Cracking for Newbies  - by Dahood
                

Target: SpeederXp Version 1.01

Tools used: W32dasm
	    Hview


Protection: Serial


NOTE: This tutorial is not totally for newbies so i excpect that u know
1.how to use w32dasm
2.how to use hview (change,search,etc...)
3.Assembly


Open the program and try to register 
write down the error message u get now disassemble the register.exe program.

find the error message i got

* Reference To: MFC42.Ordinal:1847, Ord:1847h
                                  |
:00401D85 E860020000              Call 00401FEA 
:00401D8A 8BCE                    mov ecx, esi
:00401D8C E87FFFFFFF              call 00401D10
:00401D91 6A00                    push 00000000
:00401D93 6A40                    push 00000040

* Possible StringData Ref from Data Obj ->"After you register your speeder, "
                                        ->"Please restart it."
                                  |
:00401D95 68E4504000              push 004050E4

now scroll up a bit and ull see 2 calls lets check the first call 
and u get this
* Referenced by a CALL at Addresses:
|:00401438   , :00401D85   
|

* Reference To: MFC42.Ordinal:1847, Ord:1847h
                                  |
:00401FEA FF2528314000            Jmp dword ptr [00403128]

so this is called from 2 locations the 0040ad85 is where we came from
and we are about to see what the other one does...
so go to the address 00401438 and ull end up here
* Reference To: MFC42.Ordinal:1847, Ord:1847h
                                  |
:00401438 E8AD0B0000              Call 00401FEA
k now scroll up a bit maybe ull see messageboxA or postmessageA

* Reference To: USER32.PostMessageA, Ord:01FFh
                                  |
:0040141E FF1594324000            Call dword ptr [00403294]
:00401424 391D20504000            cmp dword ptr [00405020], ebx
:0040142A 7462                    je 0040148E  ==>;jump if equal 
:0040142C 53                      push ebx        ;then display    
:0040142D 6A09                    push 00000009   ;something.
:0040142F 8BCE                    mov ecx, esi

* Reference To: MFC42.Ordinal:0C14, Ord:0C14h
                                  |
:00401431 E8BA0B0000              Call 00401FF0
:00401436 8BC8                    mov ecx, eax

k let see what's the display of data object
i assume ur using W32dasm click on hexdata then hex display of data object/segment 
and ull some a lot of crap and with the cracp u see
at line 00405050 -1015-  - what the hell does this mean 
anyways lets change the 
:0040142A 7462                    je 0040148E
to
:0040142A 7462                    jne 0040148E
now save and open register.exe. strange instead of the machine code
i see -1015-  - . k let me see if i copy it and paste it in the register box.
did it work? are u registered? yep

This is my Second tutorial. i hope i didnt confuse u and if u have any question, comments
my icq# is 69518421 or u can e mail me at webcrawler28@hotmail.com

i would like to say thanks to all the crackers 2 many 2 list , for helpin me also for there 
tutorials
also a big thanks to krobar's site: http://zor.org/krobar
 
				Cracking for Newbies  - by Dahood