LuciferAviSonicX

RE Algo Rev.

Oct 26th, 2017
124
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.13 KB | None | 0 0
  1. Reverse Engineering Part 1
  2. ---------------------------
  3.  
  4. BPK Keylogger Detector
  5. 1. Start the application
  6. 2. Enter any registratino name and serial keys
  7. 3. copy and paste the dialouge box, and close the application
  8. 4. start ollydbg
  9. 5. open the application in ollydbg
  10. 6. Click the play button
  11. 7. Goto 'View' ---> "Executable Modules"
  12. 8. Select and double click .exe file
  13. 9. Right click in 4th column, click "Search for"---> "all referrence text strings"
  14. 10. Right click on the new window, click "search text"
  15. 11. paste the copy line, line number 3 copy, uncheck case sensitive and check entire scope, click on OK
  16. 12. Double click the selected message.
  17. 13. Go to the starting of the selected block.
  18. 14. Double Click in the reference column, where my block is starting.
  19.  
  20. Power ISO
  21. ---------
  22. 1. Start the application
  23. 2. Enter any registratino name and serial keys
  24. 3. copy and paste the dialouge box, and close the application
  25. 4. start ollydbg
  26. 5. open the application in ollydbg
  27. 6. Click the play button
  28. 7. Goto 'View' ---> "Executable Modules"
  29. 8. Select and double click .exe file
  30. 9. Right click in 4th column, click "Search for"---> "all referrence text strings"
  31. 10. Right click on the new window, click "search text"
  32. 11. paste the copy line, line number 3 copy, uncheck case sensitive and check entire scope, click on OK
  33. 12. Double click the selected message.
  34. 13. Just 5-6 lines above, you will find "call power iso", put break on that step.
  35. 14. close all the tam jham.
  36. 15. start ollydbg and open power iso in it
  37. 16. click on play button. my power iso will open, enter the data there and click on OK.
  38. 17. Ollydbg will open automatically
  39. 18. click on enter button.
  40. 19. click on down arrow button, click it until you see a message, Jump Is Not Taken
  41. 20. press space bar on that line.
  42. 21. instead of JNZ, type JZ/JE, click assamble, click cancel
  43. 22. right click ---> copy executable --> all modification
  44. 23. right click ---> save file---> file name ---> save
  45. 24. close all tam jham again.
  46. 25. open the application and enter any value in registration field...
  47. 26. chindi chori wala kaam pura hua
Add Comment
Please, Sign In to add comment