|
Tutorial Cracking : Web Data Extractor v7.3
|
Target :
Web Data Extractor v7.3
Tool :
OllyDebug Defixed
Exe Info PE
Stripper v2.13 Beta 9
Extract targeted company contact data (email, phone, fax) from web for responsible b2b communication. Extract url, meta tag (title, desc, keyword) for website promotion, search directory creation, web research.
Buka programnya, ada tulisan demo dan trial 15 hari.
Majukan tanggal komputermu.
Ada peringatan "License key not found!", dicatat...ya
Untuk memastikan proteksi softwarenya, langsung cek dengan Exe Info PE.
"ASprotect ver 2.1 / 2.^ ( www.aspack.com/asprotect.htm )"
Unpack targetnya menggunakan Stripper v2.13 Beta 9.
Hasilnya adalah _WebExtractor.exe
Buka file _WebExtractor.exe (hasil unpack stripper) dengan OllyDebug DeFixeD.
Langsung cari "Referenced Text Strings"
Masukkan kata "License key not found" yang dicatat tadi.
Jangan lupa hilangkan tanda di case sensitive dan tandai entire scope.
kita berada dialamat
00635952 PUSH 00635998 ASCII "License key not found!",CR,CR,"Please purchase your copy at",CR,"http://www.webextractor.com/"
Klik dua kali dialamat diatas
00635949 75 13 JNZ SHORT 0063595E
0063594B 6A 30 PUSH 30
0063594D 68 80596300 PUSH 00635980 ; ASCII "Trial Period Expired!"
00635952 68 98596300 PUSH 00635998 ; ASCII "License key not found!",CR,CR,"Please purchase your copy at",CR,"http://www.webextractor.com/"
Dialamat "00635949" kode "JNZ" diganti dengan "JMP".
Sudah selesai..???
Belum, lanjut lagi dengan "Referenced Text Strings"
Masukkan kata "trial"
Jangan lupa hilangkan tanda di case sensitive dan tandai entire scope.
kita berada dialamat
0062D9B7 MOV EDX,0062DA30 ASCII "Trial Version"
Klik dua kali dialamat diatas
0062D9B5 75 46 JNZ SHORT 0062D9FD
0062D9B7 BA 30DA6200 MOV EDX,0062DA30 ; ASCII "Trial Version"
Dialamat "0062D9B5" kode "JNZ" diganti dengan "JMP".
Lanjut lagi...
Di "Referenced Text Strings"
Masukkan kata "demo"
Jangan lupa hilangkan tanda di case sensitive dan tandai entire scope.
kita berada dialamat
00630016 MOV EDX,006305CC ASCII "Web Data Extractor 7.3 (Demo)"
Klik dua kali dialamat diatas
0063000C 74 14 JE SHORT 00630022
0063000E 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
00630011 05 84060000 ADD EAX,684
00630016 BA CC056300 MOV EDX,006305CC ; ASCII "Web Data Extractor 7.3 (Demo)"
Dialamat "0063000C" kode "JE" diganti dengan "JMP".
Lanjut lagi...
00632FCA MOV EAX,006331C8 ASCII "You cannot save more then %d records in Demo version."
Klik dua kali dialamat diatas
00632FB2 74 31 JE SHORT 00632FE5
00632FB4 6A 00 PUSH 0 ; Arg1 = 00000000
00632FB6 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C] ;
00632FB9 50 PUSH EAX ; Arg1
00632FBA C745 EC 0A000>MOV DWORD PTR SS:[EBP-14],0A ;
00632FC1 C645 F0 00 MOV BYTE PTR SS:[EBP-10],0 ;
00632FC5 8D55 EC LEA EDX,DWORD PTR SS:[EBP-14] ;
00632FC8 33C9 XOR ECX,ECX ;
00632FCA B8 C8316300 MOV EAX,006331C8 ; ASCII "You cannot save more then %d records in Demo version."
Dialamat "00632FB2" kode "JE" diganti dengan "JMP".
Lanjut lagi...
00634ACA MOV EAX,00634C50 ASCII "Copying is disabled in Demo version."
Klik dua kali dialamat diatas
00634ABD 74 1A JE SHORT 00634AD9
00634ABF 6A 00 PUSH 0 ; Arg1 = 00000000
00634AC1 66:8B0D 444C6>MOV CX,WORD PTR DS:[634C44] ;
00634AC8 B2 02 MOV DL,2 ;
00634ACA B8 504C6300 MOV EAX,00634C50 ; ASCII "Copying is disabled in Demo version."
Dialamat "00634ABD" kode "JE" diganti dengan "JMP".
Lanjut lagi...
0063A219 MOV EAX,0063A2B8 ASCII "You cannot save more then %d records in Demo version."
Klik dua kali dialamat diatas
0063A201 74 31 JE SHORT 0063A234
0063A203 6A 00 PUSH 0 ; Arg1 = 00000000
0063A205 8D45 F4 LEA EAX,DWORD PTR SS:[EBP-C] ;
0063A208 50 PUSH EAX ; Arg1
0063A209 C745 EC 0A000>MOV DWORD PTR SS:[EBP-14],0A ;
0063A210 C645 F0 00 MOV BYTE PTR SS:[EBP-10],0 ;
0063A214 8D55 EC LEA EDX,DWORD PTR SS:[EBP-14] ;
0063A217 33C9 XOR ECX,ECX ;
0063A219 B8 B8A26300 MOV EAX,0063A2B8 ; ASCII "You cannot save more then %d records in Demo version."
Dialamat "0063A201" kode "JE" diganti dengan "JMP".
Simpan semua perubahan diatas.
Thanks to : Bang Pitung
Jangan lupa kasih komentarnya....ya!
07/08/09
|