It seems as MS-Buchhalter is a "clone" of TZ-EasyBuch as the binaries are the same in size and naming. TZ-EasyBuch seems to be cracked in the past. But actual cracks are not available as I spent so much time for searching up til now.
When closing the software or trying to access funtions not provided in the trial version there is always a screen that points to the website or entering the activation/unlock code.
If you enter the wrong code there is an error that says "Lizenznummer ungültig".
Now I tried reverse engineering with Ollydbg and IDA Pro by opening the exe-file "ezbook.exe". I searched for the error message "Lizenznummer" and found it at .rdata:00993C64. This leads to "sub_5EA7F0+26Fo". After analyzing a bit upper and lower around this section I found "005EA9E4". Here it says "Programm freigeschaltet" what means that the activation was successfull.
So I tried to analyze how to get into this and how to avoid getting the error message that the code entered is invalid.
I found out that at "005EA9AB" there is "JE SHORT 005EA9EE". I changed it to "JE SHORT 005EA9AD" by changing the hex value from 74 01 to 74 00.
After saving it to the binary (ezbook.exe) I entered an activation code and was happy that the software says "Programm freigeschaltet" what means that it turned in to a full version.
Unfortunately, it does not seem to save the state of the registration and the full version. So I have to repeat the process of entering "any" serial before using the program.
Now I'd like to find out how the code can be changed that when having entered any serial the program realizes that it is a full version from now on without the necessity to always enter a serial before the initial use of MS-Buchhalter.
I'm quite sure that it cannot be that hard work as it was already quite easy to crack the license routine (although, I'm a newbie, I spent to many hours on understanding what happens in the disassembler and how I can use that information).
But I can't get it and so I'd like to ask for your assistance to be successfull.
If you need any further information or screenshots, don't hesitate to ask.
Создано: 6 января 2016 14:52 New! Цитата · Личное сообщение · #4
Activation code is saved in "HKCU\Software\TZ-Ware\TZ-EasyBuch\no", parameter "no1b". Code is relatively simple, it doesn't need to patch EXE. Address of checking procedure: 5E3D90. Try one of these codes http://pastebin.com/AdNZfBzf
P. S. My german is too weak. All above is valid if translation was made correctly.