Posted by HaQue on 1/22/2000, 12:30 am
, in reply to "Cray_Z's task ---2--- answers so far..."
203.108.0.57
Hi there...
email me direct if you would like & I can work with you
to get SI running on your computer.in regards to your first answer to task II:
you wrote "By changing the jump if equal at :00446efc to nop nop"
well, I went there in w32dasm and there is no je at that location.
I did the same as you where I disabled the NAG & the EXPIRE at the
same time, so I had to rethink it to get closer to the messagebox.I assume the code location you changed is here, because thats how I did it first..:
:00446E54 E81BFCFFFF call 00446A74 <---is it regged?
:00446E59 59 pop ecx
:00446E5A 84C0 test al, al <---the test to see if regged
:00446E5C 7411 je 00446E6F <--jump if not regged (did you nop,nop this?)
:00446E5E 8B8514FDFFFF mov eax, dword ptr [ebp+FFFFFD14]
:00446E64 64A300000000 mov dword ptr fs:[00000000], eax
:00446E6A E98D040000 jmp 004472FC <--- jump if IS regged* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446E5C(C)
|
:00446E6F 57 push edinow because the messagebox is created after the "jmp if not regged"
you need to let the program follow that jump to this:
:00446E6F 57 push edi
:00446E70 E847FDFFFF call 00446BBC
:00446E75 59 pop ecx
:00446E76 84C0 test al, al
:00446E78 0F85A9010000 jne 00447027 <------ follow this jump too, because
if you dont, it goes to the "expired" msg
we land here:
:00447027 84DB test bl, bl
:00447029 0F84C1020000 je 004472F0 <---- patch this one to "jne"
and it will ONLY do the startup nag.I hope that helped a bit!
keep with us and it will eventually get easier. I am learning alot from this and enjoying it immensely!HaQue