Jump to content

⤴️-Paid Ad- Check advertising disclaimer here. Add your banner here.🔥

Amibroker 7.00.1 64 bit c*****d. Some patches to ensure it never becomes unregistered.


Recommended Posts

  • 2 weeks later...
Posted

Hey Atomo12345,
I love how you patched the broker.exe file, so simple, just changed a mov (48) instruction to ret (C3) instruction.

I have two questions:
1. How did you work out that was the code change needed? Did you use IDA? Can you share your method?
2.Do we still need to block communication to and from Amibroker? Because if we block, we can't use the AI capabilities or Web interface.

Keep up the great work!!

Posted

The patch  mov (48) instruction to ret (C3) instruction has be made by shb.

I have patched these two instructions substitute the je and jne with jmp, to simply avoid the controls of the program:

00000001400C10F7 | 74 76 | je broker.1400C116F |
00000001400C118F | 0F85 8A000000 | jne broker.1400C121F |

I use IDA and x64dbg. But in particular to reverse programs is better and plus pratical x64dbg.

With this modifications I think that is not necessary to block the communication in lmhosts.

Greetings from Italy. 

Posted

Buongiorno Atomo12345,

Thank you for your reply,
SHB is obviously a smart person to find such a simple fix.

With the additional instruction to substitute the je and jne with jmp,
this is not so simple (which jmp opcode to use?).

Do you mean substitute 7476 with EB76 (jmp short), and
0F85 8A000000 with 0F84 8A000000 (jz) or is it 
90EA 8A000000 (jmp far).

or do you want to share your fix.

BTW a good program to disassemble is RELYZE that I use.

Appreciate your assistance.
Ciao for now

Posted

In my opinion, why are  people talking about cr@cking stuff here? This is not a Reverse engineering forum or tutorial forum. If the author is noticing these, they can take steps to prevent it. Have a DM chat or discuss personally via email or other modes instead in the forum.

 

And I will always be wary of a member who has less number of posts but been a member for long time asking these type of questions !! 

 

No hard feelings.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

⤴️-Paid Ad- Check advertising disclaimer here. Add your banner here.🔥

×
×
  • Create New...