Web : http://mxb.cjb.net
Contact Me : [email protected] or [email protected]


Main | Index

Photo Line 5.06

Type : Image Editing
Protection : Serial
Tech : Using Its Own Algorithm


Crack : Main check is at

0x4DA97E PUSH ECX >> SOME CONSTANT
0x4DA97F PUSH EAX >> FAKE S/N IN HEX FORMAT
0x4DA980 CALL 0x520EB0 >> MAIN ALGORITHM

After algorithm is executed EAX has result and it is compared
with 0x0007D000.If EAX is equal to this value program is registered.

So we will do a nice trick to use the algorithm of the program itself
to find a valid S/N.
When we reach 0x4DA97E ,in SICE 'a EIP' and type the following program
give some address to 'EXIT' and 'START' = 0x4DA97E.And also put break
point at 'EXIT' so that we can check S/N.

START : PUSH ECX
PUSH EAX
CALL 0520EB0 >> CALL ALGORITHM
MOV EAX,DWORD PTR [ESP+0C]
ADD ESP,8
CMP EAX,0007D000
JE EXIT
MOV EAX,DWORD PTR [008AF07C] >> MEMORY POINTING TO S/N
INC EAX >> INCREASE S/N
MOV DWORD PTR [008AF07C],EAX >> REWRITE MEMORY WITH NEW S/N

MOV EAX,008AF078 >> RESTORE ADDRESS BEFORE
MOV ECX,008AF060 >> WE PUSH
JMP START >> GO TO START

When program breaks at EXIT,check memory we get real S/N :)

Registration Info :

S/N 1 = 512489 = 0xE9D107
S/N 2 = 3454 = 0x7E0D