PDA

View Full Version : time limit how to break


flamer
June 26th, 2016, 02:32
Hey guys,

I have a piece of software I'm trying to break. It has a 20 minute time limit on running, there is a window that you can enter a username, email address and reg key (its a window not a popup), however it gives no message saying whether the key was valid or invalid, its quite stupid actually once 20 minutes is up, it just pops up the same register window and stops the program from running, you can then close and reopen it and the 20 min starts over again if the reg key is accepted, next time you open the software the register option is removed from the context menu (according to the manual).

I would just like to find the time limit and bypass it or bypass the regkey check, anyone have any suggestions?

I have found by stepping through the program line by line some reference to the "regkey" acsii value (the value I entered last time the program ran), it does some moving and adding then a test, I changed the je to a jne however it did not make a difference.

can anyone give me some suggestions or can I pm someone the code to have a look? Is there anyway I can find where the 20 minute value is set in the code?

thanks!

Kayaker
June 26th, 2016, 22:32
SetTimer (+ WM_TIMER message), GetTickCount, GetSystemTime, GetLocalTime, and more, all could be used in calculating the elapsed time.
You might be able to find the hex value of 20 minutes, likely as milliseconds, in a comparison somewhere in the code.

flamer
June 27th, 2016, 00:16
Thanks I will have a look for these functions.

I have spent the day trying to serial fish instead, however with no error messages or confirmation messages its rather tricky, as there is no 'nag' screens just this time limit. Do you think the easier option for me as a beginner is to try and bypass the time limit or to try and find a valid serial? It would appear to use the name and email address to generate a 9 digit serial number but I have not been able to find any valid string to compare against yet.

flamer
June 28th, 2016, 20:35
Just FYI I managed to break it using serial fishing method. The problem I had was the regkey had to be the correct length to get ti to generate the valid key. I was testing with a 9 digit code, when I instead used a 10 digit code I then stepped through about 200 lines and found something that looked like a serial key tried it and it worked.