Hi,
I am really new here. This is my first post.
I am searching for some help with PACE Interlok. I am trying to unlock Waves Restoration Bundle which uses Interlok tpkd.vxd version 3.0.7.817
Ihave readed the neviens thread about this and all the mentioned tuts but it seems to me that it is all about NT system.
I am using W 98.
Could somebody help me?
Maybe I am trying to work with no easy prog as I am not very experienced.

Metodej

There doesn't seem to be a great deal out there, perhaps because much of the Pace protection was focused in the music area early on, but they provide, or at least did provide the protection for InstallShield installation program and there is also a +Tsehp article on the What's New page called "Installshield pro 6.2 Eval". I haven't checked out many InstallShield articles for a while. Some of them are focused on the script, rather than the Interlok features, but the +Tsehp article discusses getting by the Interlok feature fairly easily. It's also written from the point of view of nt/w2k, but maybe Interlok doesn't know about OllyDbg, don't know, but it might be worth a try.

I remember on the MAC I had to use a debugger it didn't recognize to get to study the code because it bombed the current popular brands. There they used a wrapper that added code sections and used a short key word to add to a checksum of the code sections, both before and after they were decrypted, to decryp the real programs code sections, but the final "magic key" to decrypt the real code was visable in memory and I had located the code that lead me to where they put it and I used it to do my own decryption of the code, but MAC coding was very different from the PC. They would load smaller code sections as needed and use a central jump table to index procedures within the sections as they were loaded.

If you find anything else, please post it here.

Hi JMI,
Thanks for your quick post.

I found and readed Tsehp article about Installshield eval before I posted my question actually. It seems to me it does not help with W98 VxD. I have allso tried the Olly Dbg - my computer shut down immediately when I first loaded Olly and then opened the Waves plugin in CoolEdit. Olly has interesting featue "Attach to Process". When I tried this, it did not shut down, but I have found only Waves plugin in memory map, not the evil Tpkd. VxD which I think only serves as loader/unpacker for the plugin dll. I think it loads the dll, unpacks it and checks for the days left in trial or for registered version. It vanishes from memory then. Does anybody think I can use the memory map window of Olly to rebuild the plugin dll into shape when that tpkd.vxd is not needed any more? the Olly Dbg has the feature to backup memory content. I saved it, but it did not look like the code/data/res. I have downloaded the Olly Dbg only last week and I am not familiar with it yet. So mybe I am asking some silly questions.

Thanks a lot.

Metodej

One more thing I forgot to mention.

There is a TNT crack for PACE Interlok tpkd.vxd out there (search Astalavista), but it works with previous version of Interlok (PACE's InterLok 3.0.3.793).

Metodej