|
Tutorial Cracking : DVD Audio Extractor v5.0.2
|
Target : DVD Audio Extractor v5.0.2
Tool : OllyDebugDefixed
DVD Audio Extractor is a powerful software DVD audio extracting / ripping tool. It can help you to extract audio streams from your favorite DVD-Audio and DVD-Video discs and save them as OGG, MP3, Wave or FLAC files.
Load DVD Audio Extractor.exe ke OllyDebug.
Trus cari Referenced Text Strings "registration"
Ketemunya
0041DD14 PUSH 006A9CD0 UNICODE "The registration code you inputed is invalid."
Klik dua kali
0041DD06 68 F0F66B00 PUSH 006BF6F0 ASCII "Message"
0041DD0B 8D4C24 5C LEA ECX,DWORD PTR SS:[ESP+5C]
0041DD0F E8 8C68FEFF CALL 004045A0
0041DD14 68 D09C6A00 PUSH 006A9CD0 UNICODE "The registration code you inputed is invalid."
Trace lagi kodenya keatas.
0041DBDB E8 F0571C00 CALL 005E33D0
0041DBE0 84C0 TEST AL,AL
0041DBE2 0F84 1E010000 JE 0041DD06
Masalahnya dah ketemu...
Klau AL nilainya sama "0" berarti lompat atau "invalid"
Dialamat "0041DBDB" tekan enter untuk masuk kedalam "CALL 005E33D0
005E33D0 6A FF PUSH -1
005E33D2 68 486D6800 PUSH 00686D48
005E33D7 64:A1 0000000>MOV EAX,DWORD PTR FS:[0]
005E33DD 50 PUSH EAX
005E33DE 81EC C4000000 SUB ESP,0C4
Trace codenya kebawah samapai ketemu kode yang mencurigakan.
005E3B4D . E8 FE5BE2FF CALL 00409750
005E3B52 32C0 XOR AL,AL
005E3B54 > 8B8C24 D80000>MOV ECX,DWORD PTR SS:[ESP+D8]
005E3B5B . 64:890D 00000>MOV DWORD PTR FS:[0],ECX
Dialamat "005E3B52" kode "XOR AL,AL" kita rubah kodenya biar menjadi "1".
Caranya......???
"XOR AL,AL" ganti dengan "MOV AL,1"
simpan perubahannya....!!!
12/06/10
|