ksbrace
July 16th, 2004, 14:26
Hello,
I am relatively new to Rev. Eng. I have done several tutorials which always make it look short and simple. It probably will get the way for me, but I'm stuck on a little personal project. Anyway, I downloaded a target with a 30 day timetrial. Then I changed my clock to go beyond the 30 days and I get the message:
Your trial period has expired , I loaded up W32DASM and found the area:
* Referenced by a CALL at Address:
|:0042A0C1
|
:004295C9 B86C0D4600 mov eax, 00460D6C
:004295CE E8DD9D0100 call 004433B0
:004295D3 51 push ecx
:004295D4 51 push ecx
:004295D5 53 push ebx
:004295D6 56 push esi
:004295D7 8BF1 mov esi, ecx
:004295D9 33DB xor ebx, ebx
:004295DB 57 push edi
:004295DC 895E50 mov dword ptr [esi+50], ebx
:004295DF A160D04700 mov eax, dword ptr [0047D060]
:004295E4 8945F0 mov dword ptr [ebp-10], eax
:004295E7 395E60 cmp dword ptr [esi+60], ebx
:004295EA 895DFC mov dword ptr [ebp-04], ebx
:004295ED 7E30 jle 0042961F
:004295EF 8945EC mov dword ptr [ebp-14], eax
* Possible Reference to String Resource ID=00189: "Your trial period expires in %d days."
|
:004295F2 68BD000000 push 000000BD
:004295F7 8D4DEC lea ecx, dword ptr [ebp-14]
:004295FA C645FC01 mov [ebp-04], 01
:004295FE E86284FDFF call 00401A65
:00429603 FF7660 push [esi+60]
:00429606 8D45F0 lea eax, dword ptr [ebp-10]
:00429609 FF75EC push [ebp-14]
:0042960C 50 push eax
:0042960D E88E67FEFF call 0040FDA0
:00429612 83C40C add esp, 0000000C
:00429615 8D4DEC lea ecx, dword ptr [ebp-14]
:00429618 E8C882FDFF call 004018E5
:0042961D EB0D jmp 0042962C
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004295ED(C)
|
* Possible Reference to String Resource ID=00190: "Your trial period has expired."
|
:0042961F 68BE000000 push 000000BE
:00429624 8D4DF0 lea ecx, dword ptr [ebp-10]
:00429627 E83984FDFF call 00401A65
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042961D(U)
|
:0042962C FF75F0 push [ebp-10]
* Possible Reference to Dialog: DialogID_007B, CONTROL_ID:016C, "Your trial period expires in %d days."
I also found this area that looks of interest:
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EA54(C)
|
:0040EAD3 51 push ecx
:0040EAD4 8D8F04010000 lea ecx, dword ptr [edi+00000104]
:0040EADA 8BC4 mov eax, esp
:0040EADC 8965E0 mov dword ptr [ebp-20], esp
* Possible StringData Ref from Data Obj ->"}"
|
:0040EADF 6860EB4700 push 0047EB60
:0040EAE4 8918 mov dword ptr [eax], ebx
:0040EAE6 E88F330000 call 00411E7A
:0040EAEB 33C9 xor ecx, ecx
:0040EAED 3BC3 cmp eax, ebx
:0040EAEF 0F9CC1 setl cl
:0040EAF2 3BCB cmp ecx, ebx
:0040EAF4 894DEC mov dword ptr [ebp-14], ecx
:0040EAF7 7413 je 0040EB0C
:0040EAF9 395DDC cmp dword ptr [ebp-24], ebx
:0040EAFC 7C0E jl 0040EB0C
:0040EAFE 6AFF push FFFFFFFF
:0040EB00 6A30 push 00000030
* Possible Reference to String Resource ID=00229: "The licence code you provided is not valid for this product."
I made a couple of changes using HIEW, but I can't get it to work. Any help would be greatly appreciated! Thanks in advance!
I am relatively new to Rev. Eng. I have done several tutorials which always make it look short and simple. It probably will get the way for me, but I'm stuck on a little personal project. Anyway, I downloaded a target with a 30 day timetrial. Then I changed my clock to go beyond the 30 days and I get the message:
Your trial period has expired , I loaded up W32DASM and found the area:
* Referenced by a CALL at Address:
|:0042A0C1
|
:004295C9 B86C0D4600 mov eax, 00460D6C
:004295CE E8DD9D0100 call 004433B0
:004295D3 51 push ecx
:004295D4 51 push ecx
:004295D5 53 push ebx
:004295D6 56 push esi
:004295D7 8BF1 mov esi, ecx
:004295D9 33DB xor ebx, ebx
:004295DB 57 push edi
:004295DC 895E50 mov dword ptr [esi+50], ebx
:004295DF A160D04700 mov eax, dword ptr [0047D060]
:004295E4 8945F0 mov dword ptr [ebp-10], eax
:004295E7 395E60 cmp dword ptr [esi+60], ebx
:004295EA 895DFC mov dword ptr [ebp-04], ebx
:004295ED 7E30 jle 0042961F
:004295EF 8945EC mov dword ptr [ebp-14], eax
* Possible Reference to String Resource ID=00189: "Your trial period expires in %d days."
|
:004295F2 68BD000000 push 000000BD
:004295F7 8D4DEC lea ecx, dword ptr [ebp-14]
:004295FA C645FC01 mov [ebp-04], 01
:004295FE E86284FDFF call 00401A65
:00429603 FF7660 push [esi+60]
:00429606 8D45F0 lea eax, dword ptr [ebp-10]
:00429609 FF75EC push [ebp-14]
:0042960C 50 push eax
:0042960D E88E67FEFF call 0040FDA0
:00429612 83C40C add esp, 0000000C
:00429615 8D4DEC lea ecx, dword ptr [ebp-14]
:00429618 E8C882FDFF call 004018E5
:0042961D EB0D jmp 0042962C
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004295ED(C)
|
* Possible Reference to String Resource ID=00190: "Your trial period has expired."
|
:0042961F 68BE000000 push 000000BE
:00429624 8D4DF0 lea ecx, dword ptr [ebp-10]
:00429627 E83984FDFF call 00401A65
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042961D(U)
|
:0042962C FF75F0 push [ebp-10]
* Possible Reference to Dialog: DialogID_007B, CONTROL_ID:016C, "Your trial period expires in %d days."
I also found this area that looks of interest:
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EA54(C)
|
:0040EAD3 51 push ecx
:0040EAD4 8D8F04010000 lea ecx, dword ptr [edi+00000104]
:0040EADA 8BC4 mov eax, esp
:0040EADC 8965E0 mov dword ptr [ebp-20], esp
* Possible StringData Ref from Data Obj ->"}"
|
:0040EADF 6860EB4700 push 0047EB60
:0040EAE4 8918 mov dword ptr [eax], ebx
:0040EAE6 E88F330000 call 00411E7A
:0040EAEB 33C9 xor ecx, ecx
:0040EAED 3BC3 cmp eax, ebx
:0040EAEF 0F9CC1 setl cl
:0040EAF2 3BCB cmp ecx, ebx
:0040EAF4 894DEC mov dword ptr [ebp-14], ecx
:0040EAF7 7413 je 0040EB0C
:0040EAF9 395DDC cmp dword ptr [ebp-24], ebx
:0040EAFC 7C0E jl 0040EB0C
:0040EAFE 6AFF push FFFFFFFF
:0040EB00 6A30 push 00000030
* Possible Reference to String Resource ID=00229: "The licence code you provided is not valid for this product."
I made a couple of changes using HIEW, but I can't get it to work. Any help would be greatly appreciated! Thanks in advance!