here is a snip of code in the paul.dll i think is interesting but i need someone to decode the routines to bypass them.
Code:
L10005F07:
push eax
push SSZ1002941C_GetProductLicense_returns__s_
call SUB_L1000A560
push eax
call SUB_L1000ACF0
add esp,0000000Ch
test bl,bl
mov eax,SSZ10029444_true
jnz L10005F29
mov eax,SSZ1002943C_false
L10005F29:
push eax
push SSZ1002941C_GetProductLicense_returns__s_
call SUB_L1000A560
push eax
call SUB_L1000ACF0
add esp,0000000Ch
test bl,bl
mov eax,SSZ10029444_true
jnz L10005F4B
mov eax,SSZ1002943C_false
Bookmarks