|
Tutorial Cracking :
AAA Logo 2010 v3.10
|
Target : AAA Logo 2010 v3.10
Tool : OllyDebug DeFixeD
Exe Info PE
AAA Logo is logo design software that will please amateurs and design professionals alike. The program provides a point-and-click environment and a library of professionally
designed logo templates that enable anyone to design a state-of-the-art logo in mouse clicks.
Test Dulu
Buka AAA Logonya, kita lihat apa saja yang muncul...!
Langsung register atau keluar
Scan alogo.exe dengan Exe Info PE untuk melihat programnya diproteksi apa??
Microsoft Visual C++ ver 5.0/6.0
Buka alogo.exe nya dengan OllyDebug DeFixeD.
Di "CPU - main thread, module alogo", klik kanan pilih "Search for" terus "All Referenced Text Strings".
Geser keatas terus cari kata "registration".
0042186A PUSH 005ABE08 ASCII "Registration key is not valid"
Klik dua kali.
00421866 6A 00 PUSH 0 Arg3 = 00000000
00421868 6A 00 PUSH 0 Arg2 = 00000000
0042186A 68 08BE5A00 PUSH 005ABE08 Arg1 = 005ABE08 ASCII "Registration key is not valid"
Trace kodenya keatas.
00420558 0F85 08130000 JNZ 00421866
0042055E 394C24 20 CMP DWORD PTR SS:[ESP+20],ECX
00420562 0F85 FE120000 JNZ 00421866
00420568 3BD8 CMP EBX,EAX
0042056A 0F84 F6120000 JE 00421866
00420570 68 44C05A00 PUSH 005AC044 ASCII "46bD"
00420575 8D4C24 24 LEA ECX,DWORD PTR SS:[ESP+24]
00420579 E8 759D1200 CALL 0054A2F3
0042057E 8B00 MOV EAX,DWORD PTR DS:[EAX]
00420580 8B36 MOV ESI,DWORD PTR DS:[ESI]
00420582 50 PUSH EAX Arg2
00420583 56 PUSH ESI Arg1
00420584 E8 56390B00 CALL 004D3EDF alogo.004D3EDF
00420589 83C4 08 ADD ESP,8
0042058C 8D4C24 20 LEA ECX,DWORD PTR SS:[ESP+20]
00420590 85C0 TEST EAX,EAX
00420592 0F94C3 SETE BL
00420595 E8 EB9C1200 CALL 0054A285
0042059A 84DB TEST BL,BL
0042059C 0F85 C4120000 JNZ 00421866
Beri breakpoint dialamat :
00420558 0F85 08130000 JNZ 00421866
00420562 0F85 FE120000 JNZ 00421866
0042056A 0F84 F6120000 JE 00421866
0042059C 0F85 C4120000 JNZ 00421866
Trus jalankan Ollynya.
Isi registrationnya.
Olly akan break disetiap alamat tersebut.
Bila kondisinya lompat, ganti tidak lompat atau NOP aja.
00420558 90 NOP
00420562 90 NOP
0042056A 90 NOP
0042059C 90 NOP
Simpan perubahannya...!!!
13/04/10
|