Task 1 Wednesday, 03-Feb-99 04:24:22
So far this is what I found WDASM - There are a few interesting strings : 1 - REGISTRATION NAME 2 - REGISTRATION CODE Above 2 strings comes up twice. Once in all uppercase and once in normat caps. 3 - The program has been modified Could be used if you hex edit the program. I did not try that yet. 4 - Un&Register Program After you have registered the program, it allows you to unregister it again. Why? FileMon - The only interesting thing I could find from FileMon is that the program is looking for a MEMO95.INI file, which it can't find. By creating the MEMO95.ini file in the directory and trying to register the program, it writes a lot of info in the file. the most interesting is the following: [Jellemzok] REGISTRATION NAME= REGISTRATION CODE= TABLA=0 KARTYA=0 The rest of the file has to do with the time you took to complete the game and your points. If you enter Pirate Copy at the Name and any number at the Code line, and restart the program, it still comes up with an invalid registration code. If you look at the MEMO95.INI file again, the Name & Code lines have been blanked out again. In the Registry - The settings are stored in the following hive: HKEY_CURRENT_USER\Software\Kertes Gábor\Memory game 95\Settings Once again there is the following lines : REGISTRATION NAME= REGISTRATION CODE= If you enter Pirate Copy at the Name and any number at the Code line, and restart the program, it still comes up with an invalid registration code. That is all for now. Cya BlueJay BlueJay |
BlueJay: Task 1 (03-Feb-99 04:24:22) |
|
Copyright © InsideTheWeb, Inc. 1997-1999
All rights reserved.