Removal of Activation Overlay/Watermark in unactivated RTM. Need Help!

Discussion in 'Windows 8' started by dummekuehe, Aug 7, 2012.

  1. UnknownRE

    UnknownRE MDL Junior Member

    Aug 8, 2012
    52
    4
    0
    #101 UnknownRE, Aug 10, 2012
    Last edited: Aug 10, 2012
    The crack doesn't work after 4 hours the activation watermark came back for me !! I will try to find another solution
     
  2. palbertsma

    palbertsma MDL Member

    Jun 3, 2009
    186
    23
    10
    Do you mean the crack for x32 or x64?
     
  3. Belarathon

    Belarathon MDL Senior Member

    Nov 21, 2007
    316
    37
    10
    LOL You beat me to it.
     
  4. DaveMurray

    DaveMurray MDL Junior Member

    Apr 18, 2009
    94
    13
    0
    anyway, lol, my bro has pro version installed, i have enterprise. if i will copy the file from my bro pc, will be all right?
     
  5. UnknownRE

    UnknownRE MDL Junior Member

    Aug 8, 2012
    52
    4
    0
    the x64 version (hmm in other VMware it still works after 4 hours (enterprise edition) hmmmm
     
  6. dummekuehe

    dummekuehe MDL Senior Member

    Jan 11, 2009
    494
    112
    10
    #106 dummekuehe, Aug 10, 2012
    Last edited: Aug 10, 2012
    (OP)
    so did you copy the wrong file?
    or does one of the patched files actually not work? x86/32bit or 64bit?
     
  7. UnknownRE

    UnknownRE MDL Junior Member

    Aug 8, 2012
    52
    4
    0
    #107 UnknownRE, Aug 10, 2012
    Last edited: Aug 10, 2012
    I think it doesn't work but I tried something else I managed to unlock the personalization screen (Windows.UI.Immersive.dll) but after a reboot it was back to normal. Is there any automatic backup location for Windows 8 that iam unaware off ? EDIT: hmm I forgot 2 folders I think :S
    C:\Windows\WinSxS\wow64_microsoft-windows-twinui_31bf3856ad364e35_6.2.9200.16384_none_d6c5c96777862194 <--------
    C:\Windows\WinSxS\amd64_microsoft-windows-twinui_31bf3856ad364e35_6.2.9200.16384_none_cc711f1543255f99 <--------
    C:\Windows\System32
    C:\Windows\SysWOW64
     
  8. WinFührer

    WinFührer MDL Novice

    Jun 17, 2011
    42
    13
    0
    If You have unlock controll panell you must patch this file:
    C:\Windows\ImmersiveControlPanel\SystemSettings.exe
     
  9. chbaldo

    chbaldo MDL Senior Member

    Jan 29, 2011
    251
    124
    10
    #109 chbaldo, Aug 10, 2012
    Last edited: Aug 10, 2012
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. UnknownRE

    UnknownRE MDL Junior Member

    Aug 8, 2012
    52
    4
    0
    that file only got pointers to other files from what I can tell
     
  11. UnknownRE

    UnknownRE MDL Junior Member

    Aug 8, 2012
    52
    4
    0
    Updated Crack files for X64 (here are the Personalization and watermark files)

    Here is a link to download the patched files for both. I upload these so other can check why it does not work. I replaced all the files at the appropriate locations but after a reboot the files are back as they where in the original state. I don't know where the backup files are located of these files. if someone could help me that would be nice.
    (These files are for the X64 version of Windows 8)

    LINK:
    crocko.com/218CF4A66B4C477B97D01E080E648DF8/UnknownRE_Windows8_Watermark_and_settingsPanel_Remover.zip
     
  12. Chris123NT

    Chris123NT MDL Expert

    Oct 23, 2010
    1,070
    793
    60
    Just thinking out loud here, but the reason I suggested jumping over the RoGetActivationFactory call in explorer in the first place was the idea that hit me the other night that if this call never actually loads, then maybe the regular build text on the desktop will go away as well as the system settings being fully unlocked since I *think* this is all managed as part of the shell, but I could be wrong about the system settings part.
     
  13. LiveFreeDead

    LiveFreeDead MDL Member

    Aug 3, 2012
    122
    77
    10
    #113 LiveFreeDead, Aug 11, 2012
    Last edited: Aug 11, 2012
    Chris even I am smart enough to check the global return values for a called function to validate it's been used, if Microsoft haven't done this in their Activation code of all things I think I'll be moving to Linux... in other words there is no way that skipping that Code should work! your right in saying it would work without any protections in place, but they must!

    w00t thanks for the screenshot, I'll see what I can do, just wish I knew how to edit code in IDA, maybe I should spend a few hours on reading and youtube to figure it out.

    I'll be trying out UnknownRE's work while I am away, it takes 4 hours to know that it's worked, like clockwork, so not 3 and no point in posting about it to much until after that time has elapsed on your test VM.

    That Automated method is a nice cmd prompt based one :D even detected I am running x64 and told me to go away.

    -edit-

    Well I figured out pressing F2 on Hex view mode in IDA will let me edit values, but not found the save binary again after I am done editing it yet (Save to File is grayed out in the context menu and Produce file fails from File menu). I'll be back to report on the VM test in 6 hours, places to be today sorry.
     
  14. Chris123NT

    Chris123NT MDL Expert

    Oct 23, 2010
    1,070
    793
    60
    Oh ok I get what you're saying. I really don't know anything about disassembly etc... so I had no idea about any protections, in my mind it was simple, but now I see it's a little more complicated than that.
     
  15. Belarathon

    Belarathon MDL Senior Member

    Nov 21, 2007
    316
    37
    10
    #115 Belarathon, Aug 11, 2012
    Last edited: Aug 11, 2012
    I've been running the patched x64 twinui.dll on Server 2012 for about six hours. Only now has the Activate overlay returned. Strange. I checked the hash and it's still Unknown's file.
     
  16. gersma

    gersma MDL Junior Member

    Sep 20, 2008
    57
    9
    0
    #116 gersma, Aug 11, 2012
    Last edited: Aug 11, 2012
    Running the patched x64 twinmui.dll for 5h42mins, no dark clouds at the horizon yet. My system version is W8 Enterprise X64. I only replaced the dll located in syswow64. I'll keep it running and keep you guys posted.

    Determine your uptime (in case you forgot when you fired up your rig) :
    1) open cmd window
    2) write the command net stats srv and press enter
    3) the line that start with statistics since provides the time that the server was up from

    edit : already running for 7hrs straight, no sign of the overlay ! job well done !
     
  17. Mrx47

    Mrx47 MDL Addicted

    Apr 6, 2011
    571
    90
    30
    So I have to put this file into system32 or syswow64 Folder?

     
  18. DaveMurray

    DaveMurray MDL Junior Member

    Apr 18, 2009
    94
    13
    0
    #118 DaveMurray, Aug 11, 2012
    Last edited: Aug 11, 2012
    what patched x64 version do you use?

    this? ---> crocko.com/218CF4A66B4C477B97D01E080E648DF8/UnknownRE_Windows8_Watermark_and_settingsPanel_Rem over.zip

    Metro apps, working as should? Do you have test it after reboot or power sleep?

    The other: crocko.com/472FA627B03C4879AAF5B58417688A9C/UnknownRE_twinui.dll_x64.zip (for x64 Systems) do not work after UnknownRE report:

    (post 110)
     
  19. hellohello

    hellohello MDL Junior Member

    May 10, 2007
    98
    20
    0
    What is the limitation of unactivated windows 8? All I can see is the watermark and unable to customize personal stuff like photo, colours, the rest seems to be just fine.

    And if watermark is removable this way, I don't think I really care about the customization part lol, it is still not the main OS yet.

    Will the notification mode stays forever? Or just 30 days then it will become more intrusive like only able to copy file.

    Thanks
     
  20. Mrx47

    Mrx47 MDL Addicted

    Apr 6, 2011
    571
    90
    30
    People, READ!

    You gave your answer yourself:
    Yes.