                                  GANGĿ
            Ϳ Ϳ Ϳ Ϳ Ϳ ͿCREWĹͿ Ϳ Ϳ Ϳ Ϳ Ϳ
                 Ļ
         ı۲[Program Name]۲
       ı۲TrafficSeeker 3.70                         ۲Ļ
        ı۲۲ļ 
                                                                      
        ı۲[Cracker Name][Date]ۛĻ 
     ıⲱslaught 14.o3.2oo1 ۲Ļ
       ıⲱ۲ļ  
                                                                      
       ı۲[URL]ⲱĻ  
     ı۲http://www.itrafficseeker.com              ۲ļ
       ı۲۲ļ 
                                                                       
    ı۲[Type of Content]۲Ļ
      ı۲ [ ]Crack      [ ]CD-Rip       [ ]CrackMe  ۲  
  ļ      ۛ [ ]KeyFile    [ ]KeyFileMaker [ ]KeyGen   ۲      Ļ
          ۲ [ ]Loader     [ ]Patch        [ ]RegCrack ۲        
  Ļ      ۲ [ ]Serial     [ ]Tool         [x]Tutorial ۛ      ļ
      ı۲ [ ]UnwrapedExe                [ ]Other    ⲱͿ  
    ı۲۲Ĺ
                                                                       
    ı۲[Usage Info/Notes]۲ļ
       ı۲                                           ۲ 
       ı۲                                           ۛͿ 
  ı۲۲Ļ
                                                                       
                                                                         
  Ļ ı۲[Members of GANG CREW]۲ļ Ļ
        ۲  Slaughtslaught@gangcrew.cjb.net  ۲      
  ļ     ۲  Paruwaparuwa@gangcrew.cjb.net  ۲     ż
        ıۛ  Geringgering@gangcrew.cjb.net  ۲Ĺ     
     ۲  Pixelpixel@gangcrew.cjb.net  ۲  Ĺ
   Ŀ  ۲  Gl401gl401@gangcrew.cjb.net  ۛ  Ĺ
        ı۲  Lukianlukian@gangcrew.cjb.net  ۲Ĺ     
          ۲  Trewgruthtrewgruth@gangcrew.cjb.net  ۲       
    ۲  Mr.Rafikmr.rafik@gangcrew.cjb.net  ۲ ļ
           ۲۲ 
                                       
                That's all folks     
                                              nf0 by Paruwa ļ
                                                 ļ
TrafficSeeker 3.70 - slaught

Let's run our target. What we can see:
"This is a normal reminder... 29 days left (...)
limited to 50 submissions"

I found registration option but it uses data from the server
so I started to search another way.
Look at the title of the window: "TrafficSeeker Pro v3.70  Trial"
I think You should use good old W32Dasm for this job.
It was right string "Trial" was found at: 4C91A9

:004C9164 8A4058                  mov al, byte ptr [eax+58]
:004C9167 2C01                    sub al, 01
:004C9169 7217                    jb 004C9182
:004C916B 0F8497000000            je 004C9208
:004C9171 FEC8                    dec al
:004C9173 7450                    je 004C91C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004C9135(C)
|
:004C9175 FEC8                    dec al
:004C9177 0F84CE000000            je 004C924B
:004C917D E967010000              jmp 004C92E9
:004C9182 8B45FC                  mov eax, dword ptr [ebp-04]
:004C9185 8B8038060000            mov eax, dword ptr [eax+00000638]

* Possible StringData Ref from Code Obj ->"Not Expired"
                                  |
:004C918B BAAC964C00              mov edx, 004C96AC
:004C9190 E82383F5FF              call 004214B8
:004C9195 8D55F4                  lea edx, dword ptr [ebp-0C]
:004C9198 8B45FC                  mov eax, dword ptr [ebp-04]
:004C919B 8B8068060000            mov eax, dword ptr [eax+00000668]
:004C91A1 E8E282F5FF              call 00421488
:004C91A6 8D45F4                  lea eax, dword ptr [ebp-0C]

* Possible StringData Ref from Code Obj ->"  Trial"
                                  |
:004C91A9 BAC0964C00              mov edx, 004C96C0

I don't know from it's called but when I was looking at code
I found something interesting:

:004C9177 0F84CE000000            je 004C924B
->
:004C924B 8B45FC                  mov eax, dword ptr [ebp-04]
:004C924E 8B8038060000            mov eax, dword ptr [eax+00000638]

* Possible StringData Ref from Code Obj ->"Registered"
                                  |
:004C9254 BA24974C00              mov edx, 004C9724


you'll have to change "mov al, byte ptr [eax+58]" to
"mov al, 03
nop"
why? because after 4C9167->4C9175 al should be 0
to jump 4C9254

program will always jump to 4C9254 (Registered).
What we should achieve :
window title "TrafficSeeker Pro v3.70  Registered",
"Register"|"Status"|"Status"|"Registered"
                    "Days Left"|"0"
                    "Grace Starts Left"|"0"
It's look like time limit was faked but It isn't
well not to the end. Change date to greater than
"Expiry Date" and run main program again you'll see:
"The program has expired(...)"

but it still working

Search this string in W32Dasm you'll find it :* Possible StringData Ref from
                             Code Obj ->"The program has expired. Register "
                                      ->"to enable the full version."
                                  |
:004BDE5C B870DE4B00              mov eax, 004BDE70
:004BDE61 E8FE15F8FF              call 0043F464
:004BDE66 C3                      ret

we don't need call 4BDE61 because there is messagebox talking about
time limit so change first opcode of call function to ret function
E8->C3
after that there won't be any anoying messageboxs.
Now The last part. Go to "Step2 Session" and choose
"Search Engines"...
"Search Engine database is disabled in the trial mode"

crazy :), find it in strings:

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004B76F2(C)
|

* Possible StringData Ref from Code Obj ->"Search Engine database is
                                           disabled "
                                        ->"in the trial mode."
                                  |
:004B7861 B850794B00              mov eax, 004B7950

It was called from 4B76F2:

:004B76EE 80787400                cmp byte ptr [eax+74], 00
:004B76F2 0F8469010000            je 004B7861
:004B76F8 8B83A0030000            mov eax, dword ptr [ebx+000003A0]
...

change je 004B7861 to NOP x6 you should know how :)
what else? Custom database ? do the same job as Search Engine
That's all folk.
