Project 6 Wednesday, 03-Feb-99 19:05:56
Greetings crackers, Ready to deep dive in Memo95 In FileMon: A call to Memo95.ini NOTFOUND Reading the HLP file: (amazing.....;) Memory game for Windows 3.1 uses a private profile called MEMO.INI and stores it in its own directory. Memory game 95 uses a different method storing data in the system registry of Windows 95. Memory game 95 first searches for the presence of the MEMO.INI file. If it can't find it, thinks that there's no need for a local profile, searches the system registry. Otherwise, if it finds the MEMO.INI tries to get information from that. When it is not possible (for example the file is empty) gets the data from the system registry. If the local profile exists the program writes profile settings into that. Memory game is shareware. You're free to use it for a 30-day evaluation period. If you register this game, that annoying reminder dialog disappears, you get a code that enables you to use the program as registered copy displaying your name. Registration also unlocks two additional card sets, and '2 players' mode Type the name you wrote in the order form into the Name edit field (case sensitive), then copy the 16 digit hex code into the Code edit field. Click the OK button. If you make copies of this game to your friends, please first unregister the program Order Form Registration name:............ (This will be used to create the code, and this will appear on the About dialog after registration (Can be the same as Name)) I create the empty .INI file and ran the proggie. After that the .INI had these interesting strings inside: [Jellemzok] REGISTRATION NAME= REGISTRATION CODE= ........ cut ..... Fishing in the REGISTRY HKEY_USERS\.Default\Software\Kertes Gábor\Memory game 95 HKEY_USERS\.Default\Software\Kertes Gábor\Memory game 95\Top scores HKEY_USERS\.Default\Software\Kertes Gábor\Memory game 95\Settings In that key there are Registration code Registration name Running Memo95.EXE About --->Unregistered evaluation copy In Options we can't play with the last 2 set of cards and in 2 player mode 'cause a NAG remind us to register and that we have 30 days of evaluation The Register box contains Name & Code A sorry message informs us that we have entered an invalid code. No message about the 16 digits that the programs wants for the code (see above in the HLP refs) In Wdasm's string references: "REGISTRATION NAME" <---- for the INI "REGISTRATION CODE" <----- for the INI "Sorry, the registration code does not match! Try again or Ca" <--- Invalid Code "Thank you for registering %s." <--- Good guy ;) "Unregistered" "evaluation copy" "Registered copy to" <--- here Pirate Copy "The program has been modified!" <----- are you a cracker? "The code contains non-hexadecimal characters!" <----- idem ;)) "The %s card set can be used only in the registered version. " "Un®ister..." "The '2 players' mode can be used only in the registered ver" "8530" <---- ????? "Please enter no more than %1 characters." <--- ????? a check 'bout the 16 digits?? "e+000" <--- ??????? "Registration" That's all for me!! Waiting for Task2 Peace & Prosperity KALI KALI |
KALI: Project 6 (03-Feb-99 19:05:56) |
|
Copyright © InsideTheWeb, Inc. 1997-1999
All rights reserved.