|
Tutorial Cracking : PDF Image Extraction Wizard v2.0
|
Target : PDF Image Extraction Wizard v2.0
Tool : OllyDebug DeFixeD
This program allows you to easily extract bitmap images from PDF documents.
Langkah Pertama
Jalankan PDF Image Extraction Wizardnya, kita lihat...!
Muncul peringatan "...not registered...".
Hanya dapat mengextract tiga gambar aja.
Masukkan registernya serial palsu.
Muncul "Not a valid serial number".
Catat pesannya.
Langsung ke TKP :
Buka file PdfWiz.exe dengan OllyDebug DeFixeD.
Di "CPU - main thread, module PdfWiz.exe".
Klik kanan "Search for" trus "All Referenced Text Strings".
Geser keatas terus klik kanan pilih "Search For Text".
Pada "Enter Text to Search For" masukkan kata "Not a valid serial number", hilangkan tanda di case sensitive dan tandai entire scope.
Ketemunya
0042F5CA PUSH 00408558 UNICODE "Registered version. Thank you for your support!"
0042F6F6 MOV DWORD PTR SS:[EBP-A0],0040EB24 UNICODE "Not a valid serial number..."
Menurut pengalamanku lebih baik cari string "Registered"
Geser keatas terus klik kanan pilih "Search For Text".
Pada "Enter Text to Search For" masukkan kata "Registered", hilangkan tanda di case sensitive dan tandai entire scope.
Ketemunya
00422AFF PUSH 00408558 UNICODE "Registered version. Thank you for your support!"
Klik dua kali dialamat diatas
00422ADE /0F85 3C010000 JNZ 00422C20
00422AE4 . |66:C705 2CC04>MOV WORD PTR DS:[43C02C],0
00422AED . |8B0E MOV ECX,DWORD PTR DS:[ESI]
00422AEF . |56 PUSH ESI
00422AF0 . |FF91 04040000 CALL DWORD PTR DS:[ECX+404]
00422AF6 . |8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
00422AF9 . |50 PUSH EAX
00422AFA . |52 PUSH EDX
00422AFB . |FFD7 CALL EDI
00422AFD . |8BD8 MOV EBX,EAX
00422AFF . |68 58854000 PUSH 00408558 ; UNICODE "Registered version. Thank you for your support!"
Langsung ganti "JNZ" dengan "nop" dialamat "00422ADE".
Jangan lupa disimpan hasilnya.
Coba jalankan pasti seperti gambar diatas
OK...!
|