[Self-learning] decompie cracking some software instances

"The cracking is not clear in a few words. First, you must have a basic assembly language. Common tools are nothing more than w32dasm (disassembly), ollydbg (requires different modified versions), peid (simple shell check), these are the most common, involved in shell and other specific operations there are many different software. With these features, you can find some simple crackme or routines to familiarize yourself with them in places such as snow or yes alliance. " 

 

Tools:

 

Peid shell check

Od Reverse Engineering (shelling, cracking, and modification are acceptable)

Lordpec shelling tool (dump)

Imporrec repair tool can also be shelled

W32dasm cracking tool

Exists uses this software to view the string information that is not correctly displayed in w32dasm

C32asm cracking tool + hexadecimal Editor

Reshacker visual editor

Resscope visual editor

Uedit32 hexadecimal Editor

Hworks32 hexadecimal Editor (shelling is sometimes used for shelling and additional data processing)

Freeres resource Repair Tool

Getvbres vbeditor

There are many more ~~~ The above are common tools

 

 

 

 

The following examples are used for self-learning,

Programmers are not easy. Please do not drop their job!

 

Analysis, debugging and cracking of ants profiler (for. Net)

Http://bbs.pediy.com/showthread.php? Threadid = 30953

 

Long, there are several instances:

Http://yxqyxqyxqyxqyxqyxq.blog.163.com/blog/static/4183468120108299549943/

 

Teach you how to create a registration machine:

Http://xx527.uueasy.com/read-htm-tid-846.html

 

How to crack the software registration code:

Http://hi.baidu.com/zhzsh/blog/item/8d2b07fac7ff4f9d58ee90f0.html

 

This is the first link to the "normal text version ":

Http://gbuy.gdcvi.com /? ArticleID = 19712

 

This is more difficult. For C ++ decompilation on x86:

Http://bbs.pediy.com/showthread.php? T = 98809 & page = 1

 

The following are some general ideas:

 

"If no source code is available after the DLL file is generated, modify the content again <br/> use the ildasm and ilasm programs provided by Microsoft <br/> decompile the DLL file into the Il file by using ildasm <br/> ildasm test. dll/out = test. IL <br/> generates test. res and test. il files <br/> the Il files can be modified in a text editor, pay attention to the syntax <br/> and then use ilasm to re-compile the Il file into a DLL file <br/> ilasm/dll/Res: test. res test. il/out: test. DLL <br/> during the test, because the ildasm and ilasm programs are downloaded from the Internet, it is always unsuccessful because of different versions, A lot of detours <br/> the only inconvenient way to modify this is that the syntax of the Il file is hard to understand. A small number of modifications to the first version can be used, and a large number of modifications are not suitable. <Br/> You Can decompile the DLL file into a CS file by using reflector. This can be modified, but it is hard to compile it back, sometimes an error is reported. <br/> therefore, reflector or ildasm and ilasm are used for selection." 

 

For decompilation, refer to the doctoral thesis "reverse compilation techniques" published by Christina Cifuentes in 1994"

 

How do I call functions in the dynamic library. So file? How do I know the parameter type!

Http://www.9php.com/FAQ/cxsjl/c/2009/05/2445258143766.html