Posted by Kosh on 1/19/2000, 5:32 pm
195.249.25.38
Here is my solution for task II.1 and II.2
It's a single byte patch and it removes both the nag and the expired nag.
I started out looking 4 'The evaluation period has expired' Nag and stumbled
over the code below.:00446E52 59 pop ecx
:00446E53 57 push edi
:00446E54 E81BFCFFFF call 00446A74
:00446E59 59 pop ecx
:00446E5A 84C0 test al, al
:00446E5C 7411 je 00446E6F ----------------> change to jne
:00446E5E 8B8514FDFFFF mov eax, dword ptr [ebp+FFFFFD14]
:00446E64 64A300000000 mov dword ptr fs:[00000000], eax
:00446E6A E98D040000 jmp 004472FC* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446E5C(C) -------> this looks interesting.
|
:00446E6F 57 push edi
:00446E70 E847FDFFFF call 00446BBC
:00446E75 59 pop ecx
:00446E76 84C0 test al, al
:00446E78 0F85A9010000 jne 00447027
:00446E7E 8B5766 mov edx, dword ptr [edi+66]
:00446E81 8B02 mov eax, dword ptr [edx]
:00446E83 6A00 push 00000000* Possible StringData Ref from Data Obj ->"Acoustica"
|
:00446E85 6831A04900 push 0049A031* Possible StringData Ref from Data Obj ->"The evaluation period has expired."
|
:00446E8A 680EA04900 push 0049A00E
:00446E8F 8B500C mov edx, dword ptr [eax+0C]
:00446E92 52 push edx
:00446E93 8B4868 mov ecx, dword ptr [eax+68]
:00446E96 51 push ecx
:00446E97 E8DED90100 call 0046487A
:00446E9C 83C414 add esp, 00000014
:00446E9F 66C78524FDFFFF3800 mov word ptr [ebp+FFFFFD24], 0038
:00446EA8 83C4FC add esp, FFFFFFFC
:00446EAB C7042470000000 mov dword ptr [esp], 00000070
:00446EB2 8B4766 mov eax, dword ptr [edi+66]
:00446EB5 85C0 test eax, eax
:00446EB7 7407 je 00446EC0
:00446EB9 8B5766 mov edx, dword ptr [edi+66]
:00446EBC 8B0A mov ecx, dword ptr [edx]
:00446EBE EB03 jmp 00446EC3
Then I fired up ultraedit, pressed ctrl+g ( goto ) and entered 0x4645C and changed
74 to 75 ( je to jne ) tried EB didn't work.
( 0x4645C is a hexadecimal offset into the acoustica.exe file....this offset
was found using wdasm...it is shown in the bottom bar of wdasm when the cursor is
over the line I have singled out above )Tools used .. Wdasm and UltraEdit.
Task II.3 II.4 and II.5 coming soon.....very busy, at the moment.