NiKaiUM Question 2Thu Nov 12 02:40:24 1998 Hi all :-)I was too late for the first part, so i start with this second part. I used Sice one time and was shocked: This prog donīt need any patch! I tried to register the prog. I typed a name and a fake serial. Before i pressed Enter, i set a bpx hmemcpy. Enter and Sice popped up. 7 times F12 and i landed in uninsman.exe-code. Then i traced with F10 through the code. At one point the serial was calculated (i think everyone knows this place, or not?). At 45C034 was a JNZ blabla. This is important:If this jumps, your serial is false and you get the error message.If you change this into JZ, you won. In the registry your encrypted reg-number is written and the prog is registered for ever. NO PATCH NEEDED.But back to Sandmanīs questions. The nag screens and the time checking routines are disabled, look above. Where does the prog store the days left?There are two points: The first at 45464F: MOV [00D46E72], AX. AX=Days left.The second point at 45469A: MOV [00D46E74], AX. If AX=0 the prog isnīt expired.If AX=1 the prog is expired. How can we make the prog run forever while keeping the nag screen intact?Well, we set at 45469A AX=0.Can we disable the nag screens while still keeping the 30 day evaluation period?Well, after 45469A comes a call. If you get with F8 into this call, there is at 45B8F0 the call, that writes the nags. If we step over this call with JMP blabla and three NOPīs (i know, itīs not what +ORC told us; we can set also other instructions), the prog starts without the nags (the about screen is also away).If someone didnīt understand what iīve written, please mail it. I know i have probs to explain someone something :-( But i will do my best.Byez,NiKaiLight from NiKai by D0gBytes , Thu Nov 12 11:28