CONTEXT ThrCtx; 
...... 
//Get part of serialNumber 
/* 
eax->VariantBstrByRef 
[eax]+8->Bstr 
*/ 
wchar_t SerialPart[100];// заведомо меньше 99 байт 
memset(SerialPart,0,sizeof(wchar_t)*100); 
DWORD Address,PartSize; 
ReadProcessMemory(hProcess,(LPVOID)(ThrCtx.Eax+8),&Address,4,NULL){ { 
 ; } 
 } 
ReadProcessMemory(hProcess,(LPVOID)(Address-4),&PartSize,4,NULL); 
ReadProcessMemory(hProcess,(LPVOID)Address,SerialPart,PartSize*sizeof 
(wchar_t),NULL); 
								wcscat(Serial,SerialPart); 
								//now skip call remains and set result of TestNe to FALSE 
								ThrCtx.Eip+=6; 
								ThrCtx.Esp+=8; 
								ThrCtx.Eax=0; 
SetThreadContext(hThread,&ThrCtx); 

 
ThrCtx.ContextFlags=CONTEXT_ALL; 
GetThreadContext(hThread,&ThrCtx);