Posted by CHuPaCaBRa on 1/16/2000, 8:15 pm
202.160.254.201
Hi Again..this is my answer for the second tasks ( 2.1 to 2.3 ):2.1 Using SoftICE :
:00446E70 call 00446BBC ; This call's job is to calculate the Time-Trial Period
:00446E75 pop ecx
:00446E76 test al, al ; AL = 1 >> OK to proceed
AL = 0 >> The Time - Trial Period is over
:00446E78 jne 00447027 ; Jump if still OK:00447027 test bl, bl ; BL = 1 >> Still Shareware
BL = 0 >> Registered
:00447029 je 004472F0 ; Just change JE to JNE and the nag sreen will be gone.
2.2 Using SoftICE ( again :-) ) ::00446E70 call 00446BBC ; This call's job is to calculate the Time-Trial Period
:00446E75 pop ecx
:00446E76 test al, al ; AL = 1 >> OK to proceed
AL = 0 >> The Time - Trial Period is over
:00446E78 jne 00447027 ; Jump if still OK, so just change JNE 00447027 to JMP 004470272.3 There are 2 steps to do this :
Step 1 :
Input user name, company and any number for Key Code. This data is going to be saved in the Registry, whether is valid or not.Step 2 :
Find "Unregistered" in W32Dasm. A few lines above it is a conditional jump, this is where the patch go.:00446774 E8FB020000 call 00446A74
:00446779 59 pop ecx
:0044677A 84C0 test al, al
:0044677C 0F85E6000000 jne 00446868 ; Simply change this JNE to JMP.
:00446782 66C785FCFDFFFF0800 mov word ptr [ebp+FFFFFDFC], 0008* Possible StringData Ref from Data Obj ->"Unregistered"
|
:0044678B 681E9F4900 push 00499F1EThat's it for now....I'll try to find the serial number later when I have enough time :-)
CHuPaCaBRa