aspose for .net注册继续研究

申明:本帖只用于学习(其实是我自己记录下免得以后忘了),不发成品,大家也别问我要.
用到的工具de4dot,dnspy,vs2019

前几天老板变态的需求,非要把上万个工程的Excel文件转成html让其他人访问,目的是不想让人下载,随便吧,老板最大.
但同一进程打开100个以上文件就报错,于是就出现了上一篇文章.(其实写个进程重新开就行了,不过谁让.net的程序破解简单呢…)
然后逛论坛的时候发现了这个https://www.52pojie.cn/forum.php?mod=viewthread&tid=1116770
然后就觉得可以搞搞,锻炼锻炼智商.
根据该楼主的思路,下了个2012年版本的aspose.cell.开始研究.
先de4net去花,然后dnspy跑起来.(楼主说跑不起来要报错…报错你跳过就是了嘛,反正就只研究注册部分)

以下是部分程序片段

	internal void method_1(Stream stream_0)
		{
			if (stream_0 == null)
			{
				throw new ArgumentNullException("stream");
			}
			Class827.smethod_3(0);
			XmlDocument xmlDocument = new XmlDocument();
			xmlDocument.Load(stream_0);
			this.method_2(xmlDocument);
			Hashtable hashtable = Class828.hashtable_0;
			if (hashtable == null)
			{
				//hashtable = new Hashtable();
				hashtable = Class828.smethod_10();
				Class828.hashtable_0 = hashtable;
			}
			if (hashtable.ContainsKey(this.string_1))
			{
				throw new InvalidOperationException("This license is disabled, please contact Aspose to obtain a new license.");
			}
			if (Class827.smethod_2() > 0)
			{
				return;
			}
			bool flag = false;
			string[] array = this.string_0;
			int i = 0;
			while (i < array.Length)
			{
				string text = array[i];
				if (!text.Equals("Aspose.Total") && !text.Equals("Aspose.Total for .NET") && !text.Equals("Aspose.Cells for .NET") && !text.Equals("Aspose.Cells Product Family") && !text.Equals("Aspose.Total Product Family") && !text.Equals("Aspose.Cells"))
				{
					i++;
				}
				else
				{
					flag = true;
				
					if (!flag)
					{
						throw new InvalidOperationException("The license is not valid for this product.");
					}
					DateTime t = DateTime.ParseExact("2012.01.16", "yyyy.MM.dd", CultureInfo.InvariantCulture);
					if (t > this.dateTime_0)
					{
						throw new InvalidOperationException(string.Format("The subscription included in this license allows free upgrades until {0}, but this version of the product was released on {1}. Please renew the subscription or use a previous version of the product.", this.dateTime_0.ToString("dd MMM yyyy", CultureInfo.InvariantCulture), t.ToString("dd MMM yyyy", CultureInfo.InvariantCulture)));
					}
					if (DateTime.Now > this.dateTime_1)
					{
						throw new InvalidOperationException("The license has expired.");
					}
					this.enum127_0 = Enum127.const_1;
					Class828.class828_0 = this;
					return;
				}
			}
			


			if (!flag)
			{
				throw new InvalidOperationException("The license is not valid for this product.");
			}
			DateTime t1 = DateTime.ParseExact("2012.01.16", "yyyy.MM.dd", CultureInfo.InvariantCulture);
			if (t1 > this.dateTime_0)
			{
				throw new InvalidOperationException(string.Format("The subscription included in this license allows free upgrades until {0}, but this version of the product was released on {1}. Please renew the subscription or use a previous version of the product.", this.dateTime_0.ToString("dd MMM yyyy", CultureInfo.InvariantCulture), t1.ToString("dd MMM yyyy", CultureInfo.InvariantCulture)));
			}
			if (DateTime.Now > this.dateTime_1)
			{
				throw new InvalidOperationException("The license has expired.");
			}
			this.enum127_0 = Enum127.const_1;
			Class828.class828_0 = this;
			return;


		}

先读xml,然后一步一步判断下来,哪里挡住改哪里,没难度.
然后我自信满满的跑去看它的注册算法,为了方便调试和注释,我还把它关于注册的程序挪到了vs里跑.

		private static void smethod_2(XmlNode xmlNode_0, XmlNode xmlNode_1)
		{
			string s = (xmlNode_0 != null) ? xmlNode_0.OuterXml : ""; //data内容
			byte[] bytes = Encoding.Unicode.GetBytes(s); //data字节
			string s2 = (xmlNode_1 != null) ? xmlNode_1.InnerText : "";
			byte[] byte_ = Convert.FromBase64String(s2); //Signature
			string s3 = "0nRuwNEddXwLfXB7pw66G71MS93gW8mNzJ7vuh3Sf4VAEOBfpxtHLCotymv1PoeukxYe31K441Ivq0Pkvx1yZZG4O1KCv3Omdbs7uqzUB4xXHlOub4VsTODzDJ5MWHqlRCB1HHcGjlyT2sVGiovLt0Grvqw5+QXBuinoBY0suX0=";
			string s4 = "AQAB";
			byte[] byte_2 = Convert.FromBase64String(s3);
			byte[] byte_3 = Convert.FromBase64String(s4);
			Class823 @class = new Class823(byte_2, byte_3); //公钥
			@class.method_0(bytes, byte_); 
		}

然后就看见了rsa的指数与那什么值,算了,暴力是唯一出路…
好了升级版本… 试到18.x,这个时期的代码依旧很友好,和12年的差别不大.
到了19.x瞬间不一样了…
以下是19.10的分析过程.
一步一步来走吧,哪里报错停哪里.然后找到这里

	// Token: 0x06004D31 RID: 19761 RVA: 0x002F5DB4 File Offset: 0x002F3FB4
	private object u0002(object[] u0002, Type[] u0003, Type[] u0005, object[] u0008)
	{
		if (u0002 == null)
		{
			u0002 = global::u0008u2002