Post Reply 
 
Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Reversing Simple DNS 5.2.117
11-14-2010, 03:36 PM (This post was last modified: 08-31-2011 06:12 PM by NewEraCracker.)
Post: #1
Reversing Simple DNS 5.2.117
This tutorial is just for educational purposes. Angel

Simple DNS has two files with protection. sdnsgui.exe and sdnsmain.exe, both are obfusacated with dotfuscator.

sdnsgui.exe

Open it with an hexeditor Smile

Killing selfcheck
Offset: 0x1ffc2
Find: 3A C4
Replace: 26 2A

Killing callbacks
Look for the unicode string: activate.ashx?auto=
It should be trivial to take care of this.

sdnsmain.exe
This file was obfuscated to make harder to edit it with Simple Assembly Explorer, so we need to de-obfuscate it first with dotfuckscator

After file is deobfuscated proceed:
Licensing functions are handled by "aj" class, feel free to explore it Smile

Now open .cctor(): void
Change "ldc.i4.0" to "ldc.i4.1"
This will give you infinite zones

Open a(): void and scroll down:
Right after "System.Security.Cryptography.RSACryptoServiceProvider" code
L_0194: Change "brfalse.s" to "brtrue.s"
This will fix bugs caused by serial removal.

Open a(String, String): Boolean
Click in L_0000 and insert after opcode "ret"
This will kill serial checks.

Open c(): void
See the br at L_0009, change it to jump to line 510 using edit.
Finally at L_06e8, change ldc.i4.0 to ldc.i4.1
This will disable reading license file and return true.

No nags, no serial, infinite zones. Big Grin

Useful links (as I can't attach files here due copyrights):
PHP Code:
SAE and Reflectorhttp://www.mediafire.com/?hhuu7meyzmoscp8
Simple DNS v5.2.117http://www.multiupload.com/4XW9THQK5K 

Regards,
NewEraCracker
Find all posts by this user
Quote this message in a reply
09-29-2011, 09:16 AM
Post: #2
RE: Reversing Simple DNS 5.2.117
(11-14-2010 03:36 PM)NewEraCracker Wrote:  This tutorial is just for educational purposes. Angel

Simple DNS has two files with protection. sdnsgui.exe and sdnsmain.exe, both are obfusacated with dotfuscator.

sdnsgui.exe

Open it with an hexeditor Smile

Killing selfcheck
Offset: 0x1ffc2
Find: 3A C4
Replace: 26 2A

Killing callbacks
Look for the unicode string: activate.ashx?auto=
It should be trivial to take care of this.

sdnsmain.exe
This file was obfuscated to make harder to edit it with Simple Assembly Explorer, so we need to de-obfuscate it first with dotfuckscator

After file is deobfuscated proceed:
Licensing functions are handled by "aj" class, feel free to explore it Smile

Now open .cctor(): void
Change "ldc.i4.0" to "ldc.i4.1"
This will give you infinite zones

Open a(): void and scroll down:
Right after "System.Security.Cryptography.RSACryptoServiceProvider" code
L_0194: Change "brfalse.s" to "brtrue.s"
This will fix bugs caused by serial removal.

Open a(String, String): Boolean
Click in L_0000 and insert after opcode "ret"
This will kill serial checks.

Open c(): void
See the br at L_0009, change it to jump to line 510 using edit.
Finally at L_06e8, change ldc.i4.0 to ldc.i4.1
This will disable reading license file and return true.

No nags, no serial, infinite zones. Big Grin

Useful links (as I can't attach files here due copyrights):
PHP Code:
SAE and Reflectorhttp://www.mediafire.com/?hhuu7meyzmoscp8
Simple DNS v5.2.117http://www.multiupload.com/4XW9THQK5K 

Thanks very professional ....
Find all posts by this user
Quote this message in a reply
09-08-2013, 01:30 PM (This post was last modified: 09-08-2013 03:04 PM by baselsayeh.)
Post: #3
RE: Reversing Simple DNS 5.2.117
can i make this on simple dns 5.2 123? and 124?
EDIT:thanks it works in 124 and instead of aj use ai
Find all posts by this user
Quote this message in a reply
10-30-2013, 06:19 PM
Post: #4
RE: Reversing Simple DNS 5.2.117
(09-08-2013 01:30 PM)baselsayeh Wrote:  can i make this on simple dns 5.2 123? and 124?
EDIT:thanks it works in 124 and instead of aj use ai

Could you share the v5.2.124 to me?
Find all posts by this user
Quote this message in a reply
01-05-2014, 10:38 AM (This post was last modified: 01-05-2014 10:49 AM by baselsayeh.)
Post: #5
RE: Reversing Simple DNS 5.2.117
and also working in 125

http://wikisend.com/download/947898/sdmsplus125.zip

for the new 125
Find all posts by this user
Quote this message in a reply
04-19-2014, 09:43 AM
Post: #6
RE: Reversing Simple DNS 5.2.117
few changes in 5.2.126

in
Open c(): void
See the br at L_0009, change it to jump to line 510 using edit.
Finally at L_06e8, change ldc.i4.0 to ldc.i4.1
This will disable reading license file and return true.


to
Open c(): void
See the br at L_0009, change it to jump to line 599 using edit.
Finally at L_0831(at the end), change ldc.i4.0 to ldc.i4.1
This will disable reading license file and return true.
Find all posts by this user
Quote this message in a reply
04-19-2014, 04:27 PM
Post: #7
RE: Reversing Simple DNS 5.2.117
(04-19-2014 09:43 AM)baselsayeh Wrote:  few changes in 5.2.126

in
Open c(): void
See the br at L_0009, change it to jump to line 510 using edit.
Finally at L_06e8, change ldc.i4.0 to ldc.i4.1
This will disable reading license file and return true.


to
Open c(): void
See the br at L_0009, change it to jump to line 599 using edit.
Finally at L_0831(at the end), change ldc.i4.0 to ldc.i4.1
This will disable reading license file and return true.

Are you sure about this ?
Code:
See the br at L_0009, change it to jump to line 599 using edit.

On my side not exist line 599. For me work with jump at L_0702.
Find all posts by this user
Quote this message in a reply
07-16-2014, 05:46 PM
Post: #8
RE: Reversing Simple DNS 5.2.117
(04-19-2014 04:27 PM)narciszu Wrote:  
(04-19-2014 09:43 AM)baselsayeh Wrote:  few changes in 5.2.126

in
Open c(): void
See the br at L_0009, change it to jump to line 510 using edit.
Finally at L_06e8, change ldc.i4.0 to ldc.i4.1
This will disable reading license file and return true.


to
Open c(): void
See the br at L_0009, change it to jump to line 599 using edit.
Finally at L_0831(at the end), change ldc.i4.0 to ldc.i4.1
This will disable reading license file and return true.

Are you sure about this ?
Code:
See the br at L_0009, change it to jump to line 599 using edit.

On my side not exist line 599. For me work with jump at L_0702.
yes in build 126
Find all posts by this user
Quote this message in a reply
07-20-2014, 02:06 PM (This post was last modified: 07-20-2014 02:07 PM by NewEraCracker.)
Post: #9
RE: Reversing Simple DNS 5.2.117
For the record, protection has been since build 127 and this method is no longer working. As far as I've heard, the author is now obfuscating it with SmartAssembly.

Regards,
NewEraCracker
Find all posts by this user
Quote this message in a reply
09-25-2014, 11:43 AM
Post: #10
RE: Reversing Simple DNS 5.2.117
(07-20-2014 02:06 PM)NewEraCracker Wrote:  For the record, protection has been since build 127 and this method is no longer working. As far as I've heard, the author is now obfuscating it with SmartAssembly.
can you find a way for this?
Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us | Homepage | Return to Top | Return to Content | Lite (Archive) Mode | RSS Syndication