jEFF
Some of those MISSING String References FOUND!
Sun Nov 15 17:35:45 1998


Howdy all!

I found a few of those MISSING STRINGS that we were looking for...

Here is something for ya'all with the time to look into; it may help you locate that pesky place where the days remaining; and its calculation have been hidden.
Maybe even more...?


Using THE code generated by a few of the posts here: you get the following results while in 32Dasm. As you can see the string references have been (encoded?)(encripted?) hidden:
Here they are for you to see:


* Possible StringData Ref from Code Obj ->"((((((((((((`ifc(qg}(ngz(zmoa{|mzafo(]faf{|id"

TRANSLATED HERE:

" -space- Thank you for registering Uninstal"

->"d(Eifiomz"
"l Manager"
--------------------------------------------------------------------
* Possible StringData Ref from Code Obj ->"(((Qg}(izm(gf(|`m(liq("

TRANSLATED HERE:

why the spaces before the comment? > " You are on the day "
-------------------------------------------------------------------

* Possible StringData Ref from Code Obj ->"(gn(qg}z(;8(liq(m"

TRANSLATED HERE:

" of your 30 day e"

------------------------------------------------------------------




* Possible StringData Ref from Code Obj ->"(((((Qg}z(|zaid(xmzagl(a{(nafa{`ml&(Xdmi{m(xzm"

TRANSLATED HERE:

" Your Trial period is finished& Please pre"

AND HERE:

->"{{(zmoa{|mz(cmq"
"ss register key"


----------------------------------------------------
And here is a GOOD ONE!


You are on the day of your 30 day evaluation period...


* Possible StringData Ref from Code Obj ->"(((Qg}(izm(gf(|`m(liq(" | " You are on the day "

:0045BD27 B8CCBE4500 mov eax, 0045BECC
:0045BD2C E8A31F0000 call 0045DCD4
:0045BD31 FF75EC push [ebp-14]
:0045BD34 8D55E8 lea edx, dword ptr [ebp-18]
:0045BD37 A1500F4600 mov eax, dword ptr [00460F50]
:0045BD3C 0FB700 movzx eax, word ptr [eax]
:0045BD3F E8C0B6FAFF call 00407404
:0045BD44 FF75E8 push [ebp-18]
:0045BD47 8D55E4 lea edx, dword ptr [ebp-1C]

* Possible StringData Ref from Code Obj ->"(gn(qg}z(;8(liq(m"
| " of your 30 day e"

:0045BD4A B8ECBE4500 mov eax, 0045BEEC
:0045BD4F E8801F0000 call 0045DCD4
:0045BD54 FF75E4 push [ebp-1C]
:0045BD57 8D45F0 lea eax, dword ptr [ebp-10]
:0045BD5A BA03000000 mov edx, 00000003
:0045BD5F E86080FAFF call 00403DC4
:0045BD64 8B55F0 mov edx, dword ptr [ebp-10]
:0045BD67 8B45FC mov eax, dword ptr [ebp-04]
:0045BD6A 8B80F8010000 mov eax, dword ptr [eax+000001F8]
:0045BD70 E8433CFCFF call 0041F9B8
:0045BD75 C605EC6ED40001 mov byte ptr [00D46EEC], 01
:0045BD7C EB25 jmp 0045BDA3


I'm still working on what and where any of this will take us; This is where it does the calculation for days left...? anybody help?

Jeff