A real help to novice computer public account, adhere to seven o'clock push an original tutorial, learn computer, we accompany you!
Included in topic
#. net zero basics reverse tutorial
With the foundation of the first lesson, do you want to try your skill, then let's try it!
This lesson, we want to use the knowledge of the first lesson, to obtain a software registration code!
This software, based on the software provided by shark Heng in his second lesson, drew a five minute speed imitationSo don't worry about the function. Why can't you use it.
Software is a "IP search tool", with registration function, we will take this software to get the registration code!
Note:It is also a primary software, which does not interfere with the various elements of novice learning
Here is a screenshot of the registration interface
After registration, there will be a prompt. No matter what he prompts, we also know what to do, right?
OK, the dnspy loader also follows the steps in Lesson 1Name/ , an extra slash because of searchName There are too many results, and of course you can searchName/Code But I don't really recommend it, because it may contain spaces that we can't tell you apart from each other, causing you to miss the right search results.
It's very easy, the second one found the string just prompted, we double-click it!
The judgment basis is actually very simple. Look at the right part of my frame, it represents which file the string comes from. Obviously, only the second of the three results is from our courseware.
Of course, you can also adjust the filter rule from all files to the selected file, but I also don't recommend it to novices, because the string may be contained in a DLL.
After double clicking, we also found the relevant judgment according to the steps in Lesson 1. If you want to blow up, you can modify it directly34 linesThat's enough.
But today we don't blow up. What we play is to find out the registration code.
Let's read the logic of this registration:
22 lines, the contents of the first edit box, first delete the first and last spaces, and then go through theRSAEncrypt()The encrypted contents of the function are assigned to variablestext
23 linesIn the second edit box, first delete the first and last spaces, and then assign the value to the variabletext2
Lines 24-33, judgetextandtext2If yes, you will report an error in the pop-up window
Lines 34-41, judgmenttextandtext2If it is equal or not, it means that the activation code is correct, then add the title of the main interfaceRegisteredIf the words are not equal, they will pop up and report errors
So if you want to explode in this program, if you want to activate it directly without filling in two edit boxes, you canLines 24-33Delete and modify34 linesCan also be cleared directlyLines 22-41Content, only reserved36-37 linesContent, so that you can click on the main programRegisterWhen the button is pressed, the activation is completed directly.
Try to understand my words, and then practice by yourself. If you have any questions, please ask me questions on the knowledge planet.
So we know from the codetextandtext2To compare, that is to say, when we fill in the content in the second edit box, the first edit box passes throughRSAEncrypt()When the function is encrypted, the registration can be completed.
In23 lines, right click, addbreakpointYou can also think of a breakpoint as "pause", that is to saydnSpyWhen the program runs here (at this point, the marked line has not yet been executed), pause.
Click start to run the programFile--->Register
Now enter the registration information（Remember the user name and write the registration code casually）, clickregister。
You'll find that the program is not responding. We're indnSpy In the middle of the red dot before the breakpoint, there are more yellow highlights in the middle, which means that the software has been executed here.
Back todnSpyNotice that in the local variables window at the bottom, there aretext Andtext2 Two variables
ClickF10have a look
We found thattextIt has been assigned. Yes, this value is the registration code!
staytextRight click the value of and copy the value
Then click the little red dot in front of the lower breakpoint code to cancel the breakpoint.
Click continue, or pressF5Let the program that we have broken point continue to run
It doesn't matter if there is an error
Paste the value we copied into the second edit box
Sign up ~ and you'll be beaten in the face
dnSpyWhen copying text type values, a pair of quotation marks will be added automatically, so we can paste the copied values into the second edit box and delete the quotation marks ourselves.
The software becomes registered.
Congratulations, you have learned to blow up and get the registration code through lesson 1 and lesson 2!
Finally, I will add the following explanationF10The role of:
In the figure above, the buttons are in order:
continue: continue to run the program unless the next breakpoint is encountered or the next operation is waiting
suspend: pause to the breakpoint or operation waiting
stop it: end running program
restart: rerun the program to a breakpoint or wait for an operation
Show next statement: used to preview the next statement to be executed
Sentence by sentence: each time a line statement is executed, if a function call is encountered, it will enter the function
Step by step: execute a line statement each time. When a function is encountered, it will not enter the function and execute the function call as a statement
Jump out: when you enter a function, jump out allows you to execute the remaining statements in the function directly until you return to the following statement when the function is called
Search assembly: we just learned about it last time~
A quote from shark Heng:
Usually the tutorial is a lot of theory and basic knowledge, so that novice directly closed the video or web page.This is not my tutorial charm, my tutorial is to let novice quickly get interested, so that novices have the opportunity to learn theory and basic knowledge.As long as he has an interest, it's easy to say anything else. He will learn theory and basic knowledge by himself.If you are not interested, the theory and basic knowledge are both lullaby.
Get the courseware, reply Keywords:. net zero base reverse