hi all,

i'm trying to reverse a soft written with delphi 5,
first it had a serial check - when a wrong serial is entered you cannot use it, when you install it it write some serial to the registry, this serial lets you work with the software but limits you to 36 entries. i found some procedure checking the serial and generate a working serial (no 36 limit), but...
with both of the serials there are a few features blocked - when i click them i get this screen ask me to buy the soft.

the version i'm working on, is called demo version - it even creates a registry key named demo, it is possible that those features are not even coded, but the existence of the serial validation procedure - and the fact that there is a serial that lets you work with lighter limit or with no limit at all, makes me think other. another thing - DeDe shows me the missing features form.

any suggestion on how to find the place where it cheacks if this is a demo or not?

Backtrack from that "ask you to buy the soft" screen that you mention.


PS.
You wanna get hiiiiigh?

PS2.
Only people who watch South Park will understand that joke.

since i wrote that post,

with a little (well big) help from DeDe, i found that the code of the disabled functions is coded, but there is some procedure ahead of it that popup the BuyMe screen, when i patched it into NOP, i got the screen of the disabled function, but when i carry on - i got an Access Vaiolation error.

i think i need some more digging in the serial validation procedure.

if you have any idea,
i'm hearing.

and remember, there is a little towel in every one of us......

Wow....

I thought only "USA" got to watch SouthPark.
Towelie is way better then Mr. Hankey, whom
I assume is a long lost relative seeing how they
both sound the same.

Woodmann

and remember, there is a little Mr. Hankey in every one of us......

Hey, watch who you're accusing of being full of crap!

And about the code, I would look for branches before the code displaying that message. Also, make sure to balance the stack when you're nopping out function calls, otherwise you might get crashes like that even from "correct" patches.