Cracking for Newbies  - by Dahood
                

Target: Break Reminder v 3.2.35

Tools used: W32dasm
	    Hview
	    

Protection:
1.Serial


NOTE: This tutorial is not totally for newbies so i excpect that u know
1.how to use w32dasm
2.how to use hview (change,search,etc...)
3.Assembly

open the program and try to register. write down the error message that u got
disassemble the program and search for sorry and u should see this....

* Possible StringData Ref from Code Obj ->"Incorrect License"
                                  |
:0044BC57 C7458C007F4100          mov [ebp-74], 00417F00
:0044BC5E C7458408000000          mov [ebp-7C], 00000008

* Reference To: MSVBVM50.__vbaVarDup, Ord:0000h
                                  |
:0044BC65 FF1520F44500            Call dword ptr [0045F420]

* Reference To: MSVBVM50.__vbaStrCat, Ord:0000h
                                  |
:0044BC6B 8B1DB0F24500            mov ebx, dword ptr [0045F2B0]

* Possible StringData Ref from Code Obj ->"Sorry - The License Number you "
                                        ->"entered was incorrect"
                                  |
:0044BC71 683C7E4100              push 00417E3C

now scroll up a bit and look for a test or a cmp then a je or jne
couple of lines up u should see this 
:0044BC33 85DB                    test ebx, ebx
:0044BC35 0F85D8000000            jne 0044BD13  ***interesting*** check where its going
:0044BC3B B904000280              mov ecx, 80020004
:0044BC40 B80A000000              mov eax, 0000000A
:0044BC45 894D9C                  mov dword ptr [ebp-64], ecx
:0044BC48 894DAC                  mov dword ptr [ebp-54], ecx
:0044BC4B 8D5584                  lea edx, dword ptr [ebp-7C]
:0044BC4E 8D4DB4                  lea ecx, dword ptr [ebp-4C]
:0044BC51 894594                  mov dword ptr [ebp-6C], eax
:0044BC54 8945A4                  mov dword ptr [ebp-5C], eax

* Possible StringData Ref from Code Obj ->"Incorrect License"

write down the offset address which is 4b035 and open u r fav hex editor and open break reminder.
go to the offset add and change the jne to je
:0044BC35 0F85D8000000            jne 0044BD13
will be
:0044BC35 0F84D8000000            je 0044BD13

now save and open and try to register use any name and any number...

i hope i didnt confuse u and if u have any question, comments
my icq# is 69518421 or u can e mail me at webcrawler28@hotmail.com

i would like to say thanks to all the crackers 2 many 2 list , for helpin me also for there 
tutorials
also a big thanks to krobar's site http://zor.org/krobar
 
			Cracking for Newbies  - by Dahood