LangQuocCuong
10-03-08, 08:31 PM
Đây là hướng dẫn crack Main 1.02H của FPT, lưu ý trước khi crack các bạn phải unpack main trước
Bỏ Auto Update:
004DB855 |. E8 861B0000 CALL _main.004DD3E0
004DB85A |. 8B85 4CF2FFFF MOV EAX,DWORD PTR SS:[EBP-DB4]
004DB860 |. E9 36190000 JMP _main.004DD19B
004DB865 |> 8D8D 40FFFFFF LEA ECX,DWORD PTR SS:[EBP-C0]
004DB86B |. 51 PUSH ECX
004DB86C |. E8 3FE72100 CALL _main.006F9FB0
004DB871 |. 83C4 04 ADD ESP,4
004DB874 |. 25 FF000000 AND EAX,0FF
004DB879 |. 85C0 TEST EAX,EAX
004DB87B |. 75 55 JNZ SHORT _main.004DB8D2
004DB87D |. 68 4CAC7200 PUSH _main.0072AC4C ; /Arg2 = 0072AC4C
004DB882 |. 68 A83D7D05 PUSH _main.057D3DA8 ; |Arg1 = 057D3DA8
004DB887 |. E8 1552F4FF CALL _main.00420AA1 ; \_main.00420AA1
004DB88C |. 83C4 08 ADD ESP,8
004DB88F |. 68 0CA67200 PUSH _main.0072A60C ; ASCII "mu.exe"
004DB894 |. 8D95 14FEFFFF LEA EDX,DWORD PTR SS:[EBP-1EC]
004DB89A |. 52 PUSH EDX
004DB89B |. E8 50FF2100 CALL _main.006FB7F0
004DB8A0 |. 83C4 08 ADD ESP,8
004DB8A3 |. 6A 05 PUSH 5 ; /ShowState = SW_SHOW
004DB8A5 |. 8D85 14FEFFFF LEA EAX,DWORD PTR SS:[EBP-1EC] ; |
004DB8AB |. 50 PUSH EAX ; |CmdLine
004DB8AC |. FF15 00727100 CALL DWORD PTR DS:[<&kernel32.WinExec>] ; \WinExec
+++++
004DB87B |. 75 55 JNZ SHORT _main.004DB8D2
-----> Đổi thành
004DB87B |. EB 55 JMP SHORT _main.004DB8D2
Bỏ GameGuard:
004DBB99 |. E8 DCF02100 CALL _main.006FAC7A
004DBB9E |. 83C4 04 ADD ESP,4
004DBBA1 |. 8985 38F2FFFF MOV DWORD PTR SS:[EBP-DC8],EAX
004DBBA7 |. 83BD 38F2FFFF 00 CMP DWORD PTR SS:[EBP-DC8],0
004DBBAE |. 74 19 JE SHORT _main.004DBBC9004DBBB0 |. A1 08A67200 MOV EAX,DWORD PTR DS:[72A608]
004DBBB5 |. 50 PUSH EAX ; /Arg1 => 0072A620 ASCII "MuVN"
004DBBB6 |. 8B8D 38F2FFFF MOV ECX,DWORD PTR SS:[EBP-DC8] ; |
004DBBBC |. E8 AF3E0000 CALL _main.004DFA70 ; \_main.004DFA70
004DBBC1 |. 8985 2CF1FFFF MOV DWORD PTR SS:[EBP-ED4],EAX
004DBBC7 |. EB 0A JMP SHORT _main.004DBBD3
004DBBC9 |> C785 2CF1FFFF 0000000>MOV DWORD PTR SS:[EBP-ED4],0
004DBBD3 |> 8B8D 2CF1FFFF MOV ECX,DWORD PTR SS:[EBP-ED4]
004DBBD9 |. 898D 3CF2FFFF MOV DWORD PTR SS:[EBP-DC4],ECX
004DBBDF |. 8B95 3CF2FFFF MOV EDX,DWORD PTR SS:[EBP-DC4]
004DBBE5 |. 8915 FC417D05 MOV DWORD PTR DS:[57D41FC],EDX
004DBBEB |. E8 309AF8FF CALL _main.00465620
004DBBF0 |. 25 FF000000 AND EAX,0FF
004DBBF5 |. 85C0 TEST EAX,EAX
004DBBF7 |. 0F85 89000000 JNZ _main.004DBC86004DBBFD |. 68 1CAD7200 PUSH _main.0072AD1C ; /Arg2 = 0072AD1C ASCII "gg init error
"
004DBC02 |. 68 A83D7D05 PUSH _main.057D3DA8 ; |Arg1 = 057D3DA8
004DBC07 |. E8 954EF4FF CALL _main.00420AA1 ; \_main.00420AA1
004DBC0C |. 83C4 08 ADD ESP,8
004DBC0F |. E8 B2C1FFFF CALL _main.004D7DC6
004DBC14 |. 833D FC417D05 00 CMP DWORD PTR DS:[57D41FC],0
++++++++++++++
004DBBAE |. 74 19 JE SHORT _main.004DBBC9
-----------> Đổi thành
004DBBAE |. EB 19 JMP SHORT _main.004DBBC9
++++++++++++
004DBBF7 |. 0F85 89000000 JNZ _main.004DBC86
------> Đổi thành
004DBBF7 E9 8A000000 JMP _main.004DBC86
004DBBFC 90 NOP
++++++++++++++++++++++++++
Bỏ ResourceGuard Error:
004E40B3 |. E8 B8632100 CALL _main.006FA470
004E40B8 |. 83C4 04 ADD ESP,4
004E40BB |> 8A4424 37 MOV AL,BYTE PTR SS:[ESP+37]
004E40BF |. 895C24 18 MOV DWORD PTR SS:[ESP+18],EBX
004E40C3 |. 84C0 TEST AL,AL
004E40C5 |. 895C24 1C MOV DWORD PTR SS:[ESP+1C],EBX
004E40C9 |. 895C24 20 MOV DWORD PTR SS:[ESP+20],EBX
004E40CD |. 74 38 JE SHORT _main.004E4107004E40CF |. B9 90437D05 MOV ECX,_main.057D4390
004E40D4 |. E8 67870200 CALL _main.0050C840
004E40D9 |. 8BCE MOV ECX,ESI
004E40DB |. E8 C0632000 CALL _main.006EA4A0
004E40E0 |. 8B40 04 MOV EAX,DWORD PTR DS:[EAX+4]
004E40E3 |. 3BC3 CMP EAX,EBX
004E40E5 |. 75 05 JNZ SHORT _main.004E40EC
004E40E7 |. B8 30767100 MOV EAX,_main.00717630
004E40EC |> 8D9424 54090000 LEA EDX,DWORD PTR SS:[ESP+954]
004E40F3 |. 50 PUSH EAX ; /Arg4
004E40F4 |. 52 PUSH EDX ; |Arg3
004E40F5 |. 68 64AF7200 PUSH _main.0072AF64 ; |Arg2 = 0072AF64 ASCII "> ResourceGuard Error!!(%s-%s)
"
004E40FA |. 68 A83D7D05 PUSH _main.057D3DA8 ; |Arg1 = 057D3DA8
004E40FF |. E8 9DC9F3FF CALL _main.00420AA1 ; \_main.00420AA1
+++++++++++++++
004E40CD |. 74 38 JE SHORT _main.004E4107
-----> Đổi thành
004E40CD |. EB 38 JMp SHORT _main.004E4107
Bỏ Auto Update:
004DB855 |. E8 861B0000 CALL _main.004DD3E0
004DB85A |. 8B85 4CF2FFFF MOV EAX,DWORD PTR SS:[EBP-DB4]
004DB860 |. E9 36190000 JMP _main.004DD19B
004DB865 |> 8D8D 40FFFFFF LEA ECX,DWORD PTR SS:[EBP-C0]
004DB86B |. 51 PUSH ECX
004DB86C |. E8 3FE72100 CALL _main.006F9FB0
004DB871 |. 83C4 04 ADD ESP,4
004DB874 |. 25 FF000000 AND EAX,0FF
004DB879 |. 85C0 TEST EAX,EAX
004DB87B |. 75 55 JNZ SHORT _main.004DB8D2
004DB87D |. 68 4CAC7200 PUSH _main.0072AC4C ; /Arg2 = 0072AC4C
004DB882 |. 68 A83D7D05 PUSH _main.057D3DA8 ; |Arg1 = 057D3DA8
004DB887 |. E8 1552F4FF CALL _main.00420AA1 ; \_main.00420AA1
004DB88C |. 83C4 08 ADD ESP,8
004DB88F |. 68 0CA67200 PUSH _main.0072A60C ; ASCII "mu.exe"
004DB894 |. 8D95 14FEFFFF LEA EDX,DWORD PTR SS:[EBP-1EC]
004DB89A |. 52 PUSH EDX
004DB89B |. E8 50FF2100 CALL _main.006FB7F0
004DB8A0 |. 83C4 08 ADD ESP,8
004DB8A3 |. 6A 05 PUSH 5 ; /ShowState = SW_SHOW
004DB8A5 |. 8D85 14FEFFFF LEA EAX,DWORD PTR SS:[EBP-1EC] ; |
004DB8AB |. 50 PUSH EAX ; |CmdLine
004DB8AC |. FF15 00727100 CALL DWORD PTR DS:[<&kernel32.WinExec>] ; \WinExec
+++++
004DB87B |. 75 55 JNZ SHORT _main.004DB8D2
-----> Đổi thành
004DB87B |. EB 55 JMP SHORT _main.004DB8D2
Bỏ GameGuard:
004DBB99 |. E8 DCF02100 CALL _main.006FAC7A
004DBB9E |. 83C4 04 ADD ESP,4
004DBBA1 |. 8985 38F2FFFF MOV DWORD PTR SS:[EBP-DC8],EAX
004DBBA7 |. 83BD 38F2FFFF 00 CMP DWORD PTR SS:[EBP-DC8],0
004DBBAE |. 74 19 JE SHORT _main.004DBBC9004DBBB0 |. A1 08A67200 MOV EAX,DWORD PTR DS:[72A608]
004DBBB5 |. 50 PUSH EAX ; /Arg1 => 0072A620 ASCII "MuVN"
004DBBB6 |. 8B8D 38F2FFFF MOV ECX,DWORD PTR SS:[EBP-DC8] ; |
004DBBBC |. E8 AF3E0000 CALL _main.004DFA70 ; \_main.004DFA70
004DBBC1 |. 8985 2CF1FFFF MOV DWORD PTR SS:[EBP-ED4],EAX
004DBBC7 |. EB 0A JMP SHORT _main.004DBBD3
004DBBC9 |> C785 2CF1FFFF 0000000>MOV DWORD PTR SS:[EBP-ED4],0
004DBBD3 |> 8B8D 2CF1FFFF MOV ECX,DWORD PTR SS:[EBP-ED4]
004DBBD9 |. 898D 3CF2FFFF MOV DWORD PTR SS:[EBP-DC4],ECX
004DBBDF |. 8B95 3CF2FFFF MOV EDX,DWORD PTR SS:[EBP-DC4]
004DBBE5 |. 8915 FC417D05 MOV DWORD PTR DS:[57D41FC],EDX
004DBBEB |. E8 309AF8FF CALL _main.00465620
004DBBF0 |. 25 FF000000 AND EAX,0FF
004DBBF5 |. 85C0 TEST EAX,EAX
004DBBF7 |. 0F85 89000000 JNZ _main.004DBC86004DBBFD |. 68 1CAD7200 PUSH _main.0072AD1C ; /Arg2 = 0072AD1C ASCII "gg init error
"
004DBC02 |. 68 A83D7D05 PUSH _main.057D3DA8 ; |Arg1 = 057D3DA8
004DBC07 |. E8 954EF4FF CALL _main.00420AA1 ; \_main.00420AA1
004DBC0C |. 83C4 08 ADD ESP,8
004DBC0F |. E8 B2C1FFFF CALL _main.004D7DC6
004DBC14 |. 833D FC417D05 00 CMP DWORD PTR DS:[57D41FC],0
++++++++++++++
004DBBAE |. 74 19 JE SHORT _main.004DBBC9
-----------> Đổi thành
004DBBAE |. EB 19 JMP SHORT _main.004DBBC9
++++++++++++
004DBBF7 |. 0F85 89000000 JNZ _main.004DBC86
------> Đổi thành
004DBBF7 E9 8A000000 JMP _main.004DBC86
004DBBFC 90 NOP
++++++++++++++++++++++++++
Bỏ ResourceGuard Error:
004E40B3 |. E8 B8632100 CALL _main.006FA470
004E40B8 |. 83C4 04 ADD ESP,4
004E40BB |> 8A4424 37 MOV AL,BYTE PTR SS:[ESP+37]
004E40BF |. 895C24 18 MOV DWORD PTR SS:[ESP+18],EBX
004E40C3 |. 84C0 TEST AL,AL
004E40C5 |. 895C24 1C MOV DWORD PTR SS:[ESP+1C],EBX
004E40C9 |. 895C24 20 MOV DWORD PTR SS:[ESP+20],EBX
004E40CD |. 74 38 JE SHORT _main.004E4107004E40CF |. B9 90437D05 MOV ECX,_main.057D4390
004E40D4 |. E8 67870200 CALL _main.0050C840
004E40D9 |. 8BCE MOV ECX,ESI
004E40DB |. E8 C0632000 CALL _main.006EA4A0
004E40E0 |. 8B40 04 MOV EAX,DWORD PTR DS:[EAX+4]
004E40E3 |. 3BC3 CMP EAX,EBX
004E40E5 |. 75 05 JNZ SHORT _main.004E40EC
004E40E7 |. B8 30767100 MOV EAX,_main.00717630
004E40EC |> 8D9424 54090000 LEA EDX,DWORD PTR SS:[ESP+954]
004E40F3 |. 50 PUSH EAX ; /Arg4
004E40F4 |. 52 PUSH EDX ; |Arg3
004E40F5 |. 68 64AF7200 PUSH _main.0072AF64 ; |Arg2 = 0072AF64 ASCII "> ResourceGuard Error!!(%s-%s)
"
004E40FA |. 68 A83D7D05 PUSH _main.057D3DA8 ; |Arg1 = 057D3DA8
004E40FF |. E8 9DC9F3FF CALL _main.00420AA1 ; \_main.00420AA1
+++++++++++++++
004E40CD |. 74 38 JE SHORT _main.004E4107
-----> Đổi thành
004E40CD |. EB 38 JMp SHORT _main.004E4107