今天想破解个程序，但这个程序哪数据库在软件商的服务器上，软件可以用单没有数据库，所以想备份下来。但是，SQL企业管理又有问题。无法备份。在网上找个了备份的程序，但需要注册才行，所以没办法只有先这个软件破解了在说。

软件名称：虚拟主机SQL数据库备份
使用工具：ildasm.exe    ilasm.exe   XenocodeFox2007

查壳发现没有加密，是用.NET编程的。
用 XenocodeFox2007 载入 找找找。找到了这里
.method private hidebysig instance void btnReg_Click(object sender, [mscorlib]System.EventArgs e) cil managed
{
     // Code Size: 198 byte(s)
     .maxstack 4
     .locals init (
          string text1,
          string text2,
          string text3,
          [mscorlib]Microsoft.Win32.RegistryKey key1)
     L_0000: ldarg.0
     L_0001: ldfld [System.Windows.Forms]System.Windows.Forms.TextBox BackUp.regist::txtMail
     L_0006: callvirt instance string [System.Windows.Forms]System.Windows.Forms.Control::get_Text()
     L_000b: callvirt instance string string::ToLower()
     L_0010: callvirt instance string string::Trim()
     L_0015: stloc.0
     L_0016: ldarg.0
     L_0017: ldfld [System.Windows.Forms]System.Windows.Forms.TextBox BackUp.regist::txtRegFile
     L_001c: callvirt instance string [System.Windows.Forms]System.Windows.Forms.Control::get_Text()
     L_0021: callvirt instance string string::ToUpper()
     L_0026: stloc.1
     L_0027: ldloc.0
     L_0028: call string BackUp.StaticObject::RegStr(string)
     L_002d: stloc.2
     L_002e: ldloc.0
     L_002f: ldstr ""
     L_0034: call bool string::op_Inequality(string, string)
     L_0039: brfalse.s L_00AC
     L_003b: ldloc.1
     L_003c: ldloc.2
     L_003d: ldc.i4.0
     L_003e: callvirt instance int32 string::IndexOf(string, int32)
     L_0043: brtrue.s L_00AC
     L_0045: ldloc.0
     L_0046: call bool BackUp.StaticObject::DownLoadFile(string)
     L_004b: brfalse.s L_00AC
     L_004d: ldarg.0
     L_004e: ldfld [System.Windows.Forms]System.Windows.Forms.Label BackUp.regist::lblmsg
     L_0053: ldstr "已注册"
     L_0058: callvirt instance void [System.Windows.Forms]System.Windows.Forms.Control::set_Text(string)
     L_005d: ldstr "感谢您的注册! 请保存好注册码!"
     L_0062: ldstr "Information"
     L_0067: ldc.i4.0
     L_0068: ldc.i4.s 64
     L_006a: call [System.Windows.Forms]System.Windows.Forms.DialogResult [System.Windows.Forms]System.Windows.Forms.MessageBox::Show(string, string, [System.Windows.Forms]System.Windows.Forms.MessageBoxButtons, [System.Windows.Forms]System.Windows.Forms.MessageBoxIcon)
     L_006f: pop
     L_0070: ldsfld [mscorlib]Microsoft.Win32.RegistryKey [mscorlib]Microsoft.Win32.Registry::CurrentUser
     L_0075: ldstr "Software\Microsoft\DBBackup\Regist"
     L_007a: callvirt instance [mscorlib]Microsoft.Win32.RegistryKey [mscorlib]Microsoft.Win32.RegistryKey::CreateSubKey(string)
     L_007f: stloc.3
     L_0080: ldloc.3
     L_0081: ldstr "RegCode"
     L_0086: ldloc.1
     L_0087: callvirt instance void [mscorlib]Microsoft.Win32.RegistryKey::SetValue(string, object)
     L_008c: ldloc.3
     L_008d: ldstr "Email"
     L_0092: ldloc.0
     L_0093: callvirt instance void [mscorlib]Microsoft.Win32.RegistryKey::SetValue(string, object)
     L_0098: ldloc.0
     L_0099: stsfld string BackUp.StaticObject::email
     L_009e: ldloc.1
     L_009f: stsfld string BackUp.StaticObject::regcode
     L_00a4: ldc.i4.1
     L_00a5: stsfld bool BackUp.StaticObject::isreg
     L_00aa: br.s L_00C5
     L_00ac: ldstr "注册码错误!"
     L_00b1: ldstr "Information"
     L_00b6: ldc.i4.0
     L_00b7: ldc.i4.s 64
     L_00b9: call [System.Windows.Forms]System.Windows.Forms.DialogResult [System.Windows.Forms]System.Windows.Forms.MessageBox::Show(string, string, [System.Windows.Forms]System.Windows.Forms.MessageBoxButtons, [System.Windows.Forms]System.Windows.Forms.MessageBoxIcon)
     L_00be: pop
     L_00bf: ldc.i4.0
     L_00c0: stsfld bool BackUp.StaticObject::isreg
     L_00c5: ret
}

注意这几句
   L_0021: callvirt instance string string::ToUpper()
     L_0026: stloc.1
     L_0027: ldloc.0
     L_0028: call string BackUp.StaticObject::RegStr(string)
     L_002d: stloc.2
     L_002e: ldloc.0
     L_002f: ldstr ""
     L_0034: call bool string::op_Inequality(string, string)
     L_0039: brfalse.s L_00AC   //验证语句 验证错误就跳转到 00AC  
     L_003b: ldloc.1
     L_003c: ldloc.2
     L_003d: ldc.i4.0
     L_003e: callvirt instance int32 string::IndexOf(string, int32)
     L_0043: brtrue.s L_00AC  //验证语句 验证错误就跳转到 00AC  
     L_0045: ldloc.0
     L_0046: call bool BackUp.StaticObject::DownLoadFile(string)
     L_004b: brfalse.s L_00AC   //验证语句 验证错误就跳转到 00AC  
     L_004d: ldarg.0
     L_004e: ldfld [System.Windows.Forms]System.Windows.Forms.Label BackUp.regist::lblmsg
     L_0053: ldstr "已注册"

因为注册的是很得提供邮件地址和注册码，说以要验证。我们现在就直接让他全部不验证，直接注册成功。。只要把 00AC   改成004d  就可以直接注册成功。

[课程]FART 脱壳王！加量不加价！FART作者讲授！