ReaL|sTy
December 4th, 2002, 20:30
you asked how new ASPR time limit algo. works.. easier than before maybe you know that previous ASPR versions reads the last time accessed from some registry key made in:
[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\.....
with different values depending of your WIn OS "product ID" if you make the value common in any win OS(win9x,Win Me,XP,2k,NT) then key for XX program will work for any of them. the idea is make it generic so if you make a loader for the registry which it deletes the key or value then the program won't never expire
for previos ASPR versions the key is made reading this registry values:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion]
"LicensingInfo"=" "
"ProductId"=" "
"ServicePackNumber"=" "
"SubVersionNumber"=" "
the first key it reads is SubVersionNumber if the key is not present it will read ServicePackNumber or maybe the other which i don't remember then depending of the value, it mades (example):
[HKEY_CLASSES_ROOT\CLSID\{AA77D79D-D672-783D-D199-B1DA75B391CD}]
[HKEY_CLASSES_ROOT\CLSID\{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}]
if you make the values "ServicePackNumber"=" " <<----
"SubVersionNumber"=" " similar for each win OS the CLSID key/value will be the same
of course for each aspr packet app. the clsid key will be different even if your WINDOWs ID is the same
some people thought the key is made because aspr protected app. reads some other infomatin like the HD key. that's wrong.
now is easier than before aspr time limited app. works by adding the registry key:
HKEY_CURRENT_USER\SOFTWARE\ASProtect\Data you all know that
first it reads the String Value "Key"="" if not present then it goes to check time limit, this is in case the program is protected with the Encription registration method aspr uses
if you check with reg monitor you note that dosen't read other time limit related key but actually it does ,the fact is that it has two checks.
it does the first check on: HKEY_CURRENT_USER\SOFTWARE\ASProtect\Data
it writes there the first time that you ran the program with some hex values (encrypted values)
if you hit your clock forward you'll note that program is still expired or becomes expired
if you put the normal/actual date back program is still good and working only if you delete the key ........ASProtect\Data again because after expiration it modify the hex values to tell the program the next time you try to run it it was expired , will read the key and will continue expired
have you tried to delete that key open reg monitor and run the program again to see what happend then?
this is what it does ramdonly read for many keys on:
[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\...
this happend if the first check: HKEY_CURRENT_USER\SOFTWARE\ASProtect\Data is not present then i goes/jump for the second time limit check
which is in: [HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\
is hard to find because it reads too fast and reads there many keys not for the program. if you're advanced win user you can delete the complete Key CLSID also delete ASProtect\Data run the program again and you'll see how beutiful the program takes some delay then made again ASProtect\Data and a key (example) in: [HKEY_CLASSES_ROOT\CLSID\{AA77D79D-D672-783D-D199-B1DA75B391CD}] with the actual date
this could be generic for each win os on different aspr packet programs if you take the current date hex values: HKEY_CURRENT_USER\SOFTWARE\ASProtect\Data the same key of CLSID and you could use some time faker or something and you app. won't expire and you can use for it any win OS. if you took the same registry keys/values and make some kind of time limit loader that gives the date when the keys were working. all is done! i decided to give this information because sometimes is easier than you think and never noone spoke about this (i think). hope this help many of you
my native language is not english if someone did not exaclty understood something you can PM me if desire.about deleting CLSID complete key.. becarefull because you win could crash. only do it as i said if you're experienced and you know how to fix/recover registry backups .i told this so everyone could see how this new aspr time limit check works in case you can't find the right CLSID key note that it also generates the CLSID keys ramdonly, if you delete it and you delete ...ASProtect\Data it will generate another CLSID key different each time you delete it. i'll hope i'm not breaking any rules on here with this information. please if something is wrong forgive me and moderators please edit or delete this reply.
). *Hint* Look for ASprotect in the regmon trail and you can't miss it.