hibernator Posted May 31, 2012 Share Posted May 31, 2012 Hi all, It is a simple app with a nagscreen . Try to remove nag secreen Best of luck !! P.S. This is 4 beginners only , LOL Crack me#1.rar Link to comment Share on other sites More sharing options...
NikolayD Posted May 31, 2012 Share Posted May 31, 2012 DDD I don't see nag. Just run crackme it sure simple ))) Link to comment Share on other sites More sharing options...
hibernator Posted May 31, 2012 Author Share Posted May 31, 2012 This is the nag screen . Probably it pops up when you run the crackme . Link to comment Share on other sites More sharing options...
NikolayD Posted May 31, 2012 Share Posted May 31, 2012 Think i'm joking?! ) See it http://rghost.ru/private/38396608/3793d2a6b243684d5ccb3ed61fc4f2b3 1 Link to comment Share on other sites More sharing options...
C0M3ND4D0R Posted May 31, 2012 Share Posted May 31, 2012 Just take NOP......the API MessageBoxIt is further promotion, than a crackme.Thanks 1 Link to comment Share on other sites More sharing options...
hibernator Posted May 31, 2012 Author Share Posted May 31, 2012 Think i'm joking?! ) See it http://rghost.ru/pri...ccb3ed61fc4f2b3 Whoa , whoa !! I don't know how that happened Everything ran as expected on my computer . This piece of code was supposed to give the nag "invoke MessageBox,hWnd, addr Remove, addr NAG, MB_APPLMODAL " Thanks Link to comment Share on other sites More sharing options...
hibernator Posted May 31, 2012 Author Share Posted May 31, 2012 (edited) Just take NOP......the API MessageBox It is further promotion, than a crackme. Thanks Yup , but there is a quicker way than NOPing . Any other ideas would be greately appreciated. I am a still a newbie though . Thanks Edited May 31, 2012 by genocide Link to comment Share on other sites More sharing options...
kakamail Posted May 31, 2012 Share Posted May 31, 2012 (edited) The same with NikolayD, no nag! I know 2 method is nop and change push 0 to push 1.Another can be used but when you know how the message is called Edited May 31, 2012 by kakamail 1 Link to comment Share on other sites More sharing options...
hibernator Posted May 31, 2012 Author Share Posted May 31, 2012 Whoa , whoa !! I don't know how that happened Everything ran as expected on my computer . This piece of code was supposed to give the nag "invoke MessageBox,hWnd, addr Remove, addr NAG, MB_APPLMODAL " Thanks The same with NikolayD, no nag! I know 2 method is nop and change push 0 to push 1. Another can be used but when you know how the message is called I am sorry but I still can't figure out the cause of the problem . Here is the source code . You may want to compile it yourself and run again Link to comment Share on other sites More sharing options...
hibernator Posted May 31, 2012 Author Share Posted May 31, 2012 Link to comment Share on other sites More sharing options...
C0M3ND4D0R Posted May 31, 2012 Share Posted May 31, 2012 Download Source failed... Link to comment Share on other sites More sharing options...
hibernator Posted June 3, 2012 Author Share Posted June 3, 2012 Download Source failed... Better late then never Sorry I was busy ! . Please help me find the bug Crack me Source.rar Link to comment Share on other sites More sharing options...
DeadAndGone Posted June 3, 2012 Share Posted June 3, 2012 I can't compile the source because i don't have a compileren installed yet.But, (im not sure), it seems you should invoke the messagebox at WndProcedure at initializing. 1 Link to comment Share on other sites More sharing options...
C0M3ND4D0R Posted June 3, 2012 Share Posted June 3, 2012 Thank you for providing the source.....I have not had much time to analyze despite being written in MASM, I do not use WinASM. I use RadASM.so try:LRESULT CALLBACK WndProcedure (HWND hWnd, uMsg UINT, WPARAM wParam, lParam LPARAM);create a return...NAG was not removed, will give a return FALSE, to stop the application.if( NAG )return FALSEcan be an alternative.Hug Link to comment Share on other sites More sharing options...
sama Posted June 3, 2012 Share Posted June 3, 2012 (edited) the place where you call MessageBox is wrong (message can not be displayed due the fact that at this moment there is no valid handle of the window) if you call it from: .ELSEIF eax==WM_CREATE invoke MessageBoxA,hWnd, addr Remove, addr NAG, MB_APPLMODAL ; My nag screen! here you got what you want, at least i hope. Edited June 3, 2012 by sama 1 Link to comment Share on other sites More sharing options...
Teddy Rogers Posted June 11, 2012 Share Posted June 11, 2012 The [crackme] tag has been added to your topic title.Please remember to follow and adhere to the topic title format - thankyou![This is an automated reply] Link to comment Share on other sites More sharing options...
Apuromafo Posted June 15, 2012 Share Posted June 15, 2012 if wana remove only with Nop or FNOP004013B5 D9D0 FNOP004013B7 D9D0 FNOP004013B9 D9D0 FNOP004013BB D9D0 FNOP004013BD D9D0 FNOP004013BF D9D0 FNOP004013C1 D9D0 FNOP004013C3 D9D0 FNOP004013C5 D9D0 FNOP004013C7 D9D0 FNOPmaybe in fact maybe work better with other push before (push 0) or changing maybe to a push 0 to push 40 1 Link to comment Share on other sites More sharing options...
hibernator Posted October 20, 2012 Author Share Posted October 20, 2012 Well, back after quite some time Thanks goes to all. I think an elegant way to remove MBs is to open by CFF Explorer and change the "MessageBoxA" to "GetMessageA". Read it somewhere in ARTeams ezine Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now