Topic created on: April 14, 2007 18:18 CDT by gimmee .

Hi all

I am trying to reverse a program called EFiLive V4 Eval. It boots up and checks its .ini file for your registration information and if evaluation code and key it starts in Evaluation mode. You can then goto register and put in your details to register and a messagebox pops up good guy or bad guy.

Its Delphi 7. Have dissassembled it with DeDe and also WDasm and exported extra info from DeDe to WDasm.

The trouble I am having is:

1) When loading efilive into olly, olly evnetually crashes with a access violation when executing [00000000], a messagebox saying Don't know how to continue because memory at address [00000000] is not readable.

So I never get to where it loads the info out of the ini file and does the checking.

2) If I run the program byitself without olly it is fine. But I can find no reference to the Registration form in DeDe and thus I am blindly trying to put breakpoints on code to try and break into anywhere around the registration delphi form.

Can someone give me some guidance on this please.

I am using olly 1.10 with the anti debugging plugins.

EFiLiveV4 evaluation can be downloaded from http://www.efilive.com/download.aspx#downloads3

Look forward to any help you can give me on this

Gimmee :):)