View Full Version : acudata sheriff protected software
| hansi123 (08-24-2001 09:11): hallo geez, target program is too big for download (~50M). Is it possible to get the 4 secret keys debuging the program with trw2000 or softice - and how ?. Please tell me more about the way to make the sdk work for you thanks hansi123 |
| [Originally Posted by goggles99] Well, I pretty much got as far as you and never was able to use the slsgen'd license to work properly either. I think that it may be becasue there is additional data that comes with the "real" license, such as the "Feature Access Key", or "Publisher Data" (in the sheriff license key generator) which must be different in "Standard", "Professional", and "Professional Plus". I eventually got around the prot though. I ended up making a signature files for IDA (from the free Sheriff SDK) and analyzing the target. It's much easier once you know the target function's locations and purposes. There is also a memory CRC type check, and a file CRC type check to take care of as well. My final solution was a loader which patched the program with a codecave and a jump (to the cave) right before the oep, and a direct patch to the CRC check conditional jmp. The codecave performs additional patches and jumps to oep. I attached the IDA sig that I used... Good luck |
| [Originally Posted by mr.x]Let's me know the target URL of the software protected by Sheriff |
#include "C:\\Sheriff\\API\\API\\VC\\lictype.h"
#include "C:\\Sheriff\\API\\API\\VC\\SlsApi.h"
#ifdef _DEBUG
#pragma comment(lib, "C:\\Sheriff\\API\\API\\VC\\SheriffVCLibs\\SlsLibdMFC.lib"
#else
#pragma comment(lib, "C:\\Sheriff\\API\\API\\VC\\SheriffVCLibs\\SlsLibMFC.lib"
#endif
//the following are functions discovered from sdk lib/obj.
void __cdecl CreateLicence(char const *, struct _SLS_LICENCE, char *, int, int);
struct _SLS_SECRET * __cdecl GetSecrets(char const *,int &
long __cdecl IssueLicence(char const *,struct _SLS_LICENCE);
int __cdecl VerifyReference(char const *ReferenceCode);
int __cdecl AuthenticateUpidReference(char const *ProductID, char const *ReferenceCode);
void __cdecl AddDashToText(char const *,char *,int);
void CKeygenDlg::OnGenerate()
{
//UpdateData(TRUE);
char s[128];
char ReferenceCode[128];
char Temp[128];
int r;
char WinDir[MAX_PATH];
::GetWindowsDirectory(WinDir, sizeof(WinDir));
const static char *ProductID = "1111-2222-3333-4444-5555";
const static char *ProductName = "MyProduct";
r = SLS_Register(ProductID, ProductName, WinDir);
r = SLS_GetReference(ProductID, ReferenceCode);
struct _SLS_LICENCE lic;
ZeroMemory(&lic, sizeof(lic));
lic.AccessKey = 9999;
::CreateLicence(ReferenceCode, lic, s, 0, 0);
char Key[128];
::AddDashToText(s, Key, 4);
r = SLS_SetLicence(ProductID, ReferenceCode, Key);
SLS_SetPublisherData(ProductID, "1024"
}