Norton Uninstall
Introduction |
Greetings and welcome to the noble art of reverse engineering!
Tools required |
Numega SoftIce v3.22
Target's URL |
http://www.symantec.com
Essay |
Step1. Run 'Norton Uninstall.exe' and choose 'Buy Now'.
Step2. Exit Norton and go into: C:\WINDOWS...Rsagent.ini
if you tracethrough the code you will find 'mailstat = 0' change it to '1',
like this: mailstat= 1
Note: If youhave more then one nortonprog. installad and cracked make sure that
all mailstat =1.
save and exit rsagent.ini.
Step3. Run Norton again and choose 'Buy Now' now you should be ableto see the unlocking
window!
How did thathappen?
Well, when wechanged mailstat from 0 to 1 we faked sending the reg.form!
0= No onlineregistration has been made, [buy Now]= display registration form.
1= Online registrationhas been made and is ok, display unlocking window!
Ok, start softice(ctrl + d) and place a bp on: bpx getdlgitemtexta
Step4. Press 'F5' to return to the unlocking-window and type:
McCodEMaN
TRES2000
1234567
thenpress [OK].
Step5. Click on 'F11'.
Step6. Trace down with 'F10' until you see...........
:1001293F 51 PUSH ECX <=Saves valid serial!
Step7. Type d ecx and press on [enter]
Step8. Now should you be able to see the valid serial in the prot- window!
Step9. Type bc * and [Enter] to remove all bp`s.
Final Notes |
BACK |