4.5以后的版本无法注册了 (8千字)
自4.5版本开始，其Trial version和Licensed version是分开的，即trial版无法成为注册版了，而Licensed version是可以输入注册码的，但是需要注册码
才能下载得到。4.5.3版本用如下两个键来判断是否过期：
HKEY_CURRENT_USER\Software\ToggleSoftware\ToggleMOUSE\Settings\ScrollSensitivity
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\s363
其中s363这个键最初没有。当剩下的天数小于0x1C时它会生成这个键。
相关的代码如下：
* Referenced by a CALL at Addresses:
|:00406978 , :0040E480 , :00413DBC , :00414548 , :00415A4D
|
:004132BC 55 push ebp
:004132BD 8BEC mov ebp, esp
:004132BF 51 push ecx
:004132C0 51 push ecx
:004132C1 A1F84C4400 mov eax, dword ptr [00444CF8]
:004132C6 53 push ebx
:004132C7 56 push esi
:004132C8 8BF1 mov esi, ecx
:004132CA 8945FC mov dword ptr [ebp-04], eax
:004132CD 8945F8 mov dword ptr [ebp-08], eax
:004132D0 8B4508 mov eax, dword ptr [ebp+08]
:004132D3 57 push edi
:004132D4 8906 mov dword ptr [esi], eax
:004132D6 E8E3DC0100 call 00430FBE
:004132DB 8B4004 mov eax, dword ptr [eax+04]
:004132DE BF50160000 mov edi, 00001650
:004132E3 57 push edi
* Possible StringData Ref from Data Obj ->"Settings"
|
:004132E4 BB8C244400 mov ebx, 0044248C
* Possible StringData Ref from Data Obj ->"ScrollSensitivity"
|
:004132E9 68843E4400 push 00443E84
:004132EE 53 push ebx
:004132EF 8BC8 mov ecx, eax
:004132F1 E86ED80100 call 00430B64 //读取安装日期
:004132F6 3BC7 cmp eax, edi
:004132F8 894604 mov dword ptr [esi+04], eax
:004132FB 7523 jne 00413320
:004132FD 6A00 push 00000000
:004132FF E814740000 call 0041A718
:00413304 59 pop ecx
:00413305 894604 mov dword ptr [esi+04], eax
:00413308 E8B1DC0100 call 00430FBE
:0041330D FF7604 push [esi+04]
:00413310 8B4004 mov eax, dword ptr [eax+04]
:00413313 8BC8 mov ecx, eax
* Possible StringData Ref from Data Obj ->"ScrollSensitivity"
|
:00413315 68843E4400 push 00443E84
:0041331A 53 push ebx
:0041331B E830B60100 call 0042E950 //读取安装日期
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004132FB(C)
|
:00413320 8B06 mov eax, dword ptr [esi]
:00413322 69C09F410000 imul eax, 0000419F
:00413328 50 push eax
:00413329 E8B6620000 call 004195E4
:0041332E 99 cdq
:0041332F B910270000 mov ecx, 00002710
:00413334 F7F9 idiv ecx
:00413336 8D45F8 lea eax, dword ptr [ebp-08]
:00413339 52 push edx
* Possible StringData Ref from Data Obj ->"s%u"
|
:0041333A 68803E4400 push 00443E80
:0041333F 50 push eax
:00413340 E8FF260100 call 00425A44 //生成键名"s363"
:00413345 83C40C add esp, 0000000C
:00413348 8D45F8 lea eax, dword ptr [ebp-08]
:0041334B 8BCC mov ecx, esp
:0041334D 50 push eax
:0041334E E8B03F0100 call 00427303
:00413353 51 push ecx
* Possible StringData Ref from Data Obj ->"Software\Microsoft\Windows\CurrentVersion\Explorer"
|
:00413354 BB4C3E4400 mov ebx, 00443E4C
:00413359 8BCC mov ecx, esp
:0041335B 53 push ebx
:0041335C E89B420100 call 004275FC //读取s363的值
:00413361 BF01000080 mov edi, 80000001
:00413366 8D4508 lea eax, dword ptr [ebp+08]
:00413369 57 push edi
:0041336A 50 push eax
:0041336B E893310000 call 00416503
:00413370 83C410 add esp, 00000010
:00413373 8D4DFC lea ecx, dword ptr [ebp-04]
:00413376 50 push eax
:00413377 E8FF420100 call 0042767B
:0041337C 8D4D08 lea ecx, dword ptr [ebp+08]
:0041337F E80A420100 call 0042758E
:00413384 FF75FC push [ebp-04]
:00413387 E853670000 call 00419ADF
:0041338C 85C0 test eax, eax
:0041338E 59 pop ecx
:0041338F 7425 je 004133B6
:00413391 8B4604 mov eax, dword ptr [esi+04]
:00413394 FF75FC push [ebp-04]
:00413397 894508 mov dword ptr [ebp+08], eax
:0041339A E840670000 call 00419ADF
:0041339F 3B4508 cmp eax, dword ptr [ebp+08]
:004133A2 59 pop ecx
:004133A3 7D0B jge 004133B0 //这里一定要跳
:004133A5 FF75FC push [ebp-04]
:004133A8 E832670000 call 00419ADF
:004133AD 59 pop ecx
:004133AE EB03 jmp 004133B3
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004133A3(C)
|
:004133B0 8B4508 mov eax, dword ptr [ebp+08]
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004133AE(U)
|
:004133B3 894604 mov dword ptr [esi+04], eax
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041338F(C)
|
:004133B6 8BCE mov ecx, esi
:004133B8 E86D000000 call 0041342A //计算剩下的天数
:004133BD 83F81C cmp eax, 0000001C
:004133C0 7D4F jge 00413411 //让它跳走
:004133C2 68A0664400 push 004466A0
:004133C7 FF75FC push [ebp-04]
:004133CA E820620000 call 004195EF
:004133CF 59 pop ecx
:004133D0 85C0 test eax, eax
:004133D2 59 pop ecx
:004133D3 753C jne 00413411
:004133D5 FF7604 push [esi+04]
:004133D8 8D45FC lea eax, dword ptr [ebp-04]
* Possible StringData Ref from Data Obj ->"%d"
|
:004133DB 6818254400 push 00442518
:004133E0 50 push eax
:004133E1 E85E260100 call 00425A44 //写入s363
:004133E6 59 pop ecx
:004133E7 8D45FC lea eax, dword ptr [ebp-04]
:004133EA 59 pop ecx
:004133EB 8BCC mov ecx, esp
:004133ED 50 push eax
:004133EE E8103F0100 call 00427303
:004133F3 51 push ecx
:004133F4 8D45F8 lea eax, dword ptr [ebp-08]
:004133F7 8BCC mov ecx, esp
:004133F9 50 push eax
:004133FA E8043F0100 call 00427303
:004133FF 51 push ecx
:00413400 8BCC mov ecx, esp
:00413402 53 push ebx
:00413403 E8F4410100 call 004275FC
:00413408 57 push edi
:00413409 E897310000 call 004165A5
:0041340E 83C410 add esp, 00000010
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004133C0(C), :004133D3(C)
|
:00413411 8D4DF8 lea ecx, dword ptr [ebp-08]
:00413414 E875410100 call 0042758E
:00413419 8D4DFC lea ecx, dword ptr [ebp-04]
:0041341C E86D410100 call 0042758E
:00413421 8BC6 mov eax, esi
:00413423 5F pop edi
:00413424 5E pop esi
:00413425 5B pop ebx
:00413426 C9 leave
:00413427 C20400 ret 0004
