Contact Me : dheeraj_np@usa.net or gl_force@usa.net
             www.glcrackforce.50megs.com
Main | Index

Photo Line 5.06

Type       : Image Editing
Protection : Serial
Tech       : Using Its Own Algorithm


Crack : Main check is at 

0x4DA97E PUSH ECX           >> SOME CONSTANT
0x4DA97F PUSH EAX           >> FAKE S/N IN HEX FORMAT
0x4DA980 CALL 0x520EB0      >> MAIN ALGORITHM

After algorithm is executed EAX has result and it is compared
with 0x0007D000.If EAX is equal to this value program is registered.

So we will do a nice trick to use the algorithm of the program itself
to find a valid S/N.
When we reach 0x4DA97E ,in SICE 'a EIP' and type the following program
give some address to 'EXIT' and 'START' = 0x4DA97E.And also put break
point at 'EXIT' so that we can check S/N.

START : PUSH ECX
        PUSH EAX
        CALL 0520EB0                 >> CALL ALGORITHM
        MOV EAX,DWORD PTR [ESP+0C]
        ADD ESP,8
        CMP EAX,0007D000
        JE EXIT
        MOV EAX,DWORD PTR [008AF07C] >> MEMORY POINTING TO S/N
        INC EAX                      >> INCREASE S/N
        MOV DWORD PTR [008AF07C],EAX >> REWRITE MEMORY WITH NEW S/N

        MOV EAX,008AF078             >> RESTORE ADDRESS BEFORE
        MOV ECX,008AF060             >> WE PUSH
        JMP START                    >> GO TO START

When program breaks at EXIT,check memory we get real S/N :)

Registration Info :

S/N 1 = 512489 = 0xE9D107
S/N 2 = 3454   = 0x7E0D