Name      : Norton Antivirus

Version   : 5.0

Editor    : Symantec

Target    : Navw32.exe

Tools     : Softice
	    Brain
	    	    
Cracker   : LW2000

Tutorial  : No.14

http://www.symantec.com


---
DISCLAIMER
For educational purposes only!
I hold no responsibility of the mis-used of this material!
---



Please excuse my poor english, its not my mother language....


Ok! First we must tell Norton Antivirus that we are online with Symantec,
because we would like to enter our Unlock-Code. Our goal is to display
the unlock window.


1.	Start NAV and press "Buy Now". Close Nav. Open the Rsagent.ini,
        that is located in your windows directory and change
        mailstat = 0 to mailstat = 1. Save your work.


2.	Load NAV and press "Buy Now", again. Press [ctrl]+[d] to switch
        to Softice. Type: 'bpx getdlgitemtexta' to set a breakpoint on
        getdlgitemtexta. Press F5 to return to Norton Antivirus.

3.	Enter the details:
	First Name: LW2000
	Last Name: greetz to tKC
	Code: 1234567890

	Press [OK]. Sice pops up.

4.	Press F11 to get the caller.
	Goto 10005681     83F90A    CMP ECX,0A 
	Type '? ecx'. You'll see this:
	0000000A 0000 000010 "0"  <-- length of your code


5.	Trace with F10 to this piece of code.


	10005708   51               PUSH ECX 
	10005709   52               PUSH EDX 
	1000570A   50               PUSH EAX 
	1000570B   E870630000       CALL 00BA80 
	10005710   83C40C           ADD ESP,0C 
	10005713   8D8C24D8000000   LEA ECX,[ESP+000000D8] 
  

6. 	Goto '1000571A   PUSH  10030F40' then type 'd 100030F40'
	Your code will be shown.

	Now goto '1000571F  PUSH ECX' then type d ecx. This will show
        the correct unlock code. Enter 'db *' and press F5 to
        return to NAV. Now enter your correct unlock code. 
	Press [OK].

  
Congratulation! You are an registered user!

FINISH! Easy, or?

cu LW2000
Any comments? Mail me LW2000@gmx.net !!!
----
tKC, thx for your tutors!
I started with tutor 1 and i still read them... they are the best!