Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > .NET Reverse Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #1  
Old 02-25-2009, 03:18 PM
firsttime firsttime is offline
Member
 
Join Date: Feb 2009
Posts: 13
Default IDA Pro With .Net app

Using IDA Pro Making me crazy

--------------------------------------------------------------------------------

Hi Everyone!

I am trying to crack an application that has security levels. You can have more menu's and buttons enabled depending on security level. Now I have spent 2 days killing myself over this program and now I need some help :O(

Here is a part

.method public static hidebysig specialname unsigned int8 get_pSecurityLevel()
// CODE XREF: sub_3E460+4Cp
// sub_40570+52p ...
{
ldsfld unsigned int8 HGSTool.GUI.Form1::SecurityLevel
ret
}

I can only ever find the "byte" for security level when using crack.net but I cannot change that byte.

Anyone willing to take a look and guide me a little?

Thanks for any help :O)))

FirstTime
Reply With Quote
  #2  
Old 02-25-2009, 08:32 PM
Slashmolder Slashmolder is offline
Member
 
Join Date: Feb 2009
Posts: 7
Default

IDAPro cannot edit .Net applications. Try byte patching. Alternately use Reflector with the Reflexil addon and try editing the IL.
Reply With Quote
  #3  
Old 02-26-2009, 03:55 AM
firsttime firsttime is offline
Member
 
Join Date: Feb 2009
Posts: 13
Default

yes I know that IDA cannot do that :O(

Thanks for the tip on Reflexil....Looks like exactly what I want :O)
Reply With Quote
  #4  
Old 02-26-2009, 01:11 PM
firsttime firsttime is offline
Member
 
Join Date: Feb 2009
Posts: 13
Default

Well I managed to change the security level. Now one of the .dll files is causing me problems.. Cannot find a method in the .dll

Can someone please take a look and see where this first timer is going wrong? :O)

Thanks for anyhelp.... Link below

It's for disk drive repair so it may help some of you...

http://rapidshare.com/files/20285980...e-2.12S_06.zip
Reply With Quote
  #5  
Old 02-27-2009, 04:17 AM
sirp sirp is offline
Senior Member
 
Join Date: Apr 2008
Posts: 76
Default

isn't that a free test app for your hitachi drives ? why u wanna "crack" it
Reply With Quote
  #6  
Old 02-27-2009, 05:47 AM
firsttime firsttime is offline
Member
 
Join Date: Feb 2009
Posts: 13
Default

Quote:
Originally Posted by sirp View Post
isn't that a free test app for your hitachi drives ? why u wanna "crack" it
Because software has 3 levels of functionality

1: Standard
2: Expert
3: Master

And this version is configured to STANDARD

And I want to be Master :O) of this software.. More bells and whistles!!!
Reply With Quote
  #7  
Old 02-27-2009, 07:51 AM
Kurapica Kurapica is offline
Senior Member
 
Join Date: May 2006
Location: Archives
Posts: 357
Default

No body wants to download the entire package !

If you didn't read any tutors on the .NET topic please do and then ask about what you can't reverse.

Try to give us more details about the problem and what you wanna do and what you did ?? what was the error message, a snapshot can be useful too.
__________________
Life can only be understood backwards but It must be read forwards.
Reply With Quote
  #8  
Old 02-27-2009, 08:03 AM
firsttime firsttime is offline
Member
 
Join Date: Feb 2009
Posts: 13
Default

Ok Here is the link to the small .dll file which goes with the software..

http://rapidshare.com/files/203170140/DirectIO.dll

And this is the error produced by the main (patched) .exe program when I hit the SCAN button - see below

See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.MissingMethodException: Method not found: 'Int32 HGSToolDirectIO.DirectIO.set_cardInfo(Int32, UInt32, Byte, UInt32, UInt32, UInt32, UInt32, UInt32)'.
at HGSTool.GUI.Form1.btnScan_Click(Object sender, EventArgs e)
at HGSTool.GUI.Form1.toolBar1_ButtonClick(Object sender, ToolBarButtonClickEventArgs e)
at System.Windows.Forms.ToolBar.OnButtonClick(ToolBar ButtonClickEventArgs e)
at System.Windows.Forms.ToolBar.WmReflectCommand(Mess age& m)
at System.Windows.Forms.ToolBar.WndProc(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.O nMessage(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.W ndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)


************** Loaded Assemblies **************
mscorlib
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.3082 (QFE.050727-3000)
CodeBase: file:///c:/WINDOWS/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll
----------------------------------------
HiTest
Assembly Version: 1.0.0.0
Win32 Version: 1.0.0.0
CodeBase: file:///C:/Program%20Files/HiTest/HiTest.Patched.exe
----------------------------------------
System.Windows.Forms
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.3053 (netfxsp.050727-3000)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
----------------------------------------
System
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.3053 (netfxsp.050727-3000)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
----------------------------------------
System.Drawing
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.3053 (netfxsp.050727-3000)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
----------------------------------------
DirectIO
Assembly Version: 0.0.0.0
Win32 Version:
CodeBase: file:///C:/Program%20Files/HiTest/DirectIO.DLL
----------------------------------------
msvcm90
Assembly Version: 9.0.21022.8
Win32 Version: 9.00.21022.8
CodeBase: file:///C:/WINDOWS/WinSxS/x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022. 8_x-ww_d08d0375/msvcm90.dll
----------------------------------------
AspiIO
Assembly Version: 1.0.2524.17527
Win32 Version:
CodeBase: file:///C:/Program%20Files/HiTest/AspiIO.DLL
----------------------------------------
AxInterop.MSFlexGridLib
Assembly Version: 1.0.0.0
Win32 Version: 1.0.0.0
CodeBase: file:///C:/Program%20Files/HiTest/AxInterop.MSFlexGridLib.DLL
----------------------------------------
Interop.MSFlexGridLib
Assembly Version: 1.0.0.0
Win32 Version: 1.0.0.0
CodeBase: file:///C:/Program%20Files/HiTest/Interop.MSFlexGridLib.DLL
----------------------------------------
pcickdll
Assembly Version: 1.0.1445.38849
Win32 Version:
CodeBase: file:///C:/Program%20Files/HiTest/pcickdll.DLL
----------------------------------------
System.Xml
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.3082 (QFE.050727-3000)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll
----------------------------------------
System.Management
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.3053 (netfxsp.050727-3000)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Management/2.0.0.0__b03f5f7f11d50a3a/System.Management.dll
----------------------------------------
Accessibility
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.3053 (netfxsp.050727-3000)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/Accessibility/2.0.0.0__b03f5f7f11d50a3a/Accessibility.dll
----------------------------------------

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

<configuration>
<system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

any comments welcome :O)
Reply With Quote
  #9  
Old 02-27-2009, 08:06 AM
firsttime firsttime is offline
Member
 
Join Date: Feb 2009
Posts: 13
Default

The main exe file I have pathched to top security level which is Expert. Everything looks ok and the buttons are visible. However, I think when in "Expert" mode the software will try to access the portio.dll drive with a different method.. So I guess there must be a special DIRECTIO.dll for the Expert version..

I have spent 3-4 days now reading.. I have read the tuts and patched the security. But im no guro at reversing .dll's
Reply With Quote
  #10  
Old 02-27-2009, 01:23 PM
firsttime firsttime is offline
Member
 
Join Date: Feb 2009
Posts: 13
Talking

This is the output for the function from IL DASM for direcIO.dll

.method public instance int32 set_cardInfo(int32 idx,
uint32 modopt([mscorlib]System.Runtime.CompilerServices.IsLong) dwBaseAddr,
uint8 bMode,
uint32 modopt([mscorlib]System.Runtime.CompilerServices.IsLong) VendorID,
uint32 modopt([mscorlib]System.Runtime.CompilerServices.IsLong) DeviceID,
uint32 modopt([mscorlib]System.Runtime.CompilerServices.IsLong) SlotID,
uint32 modopt([mscorlib]System.Runtime.CompilerServices.IsLong) dwAddrSp,
uint32 modopt([mscorlib]System.Runtime.CompilerServices.IsLong) dwStartAddr) cil managed
// SIG: 20 08 08 08 20 2D 09 05 20 2D 09 20 2D 09 20 2D 09 20 2D 09 20 2D 09

This is the failure output from the software I want to patch

************** Exception Text **************
System.MissingMethodException: Method not found: 'Int32 HGSToolDirectIO.DirectIO.set_cardInfo(Int32, UInt32, Byte, UInt32, UInt32, UInt32, UInt32, UInt32)'.
at HGSTool.GUI.Form1.btnScan_Click(Object sender, EventArgs e)
at HGSTool.GUI.Form1.toolBar1_ButtonClick(Object sender, ToolBarButtonClickEventArgs e)
at System.Windows.Forms.ToolBar.OnButtonClick(ToolBar ButtonClickEventArgs e)
at System.Windows.Forms.ToolBar.WmReflectCommand(Mess age& m)
at System.Windows.Forms.ToolBar.WndProc(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.O nMessage(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.W ndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)

Error says function not found.. Although this function exists in the directio.dll or have I just lost the plot?

Help .... please
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2022, Jelsoft Enterprises Ltd.