|
Tutorial Cracking : Sistem Informasi Sekolah v1.088
|
Target :
Sistem Informasi Sekolah v1.088
Tool :
OllyDebug Defixed
Exe Info PE
Untuk memastikan proteksi softwarenya, langsung cek dengan Exe Info PE.
"MS Visual Basic 5.0-6.0 EXE"
Buka file Sister Edisi Beta.exe dengan OllyDebug DeFixeD.
Langsung cari "Referenced Text Strings"
Masukkan kata "Serial Number tidak diterima".
Jangan lupa hilangkan tanda di case sensitive dan tandai entire scope.
Kita berada dialamat
01CE79DC MOV DWORD PTR SS:[EBP-F0],004BB998 UNICODE "Serial Number tidak diterima"
Klik dua kali dialamat diatas
01CE7990 B9 04000280 MOV ECX,80020004
01CE7995 B8 0A000000 MOV EAX,0A
01CE799A 898D 70FFFFFF MOV DWORD PTR SS:[EBP-90],ECX
01CE79A0 894D 80 MOV DWORD PTR SS:[EBP-80],ECX
01CE79A3 BB 08000000 MOV EBX,8
01CE79A8 8D95 F8FEFFFF LEA EDX,DWORD PTR SS:[EBP-108]
01CE79AE 8D4D 88 LEA ECX,DWORD PTR SS:[EBP-78]
01CE79B1 8985 68FFFFFF MOV DWORD PTR SS:[EBP-98],EAX
01CE79B7 8985 78FFFFFF MOV DWORD PTR SS:[EBP-88],EAX
01CE79BD C785 00FFFFFF>MOV DWORD PTR SS:[EBP-100],004BB618 ; UNICODE "Serial Number Salah"
01CE79C7 899D F8FEFFFF MOV DWORD PTR SS:[EBP-108],EBX
01CE79CD FF15 88134000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarDu>; MSVBVM60.__vbaVarDup
01CE79D3 8D95 08FFFFFF LEA EDX,DWORD PTR SS:[EBP-F8]
01CE79D9 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68]
01CE79DC C785 10FFFFFF>MOV DWORD PTR SS:[EBP-F0],004BB998 ; UNICODE "Serial Number tidak diterima"
Trace kodenya keatas.
01CE700D 8B55 E8 MOV EDX,DWORD PTR SS:[EBP-18]
01CE7010 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20]
01CE7013 52 PUSH EDX
01CE7014 50 PUSH EAX
01CE7015 FF15 C8114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCm>; MSVBVM60.__vbaStrCmp
01CE701B F7D8 NEG EAX
01CE701D 1BC0 SBB EAX,EAX
01CE701F 8D4D E0 LEA ECX,DWORD PTR SS:[EBP-20]
01CE7022 40 INC EAX
01CE7023 F7D8 NEG EAX
01CE7025 66:8985 A8FEF>MOV WORD PTR SS:[EBP-158],AX
01CE702C FF15 2C144000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
01CE7032 8D4D B0 LEA ECX,DWORD PTR SS:[EBP-50]
01CE7035 FF15 28144000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeO>; MSVBVM60.__vbaFreeObj
01CE703B 66:39B5 A8FEF>CMP WORD PTR SS:[EBP-158],SI
01CE7042 0F84 48090000 JE 01CE7990
Dialamat "01CE700D" set breakpoint atau "F2"
Trus klik "Run" atau "F9"
Programnya akan loading trus isi registrasinya.
OllyDebug akan break dialamat "01CE700D"
Registrasi Codenya akan kelihatan :
Stack SS:[0012F7B8]=001CA5C4, (UNICODE "211050110")
EDX=027D0001
Jump from 01CE6FF3
hmmmm......
05/11/10
|