简单！！主要注意FLAG! (854字)

反汇编后找到“恭喜注册”，看到以48a1a8位判断对象，下bpm 48a1a8
来几次后到这里：
:00401D05 C685C8FEFFFF00          mov byte ptr [ebp+FFFFFEC8], 00
:00401D0C C605A8A1480001          mov byte ptr [0048A1A8], 01
:00401D13 C745F801000000          mov [ebp-08], 00000001
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401D4A(C)
|
:00401D1A 8B45F8                  mov eax, dword ptr [ebp-08]
:00401D1D 8A8405C1FEFFFF          mov al, byte ptr [ebp+eax-0000013F]    //在此D ebp+eax-13f 可看到注册码（不判断长度）
:00401D24 8B55F8                  mov edx, dword ptr [ebp-08]
:00401D27 3A841526FFFFFF          cmp al, byte ptr [ebp+edx-000000DA]
:00401D2E 7413                    je 00401D43
:00401D30 C605A8A1480000          mov byte ptr [0048A1A8], 00
:00401D37 C60512A3480000          mov byte ptr [0048A312], 00