Bah, I already started cracking the old one the proper way
Upon starting, a dialog box shows up, which makes us wait for 5 seconds before the program actually starts. Same thing happens when you try to close it. Let's find the string "Please wait... 5 seconds".
It appears two times as expected. Let's follow the first one:
Looks like this is the function which pops up the dialog and starts the timer. We can search for references to 013B1680:
Again appears two times, we shall follow the first one again:
Going up the call chain again:
Now this is interesting. There's a function call to something in the program, a test instruction, and a jump over the assembly which creates our wait dialog. The license check must be happening in "sub_D219E0"!
Bingo! The function opens a file called "License.lic" and reads it's contents!
If that files does not exist, execution jumps to the end of the function and we get the annoying popup. Let's make that file and see what happens.
The code goes through a few functions until we arrive at this. Looks suspicious. We could attempt to decode it and check if it looks like a serial number...
...Or let the program do it for us. It appears edgyReggie has craftily hidden the serial by XORing it. Sneaky!
The serial is: NOREPLS-809J-NAS9-83H0-3NS9
After that the code goes deeper but I frankly can't be bothered to follow it. Let's get to patching!
We need remove that call to the license check.
A simple MOV fits snugly. At last, the full version is ours, permanently!
EDIT: Woo, done!