|
Tutorial Cracking :
Naevius YouTube Converter v2.0
|
Target : Naevius YouTube Converter v2.0
Tool : OllyDebug DeFixeD
Exe Info PE
Naevius YouTube Converter is a convenient tool to download and convert your favorite videos from YouTube website into the standard AVI DivX video format. To download a video to your computer, enter the YouTube URL for the video, click Start button. It will be downloaded and converted in AVI format - use Windows Media Player or another compatible player to view it.
Test Dulu
Buka Naevius YouTube Converter, kita lihat apa saja yang muncul...!
Demo 30 hari.
Menu Registrasi di Help.
Langkah pertama :
Scan ytconv.exe dengan Exe Info PE untuk melihat programnya diproteksi apa??
"Borland Delphi ( 2.0 - 7.0 ) 1992 - www.borland.com".
Langkah kedua :
Buka ytconv.exe dengan OllyDebug DeFixeD.
Di "CPU - main thread, module ytconv.exe", klik kanan pilih "Search for" terus "All referenced text strings".
Geser keatas terus klik kanan, cari kata "incorrect".
0051B5F8 PUSH 0051B6A0 ASCII "The registration key is incorrect."
Klik dua kali.
0051B5A8 E8 97BA0100 CALL 00537044
0051B5AD 84C0 TEST AL,AL
0051B5AF 74 40 JE SHORT 0051B5F1
0051B5B1 6A 00 PUSH 0
0051B5B3 68 70B65100 PUSH 0051B670 ; ASCII "Thank you!"
0051B5B8 68 7CB65100 PUSH 0051B67C ; ASCII "Thank you for registering!"
0051B5BD A1 DCFF5300 MOV EAX,DWORD PTR DS:[53FFDC]
0051B5C2 E8 397CF4FF CALL 00463200
0051B5C7 50 PUSH EAX ; hOwner
0051B5C8 E8 03BCEEFF CALL ; MessageBoxA
0051B5CD A1 54E05300 MOV EAX,DWORD PTR DS:[53E054]
0051B5D2 8B00 MOV EAX,DWORD PTR DS:[EAX]
0051B5D4 E8 A7BC0100 CALL 00537280
0051B5D9 A1 DCFF5300 MOV EAX,DWORD PTR DS:[53FFDC]
0051B5DE E8 99DCF5FF CALL 0047927C
0051B5E3 A1 54E05300 MOV EAX,DWORD PTR DS:[53E054]
0051B5E8 8B00 MOV EAX,DWORD PTR DS:[EAX]
0051B5EA E8 8DDCF5FF CALL 0047927C
0051B5EF EB 1C JMP SHORT 0051B60D
0051B5F1 6A 00 PUSH 0
0051B5F3 68 98B65100 PUSH 0051B698 ; ASCII "Error"
0051B5F8 68 A0B65100 PUSH 0051B6A0 ; ASCII "The registration key is incorrect."
Beri breakpoint atau F2 dialamat "0051B5A8"
Tekan run atau F9.
Isi registrasinya.
Olly akan break dialamat "0051B5A8"
Tekan step into atau F7
Tekan step over atau F8
00537051 75 F9 JNZ SHORT 0053704C
00537053 51 PUSH ECX
Beri breakpoint atau F2 dialamat "00537053"
Tekan run atau F9.
Olly akan break dialamat "00537053"
Tekan step over atau F8 lagi
005370E2 75 D7 JNZ SHORT 005370BB
005370E4 33C0 XOR EAX,EAX
Beri breakpoint atau F2 dialamat "005370E4"
Tekan run atau F9.
Olly akan break dialamat "005370E4"
Tekan step over atau F8 lagi
00537140 8B55 EC MOV EDX,DWORD PTR SS:[EBP-14]
Stack SS:[0012E854]=011FFB30, (ASCII "383A4249559A9bBC9dB0b2D5eeEC10a17618b1C11d11F
722b25827f2BB2e32DC31334E3853C23fes6E616D65")
EDX=00000000
Registrasi keynya :
383A4249559A9bBC9dB0b2D5eeEC10a17618b1C11d11F
722b25827f2BB2e32DC31334E3853C23fes6E616D65
Langkah ketiga :
Jalankan Naevius YouTube Converter.
Isi registernya dengan kode diatas.
Ha...ha...ha... sukses sudah.
12/02/10
|