Tulisan Dasar Cracking
Selamat Datang................. Cracker..........
Tutorial Cracking :

Atani v4.5.5


Target  : Atani v4.5.5
Tool     : OllyDebug DeFixeD
              PEiD v0.95

Atani is power tool for creating of animated files. For generating of frames you can use files with the following extension: BMP, GIF, animated GIF, JPG, ICO, PNG, EMF, WMF. Also you can create (edit) frames with the help of built-in frame editor.

Jalankan Ataninya, kita lihat ada apa saja didalamnya...!

Ada tulisan unregistered version.
Di menu help ada registration box.

Scan atani.exe dengan PEiD untuk melihat programnya dipack dengan apa??
Gak pakai proteksi cuma "Borland C++ 1999".

Buka file atani.exe dengan OllyDebug DeFixeD.
Di "CPU - main thread, module atani", klik kanan pilih "Search for" terus "All Referenced Text Strings".
Geser keatas terus klik kanan pilih "Search For Text".
Pada "Enter Text to Search For" masukkan kata "unregistered", hilangkan tanda di case sensitive dan tandai entire scope.

kita berada dialamat

0040408C MOV EDX,0064CF0F ASCII "Atani (GIF and AVI animator). Now you are using the unregistered version (only for try)."

Klik dua kali dialamat diatas

00404030 . 3C 01 CMP AL,1
00404032 . 75 4F JNZ SHORT 00404083
00404034 . 66:C785 7CFFF>MOV WORD PTR SS:[EBP-84],494
0040403D . BA 09CF6400 MOV EDX,0064CF09 ; ASCII "Atani"
00404042 . 8D45 A4 LEA EAX,DWORD PTR SS:[EBP-5C]
00404045 . E8 26112300 CALL 00635170
0040404A . FF45 88 INC DWORD PTR SS:[EBP-78]
0040404D . 8B10 MOV EDX,DWORD PTR DS:[EAX]
0040404F . 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
00404052 . E8 65551E00 CALL 005E95BC
00404057 . FF4D 88 DEC DWORD PTR SS:[EBP-78]
0040405A . 8D45 A4 LEA EAX,DWORD PTR SS:[EBP-5C]
0040405D . BA 02000000 MOV EDX,2
00404062 . E8 F1132300 CALL 00635458
00404067 . 8B4D FC MOV ECX,DWORD PTR SS:[EBP-4]
0040406A . 33D2 XOR EDX,EDX
0040406C . C681 4A0F0000>MOV BYTE PTR DS:[ECX+F4A],1
00404073 . 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
00404076 . 8B80 C0040000 MOV EAX,DWORD PTR DS:[EAX+4C0]
0040407C . E8 430E1B00 CALL 005B4EC4
00404081 . EB 4D JMP SHORT 004040D0
00404083 > 66:C785 7CFFF>MOV WORD PTR SS:[EBP-84],4A0
0040408C . BA 0FCF6400 MOV EDX,0064CF0F ; ASCII "Atani (GIF and AVI animator). Now you are using the unregistered version (only for try)."

Dialamat "00404032" kode "JNZ" ganti dengan "NOP"

Klik kanan "Copy to Executable" trus klik "All Modification" trus "Copy All".
Klik kanan lagi "Save File" dan overwrite dengan nama yang sama.
Keluar dari OllyDebug.



28/06/09
WebMaster
Terus      Kembali
Komentar dan Mailing List
Crack One Software Every Day Make You The Real Cracker