namdoolb wrote:Specialist wrote:Don't these "trial period" software work by using a registery key, maybe he just has to find it and delete it...
That might work, but I'd have thought that the program would stop working if you started removing it's registry keys.
It would be easier if one dumped the registry to a .reg file before and after installing, then compared the differences using diff or the windows equivelent.
Some might dump files hidden somewhere in the system, so recursively dump a listing of all files before and after.
Unfortunately, nowdays some schemes involve writing directly to disk, bypassing filesystem (Macrovision's DRM for turbotax writes to sector 33 or something of MBR)
Crayz, isn't it kind of difficult without debugging symbols compiled in, meaning you would have to look at ASM w/o coments? How would you make the patch? Disassemble, edit, reassemble, run patch prog?
BTW, why does everything on linux not use binary patches using xdelta or diff -a?