ÚÄGANGÄÄ¿ ÚÍ¿ ÚÍ¿ ÚÍ¿ ÚÍ¿ ÚÍ¿ ÚÍ¿ÌÄÄCREWĹÚÍ¿ ÚÍ¿ ÚÍ¿ ÚÍ¿ ÚÍ¿ ÚÍ¿ ÉÄÊÄÊÄÊÄÊÄÊÄÊÄÊÄÊÄÊÄÊÄÊÄÊÙ ÀÊÄÊÄÊÄÊÄÊÄÊÄÊÄÊÄÊÄÊÄÊÄÊÄ» ÉÁı²ÛÛ²±°°°°°°°°°°°°°þ[Program Name]þ°°°°°°°°°°°°°°±²ÛÛ²±ÄÁ» ÉÄÅÄı²ÛÛ²±TrafficSeeker 3.70 ±²ÛÛ²±ÄÄÅÄ» ³ ÈÄı²âÛ²±°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°±²ÛÛ²±Äļ ³ ³ ³ ³ ÉÄı²ÛÛ²±°°°°þ[Cracker Name]þ°°°°°°°°°°°°°þ[Date]þ°°±²Û›²±ÄÄ» ³ ÉÄÎÄÅÄı²›â²±±±±±±±slaught±±±±±±±±±±±±±±±±±± 14.o3.2oo1 ±²ÛÛ²±ÄÄÅÄÎÄ» ³ ³ ÈÄı²Ûâ²±°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°±²ÛÛ²±Äļ ³ ³ º ³ ³ º ³ ³ ÉÄı²ÛÛ²±°°°°°°þ[URL]þ°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°±²Ûâ²±ÄÄ» ³ ³ ÈÄÎÄÅÄı²ÛÛ²±http://www.itrafficseeker.com ±²›Û²±ÄÄÅÄÎļ ÉÙ ÈÄı²›Û²±°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°±²ÛÛ²±Äļ À» ³ ³ ÉÄÎÄÂÍÄı²ÛÛ²±°°°°°°°°°°°þ[Type of Content]þ°°°°°°°°°°°°°±²ÛÛ²±ÄÄÍÂÄÎÄ» ³ ³ ÀÍÄı²ÛÛ²± [ ]Crack [ ]CD-Rip [ ]CrackMe ±²ÛÛ²±ÄÄÍÙ ³ ³ Éļ ³ ±²Û›²± [ ]KeyFile [ ]KeyFileMaker [ ]KeyGen ±²ÛÛ²± ³ ÈÄ» ³ ³ ±²ÛÛ²± [ ]Loader [ ]Patch [ ]RegCrack ±²ÛÛ²± ³ ³ ÈÄ» ³ ±²ÛÛ²± [ ]Serial [ ]Tool [x]Tutorial ±²Û›²± ³ Éļ ³ ³ ÚÍÄı²ÛÛ²± [ ]UnwrapedExe [ ]Other ±²Ûâ²±ÄÄÍ¿ ³ ³ ÌÄÎÄÁÍÄı²ÛÛ²±°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°±²ÛÛ²±ÄÄÍÁÄÎĹ ³ ³ ³ ³ ÈÄÎÄÂÍÄı²ÛÛ²±°°°°°°°°°°þ[Usage Info/Notes]þ°°°°°°°°°°°°°±²ÛÛ²±ÄÄÍÂÄÎļ ³ ÀÍÄı²âÛ²± ±²ÛÛ²±ÄÄÍÙ ³ ³ ÚÍÄı²ÛÛ²± ±²Û›²±ÄÄÍ¿ ³ ÉÄÄÄÎÄÁÍÄı²ÛÛ²±°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°±²ÛÛ²±ÄÄÍÁÄÎÄÄÄ» ³ À» ÉÙ ³ º ³ ³ º ³ÉÄ» ÈÄËÄı²ÛÛ²±°°°°°°°°°þ[Members of GANG CREW]þ°°°°°°°°°°±²ÛÛ²±ÄÄËļ ÉÄ»³ ³³ ³ ³ ±²ÛÛ²± Slaughtúúúúúúúúslaught@gangcrew.cjb.net ±²›Û²± ³ ³ ³³ ÈÅļ ³ ±²ÛÛ²± Paruwaúúúúúúúúúúparuwa@gangcrew.cjb.net ±²ÛÛ²± ³ ÈÄż ³ ÌÄı²Û›²± Geringúúúúúúúúúúgering@gangcrew.cjb.net ±²ÛÛ²±ÄĹ ³ ÌÄÍÍÍÄÙ ±²ÛÛ²± Pixelúúúúúúúúúúúúpixel@gangcrew.cjb.net ±²ÛÛ²± ÀÄÍÍÍĹ ÌÄÍÍÍÄ¿ ±²âÛ²± Gl401úúúúúúúúúúúúgl401@gangcrew.cjb.net ±²Û›²± ÚÄÍÍÍĹ ³ ÌÄı²›Û²± Lukianúúúúúúúúúúlukian@gangcrew.cjb.net ±²ÛÛ²±ÄĹ ³ ³ ³ ±²ÛÛ²± Trewgruthúúúútrewgruth@gangcrew.cjb.net ±²›Û²± ³ ³ ÈÄÍÍÍÄÁ» ±²ÛÛ²± Mr.Rafikúúúúúúmr.rafik@gangcrew.cjb.net ±²ÛÛ²± ÉÁÄÍÍÍļ ³ ±²ÛÛ²±°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°±²ÛÛ²± ³ ³ Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë Ë ³ ³ ÀËÙ ÀÍÙ ÀÍÙ ÀÍÙ ÀÍÙ That's all folksÀËÙ ÀÍÙ ÀÍÙ ÀÍÙ ÀËÙ ³ ÈÄÄÙ ³ nf0 by Paruwa ÃÄļ ÈÄÄÄÄÄÄÄÄÄÄÄÄÄÄļ TrafficSeeker 3.70 - slaught Let's run our target. What we can see: "This is a normal reminder... 29 days left (...) limited to 50 submissions" I found registration option but it uses data from the server so I started to search another way. Look at the title of the window: "TrafficSeeker Pro v3.70 Trial" I think You should use good old W32Dasm for this job. It was right string "Trial" was found at: 4C91A9 :004C9164 8A4058 mov al, byte ptr [eax+58] :004C9167 2C01 sub al, 01 :004C9169 7217 jb 004C9182 :004C916B 0F8497000000 je 004C9208 :004C9171 FEC8 dec al :004C9173 7450 je 004C91C5 * Referenced by a (U)nconditional or (C)onditional Jump at Address: |:004C9135(C) | :004C9175 FEC8 dec al :004C9177 0F84CE000000 je 004C924B :004C917D E967010000 jmp 004C92E9 :004C9182 8B45FC mov eax, dword ptr [ebp-04] :004C9185 8B8038060000 mov eax, dword ptr [eax+00000638] * Possible StringData Ref from Code Obj ->"Not Expired" | :004C918B BAAC964C00 mov edx, 004C96AC :004C9190 E82383F5FF call 004214B8 :004C9195 8D55F4 lea edx, dword ptr [ebp-0C] :004C9198 8B45FC mov eax, dword ptr [ebp-04] :004C919B 8B8068060000 mov eax, dword ptr [eax+00000668] :004C91A1 E8E282F5FF call 00421488 :004C91A6 8D45F4 lea eax, dword ptr [ebp-0C] * Possible StringData Ref from Code Obj ->" Trial" | :004C91A9 BAC0964C00 mov edx, 004C96C0 I don't know from it's called but when I was looking at code I found something interesting: :004C9177 0F84CE000000 je 004C924B -> :004C924B 8B45FC mov eax, dword ptr [ebp-04] :004C924E 8B8038060000 mov eax, dword ptr [eax+00000638] * Possible StringData Ref from Code Obj ->"Registered" | :004C9254 BA24974C00 mov edx, 004C9724 you'll have to change "mov al, byte ptr [eax+58]" to "mov al, 03 nop" why? because after 4C9167->4C9175 al should be 0 to jump 4C9254 program will always jump to 4C9254 (Registered). What we should achieve : window title "TrafficSeeker Pro v3.70 Registered", "Register"|"Status"|"Status"|"Registered" "Days Left"|"0" "Grace Starts Left"|"0" It's look like time limit was faked but It isn't well not to the end. Change date to greater than "Expiry Date" and run main program again you'll see: "The program has expired(...)" but it still working Search this string in W32Dasm you'll find it :* Possible StringData Ref from Code Obj ->"The program has expired. Register " ->"to enable the full version." | :004BDE5C B870DE4B00 mov eax, 004BDE70 :004BDE61 E8FE15F8FF call 0043F464 :004BDE66 C3 ret we don't need call 4BDE61 because there is messagebox talking about time limit so change first opcode of call function to ret function E8->C3 after that there won't be any anoying messageboxs. Now The last part. Go to "Step2 Session" and choose "Search Engines"... "Search Engine database is disabled in the trial mode" crazy :), find it in strings: * Referenced by a (U)nconditional or (C)onditional Jump at Address: |:004B76F2(C) | * Possible StringData Ref from Code Obj ->"Search Engine database is disabled " ->"in the trial mode." | :004B7861 B850794B00 mov eax, 004B7950 It was called from 4B76F2: :004B76EE 80787400 cmp byte ptr [eax+74], 00 :004B76F2 0F8469010000 je 004B7861 :004B76F8 8B83A0030000 mov eax, dword ptr [ebx+000003A0] ... change je 004B7861 to NOP x6 you should know how :) what else? Custom database ? do the same job as Search Engine That's all folk.