tcef;(33) - POPCAP? BigFish? TryMedia?

Oberon *drf;rsm;udk crack vkyfjcif;

tcef;(33) -

- 498 -

POPCAP? BigFish? TryMeida? Oberon *drf;rsm;udk crack vkyfjcif;

'DwpfcgrSmawmh *drf;awGudk crack vkyfMunfhMuygr,f/ *drf;awGudk crack vkyfw,fqdkayr,fhvnf; zdkif

qdkufMuD;wJh *drf;tMuD;pm;awGudk crack vkyfrSmr[kwfbJ taysmfwrf;*drf;av;awGudkom crack vkyfrSmjzpfyg
w,f/ 'Dvdk*drf;av;awGu *drf;wpfckudk crack vkyfEdkifcJh&if usefwJh*drf;tm;vHk;udkvnf; crack vkyfEdkifrSmjzpfwJh
twGuf taysmfwrf;*drf;av;awGudk crack vkyfzdkYa&G;cs,f&jcif;jzpfygw,f/
(1) POPCAP *drf;rsm;udk crack vkyfjcif;
POPCAP *drf;qdkwmu www.popcap.com ua&mif;cswJh*drf;awGudkqdkvdkwmjzpfygw,f/ tapmydkif;
xGuf&SdwJh POPCAP *drf;awGudk ActiveMARK eJY protect vkyfcJhayr,fh aemufydkif;rSmawmh POPCAP DRM
eJYom protect vkyfwmawGY&ygw,f/
Scanning -> E:\Program Files\PopCap Games\Zuma's Revenge\ZumasRevenge.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 2078400 (01FB6C0h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 01FA190h, size : 01530h / 05424 byte(s)
-> File has 400 (0190h) bytes of appended data starting at offset 01FA000h
[File Heuristics] -> Flag : 00000000000000001000000000000100 (0x00008004)
[!] PopCap DRM Protect detected !
[CompilerDetect] -> Visual C++ 8.0 (Visual Studio 2005)
- Scan Took : 0.812 Second(s)

yHk(1)
'Doifcef;pmrSm&Sif;jyrSmu POPCAP DRM eJY protect vkyfxm;wJh*drf;awGudk b,fvdk crack vkyf&
r,fqdkwmjzpfygw,f/ wpfckudkem;vnfcJh&if usef POPCAP *drf;tm;vHk;udk crack vkyfEdkifrSmjzpfygw,f/ 'D
oifcef;pmtwGuf a&G;cs,fxm;wJh target zdkifuawmh Zuma's Revenge jzpfygw,f/ Zuma's Revenge *drf;
udk www.mmcrackingteam.org rSm download vkyf,lEdkifygw,f/
aumif;NyD/ *drf;&JUoabmobm0udkod&atmif *drf;udkzGifhvdkufyg/ yHk(2)/

yHk(2)
*drf;udkzGifhvdkuf&ifyJjzpfjzpf? ydwfvdkuf&ifyJjzpfjzpf yHk(2)rSmjrif&wJh nag screen udkawGYjrif&rSmjzpfyg
w,f/ ZumasRevenge.exe udk Olly rSmzGifhMunfhvdkufyg/ yHk(3)/

yHk(3)
yHk(3)rSm right-click ESdyfNyD; Search for All referenced text strings udka&G;cs,fyg/ NyD;&if
qdkwJhpmomudk&Smyg/ yHk(4)twdkif;awGYjrif&ygr,f/

tcef;(33) - POPCAP? BigFish? TryMedia? Oberon *drf;rsm;udk crack vkyfjcif;

- 499 -

yHk(4)
yHk(4)rSm pdwf0ifpm;zG,faumif;wmuawmh registered qdkwJhpmom;jzpfygw,f/ tJ'Dae&mudk ESpfcsufESdyf
vdkufyg/ yHk(5)/

yHk(5)
yHk(5)rSm ta&;MuD;wJh pointer awG&SdwmawGY&ygw,f/ Pointer wefzdk;wpfckcsif;wefzdk;udk 1 eJYnDay;
vdkufwJhtcg atmufygtwdkif;awGY&ygw,f/
DS:[5EEB9A] = 1

Registered

DS:[5EEBA8] = 1

Expired

DS:[5EEB9B] = 1

Trial

DS:[5EEBC0] = 1

Trial

DS:[5EEBB7] = 1/0

Trial

qdkvdkwmu 5EEB9A eJY 5EEBA8 uvGJvdkY usefwJhwefzdk;awG bmyJjzpfjzpf trial version tjzpfom
&SdwmawGY&ygw,f/ 'gaMumifh 5EEB9A &JU hex wefzdk;udk 1 tjzpfajymif;NyD;odrf;qnf;zdkYvkyfygw,f/ 'Dtcg
yHk(6)u error message udkawGY&ygw,f/

yHk(6)
Error wufoGm;wJhtwGuf uRefawmfwdkYtaeeJY VA 5EEB9A rSmodrf;qnf;wJhwefzdk;udk b,fae&mawG
uac:oHk;ovJqdkwmudk ppfaq;Munfhygr,f/ VA 5EEB9A u hex wefzdk;ay: right-click ESdyfNyD;
Breakpoint Hardware, on access Byte udka&G;ygr,f/

tcef;(33) - POPCAP? BigFish? TryMedia? Oberon *drf;rsm;udk crack vkyfjcif;

- 500 -

yHk(7)
Hardware breakpoint owfrSwfNyD;&ifawmh F9 udkESdyfNyD; ydk*&rfudk run Munfhvdkufyg/

yHk(8)
'Dae&m[m ta&;MuD;qHk;ae&mjzpfygw,f/ VA 0042A15 rSm tpdrf;a&mifeJY0dkif;xm;wJhuk'fxJu AL
(odkY) DS:[5EEB9A] &JUwefzdk;[m 1 jzpf&ygr,f/ 'grSom OR vkyfvdkY&vmwJhwefzdk;[m 1 jzpfNyD; 5EEB9A
xJrSm 1 qdkwJhwefzdk;udkodrf;qnf;NyD; ydk*&rfudk registered version jzpfaprSmjzpfygw,f/ uRefawmfwdkYtaeeJY
MOV BYTE PTR DS:[5EEB9A], 1 qdkNyD;uk'fudkjyifvdkY&ygw,f/ 'Dtcg POP ECX qdkwJh command
wpfckaysmufoGm;ygw,f/

yHk(9)
'gaMumifh MOV BYTE PTR DS:[5EEB9A], 1 tpm; INC BYTE PTR DS:[5EEB9A] vdkYyJ
jyifvdkufygr,f/ yHk(10)/

yHk(10)
yHk(10)twdkif;jyifNyD;odrf;vdkufwJhtcsdefrSmawmh Zuma's Revenge udk registered version taeeJYaqmh
vdkY&NyDjzpfygw,f/