Step 1: Use armkiller13 to take off the shell!
Step 2: register this software! Hey!
: 00402911 59 pop ecx
: 00402912 50 push eax
: 00402913 E8B3800100 call 0041A9CB
: 00402918 83C40C add esp, 0000000C
: 0040291B FF3570604200 push dword ptr [0, 00426070]
: 00402921 8D8500FDFFFF lea eax, dword ptr [ebp + FFFFFD00]
: 00402927 50 push eax
: 00402928 E8437E0100 call 0041A770
: 0040292D 59 pop ecx
: 0040292E 59 pop ecx
: 0040292F E8E5BD0000 call 0040E719
: 00402934 84C0 test al, al
: 00402936 5E pop esi
: 00402937 741B je 00402954 ===> jump here! (Change 741B to EB1B)
: 00402939 E88EBE0000 call 0040E7CC
: 0040293E 84C0 test al, al
* Possible StringData Ref from Data Obj-> "Professional"
|
: 00402940 B814614200 mov eax, 00426114
: 00402945 7505 jne 0040294C
* Possible StringData Ref from Data Obj-> "Basic"
|
: 00402947 B80C614200 mov eax, 0034710c
: 0040294C 50 push eax
* Possible StringData Ref from Data Obj-> ", % s Trial Edition"
|
: 0040294D 68F8604200 push 000000f8
: 00402952 EB19 jmp 0040296D
: 00402954 E873BE0000 call 0040E7CC ==> note this
: 00402959 84C0 test al, al
* Possible StringData Ref from Data Obj-> "Professional"
|
: 0040295B B814614200 mov eax, 00426114
: 00402960 7505 jne 00402967 ==> jump here
* Possible StringData Ref from Data Obj-> "Basic"
|
: 00402962 B80C614200 mov eax, 0034710c
: 00402967 50 push eax
* Possible StringData Ref from Data Obj-> ", % s Edition"
|
: 00402968 68E8604200 push 000000e8
: 0040296D 8D8500FDFFFF lea eax, dword ptr [ebp + FFFFFD00]
: 00402973 53 push ebx
: 00402974 50 push eax
: 00402975 E8E67E0100 call 0041A860
: 0040297A 59 pop ecx
: 0040297B 59 pop ecx
: 0040297C 50 push eax
: 0040297D E849800100 call 0041A9CB
: 00402982 83C40C add esp, 0000000C
: 00402985 8D8500FDFFFF lea eax, dword ptr [ebp + FFFFFD00]
: 0040298B 50 push eax
: 0040298C FF35F00C4300 push dword ptr [0020.cf0]
* Reference T USER32.SetWindowTextA, Ord: 025Eh
|
: 00402992 FF15E4314200 Call dword ptr [004231E4]
: 00402998 5F pop edi
: 00402999 5B