Welcome back.
In today's lesson we are going to continue to the other objectives.
So let's continue.
Open the target patch on file
and ask you to skip it.
His
now we're at the entry point.
Click on Run and you'll see the next screen has not been shown.
We already successfully bashed it in the earlier lesson.
However the status still shows like not removed.
So our objective in this lesson is to change the status and also the button when you click on the button
issue recheck and change the status so in order to do that we can search for this string.
Now normally when we search for strings we will right click and search for current module.
Make sure you're using module before you do this and then go ahead click on the string references and
he has found all the strings in this for you.
Now let's look for the string in the not removed.
It appears here and here twice.
So let's put breakpoints on both of them and see which one hits when we click on the reset button.
So we put a breakpoint here selecting this and press F two to set a breakpoint and then you display
the other one which is this one and put breakpoint here too by pressing have to.
So we have two big points here and here.
And let's restart the program running.
So the first breakpoint hits.
This is the start of the program.
Even before we click on the button.
So this one is the wrong one.
Just remove this double click to remove the separate point click run again.
Now the main window shows.
So we click on this button and we check and see if it hits the other breakpoint yes it does.
So a book is a pass on this breakpoint.
The second one.
So if we analyze this code it is trying to send the text here to night not removed.
And what brought it here.
As you can see from the arrow it came from up here.
So it is this junkies who came to this instruction to set this night.
So we put a breakpoint here and remove this one.
Yes we are going to analyze this gem.
So now let's restarting hideous brick pine restart and run click on recheck.
So now he has a pass on the new breakpoint which causes the jump to the back message string.
So this is a string we don't.
1 that means we should not be jumping here.
So at the moment it is jump equal to zero.
Right.
That means if the Z flag is set to 1 he will jump.
So at the moment the Zero flag is set to 1.
That's why he is jumping.
So in order not to jump toggle this by double clicking.
So it always zero.
And so the jump is not taken is from here as well and the Arrow has changed to agree.
So it is not jumping.
So now we can f it just to test our hypothesis press F it and it is on now.
Press TV It again takes a comparison here.
Me press F it.
We are now here and another decision is to be made.
John.
Equal jump.
Equally if the zero fly is one.
So in this case the Zero flag is not one.
So it is zero flag is not one.
It is not going to become.
So it is not going to jam.
It is going to shows this that message.
So we don't want to see this bad message.
So we wanted to jam and if it jams we jump over this bad message and overly spread message and jump
all the way to this instruction which is the good message.
So this is this is supposed to jump.
So we should toggle the zero fly double click on it.
And so it will jam.
So now we press on it.
And indeed it jumps and here a chance to show the plane.
Correct.
Good job.
So over here we can press F it and see what happens to the instruction as we keep on pressing f it.
And you can see it continues to and finally shows us the good message here.
Thank you for registering this software.
So congratulations you have found the answer.
The solution.
So what remains now is to patch it.
So let's go and try to patch this thing so over here we saw that we should.
Well we should not jump if he jumps he will land over here net not removed.
So in order to make sure it does not jam we have to know of this.
So we double click this and we make sure we check on gif size and feel with no apps and we typing and
will be now and click ok next when it comes to this location it is supposed to jump if he doesn't jump
is going to show us to back that message.
So it is supposed to jump to the good message.
So we're here to ensure that he jumps.
We should change this to an unconditional jump.
So DoubleClick and just change is instruction from the jump equal to unconditional jump and make sure
you check on this tick to see if the session is smaller they are the same size.
Yes it is smaller than all the same size which is good.
And he should not be larger.
He is larger than you can do it.
So Leslie OK to confirm this and we are done.
So now let's patch it.
So click on File patch that file and let's give it the new extension you call it patch 2 and click save.
And that is done.
Now we can test it.
Let's open.
Best to has Randy there is no next screen.
Good.
Now let's try this.
Click on recheck to see what happens.
Yes.
Thank you.
Thank you for registering this software.
And you can see the status has also changed to clean crack.
Good job.
So congratulations.
We have done it.
Thank you for watching.
I'll see you in the next challenge.