WIDI 2.7 Build 492/493

[MaRKuS-DJM]

little problem with this... i've found the neccessary bytes to turn the program into fully registered version, but: it doesn't save!

look here:

:00401594 7408 je 0040159E
:00401596 8B0D082B5500 mov ecx, dword ptr [00552B08]
:0040159C EB05 jmp 004015A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401594(C)
|
:0040159E B92AB75200 mov ecx, 0052B72A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040159C(U)
|
:004015A3 51 push ecx
:004015A4 E8DBC50100 call 0041DB84 <<<<< call which checks name and serial
:004015A9 83C408 add esp, 00000008
:004015AC 85C0 test eax, eax
:004015AE 7407 je 004015B7 <<<<< this is the bad boy... i've nopped it and then the program was registered
:004015B0 B801000000 mov eax, 00000001
:004015B5 EB02 jmp 004015B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004015AE(C)
|
:004015B7 33C0 xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004015B5(U)
|
:004015B9 8B15102B5500 mov edx, dword ptr [00552B10]
:004015BF 8902 mov dword ptr [edx], eax
:004015C1 8B8B78030000 mov ecx, dword ptr [ebx+00000378]
:004015C7 8B83E8030000 mov eax, dword ptr [ebx+000003E8]
:004015CD 8B914C010000 mov edx, dword ptr [ecx+0000014C]
:004015D3 E8E4E60900 call 0049FCBC
:004015D8 E83F1C0000 call 0040321C

* Possible StringData Ref from Data Obj ->"SjDP!}!OKpz" <<<< don't understand this string...
|
:004015DD B82BB75200 mov eax, 0052B72B
:004015E2 BA142B5500 mov edx, 00552B14 <<<<< your name

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401601(C)
|
:004015E7 8A08 mov cl, byte ptr [eax]



I'm not a very good cracker and it would be nice if anyone could help me...

MaRKuS TH-DJM