I got it!
Once again a brave knight saved a pooy guy...
And I moved the Nag.
Code:
00422370 A1 207A4300 mov eax,dword ptr ds:[437A20] ==>patch here
00422375 50 push eax
00422376 FF15 CC104000 call dword ptr ds:[<&kernel32.lstrlen>] ; kernel32.lstrlenA
0042237C 85C0 test eax,eax
0042237E 75 0E jnz short HFFR_d__.0042238E ===>must jump
00422380 50 push eax
00422381 A3 08BE4000 mov dword ptr ds:[40BE08],eax
00422386 E8 D5000000 call HFFR_d__.00422460 ===>Nag window
let's see the memory:
00437A20 61 38 3E 00 00 00 00 00 a8>.....
00437A28 00 00 00 00 00 00 00 00 ........
Patch it:
00437A20 28 7A 43 00 00 00 00 00 (zC.....
00437A28 77 69 6E 6E 64 79 00 00 winndy..
No more Nags.
It's your honour,hosiminh.
Regards