|
Tutorial Cracking : WinRescue XP v1.08.44
|
Target :
WinRescue XP v1.08.44
Tool :
OllyDebug Defixed
The Backup and Recovery Tool for Windows XP
Buka programnya.
Programnya shareware selama 30 hari
Isi registrasi keynya dengan serial palsu.
Trus klik continue dan muncul "Warning - Incorrect Key Entered"
Load file RescueXP.exe ke OllyDebug.
Buka Reference Text Stringnya.
Cari kata "Warning"
004D266D MOV EAX,004D2840 ASCII "WARNING - Incorrect Key Entered",CR,CR,"WinRescue may be used without entering a Key",CR,CR,"WinRescue Terminating."
Klik dua kali.
004D2637 E8 3C2DF3FF CALL 00405378
004D263C 85C0 TEST EAX,EAX
004D263E 74 2D JE SHORT 004D266D
004D2640 33D2 XOR EDX,EDX
004D2642 8B83 04030000 MOV EAX,DWORD PTR DS:[EBX+304]
004D2648 E8 A7D1F7FF CALL 0044F7F4
004D264D B8 00284D00 MOV EAX,004D2800 ; ASCII "Registration Key Accepted",CR,CR,"Thank you for registering."
004D2652 E8 E965F7FF CALL 00448C40
004D2657 A1 B0655600 MOV EAX,DWORD PTR DS:[5665B0]
004D265C 8B00 MOV EAX,DWORD PTR DS:[EAX]
004D265E 8B80 20030000 MOV EAX,DWORD PTR DS:[EAX+320]
004D2664 C740 0C 64000>MOV DWORD PTR DS:[EAX+C],64
004D266B EB 16 JMP SHORT 004D2683
004D266D B8 40284D00 MOV EAX,004D2840 ; ASCII "WARNING - Incorrect Key Entered",CR,CR,"WinRescue may be used without entering a Key",CR,CR,"WinRescue Terminating."
Dialamat "004D2637" beri breakpoint
Restart dan jalankan lagi Ollynya.
Isi registasinya trus klik continue.
Yap.....olly akan break dialamat "004D2637"
Dikolom "Registers (FPU)"
EAX 012418E4 ASCII "jabeZ4:9-10"
ECX 00000000
EDX 0121BF9C ASCII "1234567890"
EBX 0122008C
ESP 0012EAAC
EBP 0012ECDC
ESI 0123D984 ASCII "XcG"
EDI 0012EAED
EIP 004D2637 RescueXP.004D2637
Selesai sudah.
Catat registrasi keynya.
Jangan lupa kasih komentarnya ya...!
23/11/09
|