP
0167:0059F903 683FFA5900 PUSH DWORD 0059FA3F
0167:0059F908 64FF30 PUSH DWORD [FS:EAX]
0167:0059F90B 648920 MOV [FS:EAX],ESP
0167:0059F90E 8D4DE4 LEA ECX,[EBP-1C]
0167:0059F911 BA58FA5900 MOV EDX,0059FA58
0167:0059F916 8B45FC MOV EAX,[EBP-04]
0167:0059F919 E8BA020000 CALL 0059FBD8
0167:0059F91E 33C0 XOR EAX,EAX
0167:0059F920 55 PUSH EBP
0167:0059F921 6853F95900 PUSH DWORD 0059F953
0167:0059F926 64FF30 PUSH DWORD [FS:EAX]
0167:0059F929 648920 MOV [FS:EAX],ESP
0167:0059F92C 8D4DDC LEA ECX,[EBP-24]
0167:0059F92F BA02000000 MOV EDX,02
0167:0059F934 8B45E4 MOV EAX,[EBP-1C]
0167:0059F937 E87089EAFF CALL 004482AC
0167:0059F93C 8B45DC MOV EAX,[EBP-24]
0167:0059F93F E8FCA0E6FF CALL 00409A40
0167:0059F944 8B55F4 MOV EDX,[EBP-0C]
0167:0059F947 8902 MOV [EDX],EAX
0167:0059F949 33C0 XOR EAX,EAX
0167:0059F94B 5A POP EDX
0167:0059F94C 59 POP ECX
0167:0059F94D 59 POP ECX
0167:0059F94E 648910 MOV [FS:EAX],EDX
0167:0059F951 EB11 JMP SHORT 0059F964
0167:0059F953 E9F447E6FF JMP 0040414C
0167:0059F958 8B45F4 MOV EAX,[EBP-0C]
0167:0059F95B 33D2 XOR EDX,EDX
0167:0059F95D 8910 MOV [EAX],EDX
0167:0059F95F E8144CE6FF CALL 00404578
0167:0059F964 8D45EC LEA EAX,[EBP-14]
0167:0059F967 50 PUSH EAX
0167:0059F968 8B45E4 MOV EAX,[EBP-1C]
0167:0059F96B E80054E6FF CALL 00404D70
0167:0059F970 8BC8 MOV ECX,EAX
0167:0059F972 83E905 SUB ECX,BYTE +05
0167:0059F975 BA03000000 MOV EDX,03
0167:0059F97A 8B45E4 MOV EAX,[EBP-1C]
0167:0059F97D E86A89EAFF CALL 004482EC
0167:0059F982 8D45E8 LEA EAX,[EBP-18]
0167:0059F985 50 PUSH EAX
0167:0059F986 8B45E4 MOV EAX,[EBP-1C]
0167:0059F989 E8E253E6FF CALL 00404D70
0167:0059F98E 8BD0 MOV EDX,EAX
0167:0059F990 83EA02 SUB EDX,BYTE +02
0167:0059F993 B902000000 MOV ECX,02
0167:0059F998 8B45E4 MOV EAX,[EBP-1C]
0167:0059F99B E84C89EAFF CALL 004482EC
0167:0059F9A0 8D4DE0 LEA ECX,[EBP-20]
0167:0059F9A3 BA01000000 MOV EDX,01
0167:0059F9A8 8B45E4 MOV EAX,[EBP-1C]
0167:0059F9AB E81889EAFF CALL 004482C8
0167:0059F9B0 8B45E0 MOV EAX,[EBP-20]
0167:0059F9B3 BA6CFA5900 MOV EDX,0059FA6C
0167:0059F9B8 E8F754E6FF CALL 00404EB4
0167:0059F9BD 752B JNZ 0059F9EA
0167:0059F9BF E8DCFDFFFF CALL `WINPM!HDSerialNumRead`
0167:0059F9C4 8BD0 MOV EDX,EAX
0167:0059F9C6 8D45F0 LEA EAX,[EBP-10]
0167:0059F9C9 E8DA52E6FF CALL 00404CA8
0167:0059F9CE E8CDFDFFFF CALL `WINPM!HDSerialNumRead`
0167:0059F9D3 8BD0 MOV EDX,EAX
0167:0059F9D5 8D45D8 LEA EAX,[EBP-28]
0167:0059F9D8 E8CB52E6FF CALL 00404CA8
0167:0059F9DD 8B45D8 MOV EAX,[EBP-28]
0167:0059F9E0 8D55F0 LEA EDX,[EBP-10]
0167:0059F9E3 E8BC020000 CALL 0059FCA4
0167:0059F9E8 EB0D JMP SHORT 0059F9F7
0167:0059F9EA 8D55F0 LEA EDX,[EBP-10]
0167:0059F9ED B878FA5900 MOV EAX,0059FA78
0167:0059F9F2 E885000000 CALL 0059FA7C
0167:0059F9F7 8B45F0 MOV EAX,[EBP-10]
0167:0059F9FA 8B55EC MOV EDX,[EBP-14]
0167:0059F9FD E8B254E6FF CALL 00404EB4
0167:0059FA02 7511 JNZ 0059FA15
0167:0059FA04 8B45F8 MOV EAX,[EBP-08]
0167:0059FA07 8B55E8 MOV EDX,[EBP-18]
0167:0059FA0A E8A554E6FF CALL 00404EB4
0167:0059FA0F 7504 JNZ 0059FA15
0167:0059FA11 B301 MOV BL,01
0167:0059FA13 EB02 JMP SHORT 0059FA17
0167:0059FA15 33DB XOR EBX,EBX
0167:0059FA17 33C0 XOR EAX,EAX
0167:0059FA19 5A POP EDX
0167:0059FA1A 59 POP ECX
0167:0059FA1B 59 POP ECX
0167:0059FA1C 648910 MOV [FS:EAX],EDX
0167:0059FA1F 6846FA5900 PUSH DWORD 0059FA46
0167:0059FA24 8D45D8 LEA EAX,[EBP-28]
0167:0059FA27 BA07000000 MOV EDX,07
0167:0059FA2C E8AB50E6FF CALL 00404ADC
0167:0059FA31 8D45F8 LEA EAX,[EBP-08]
0167:0059FA34 BA02000000 MOV EDX,02
0167:0059FA39 E89E50E6FF CALL 00404ADC
......
......
原软件下载：
http://www.ustar.com.cn/down/增强版.EXE
