Rackmount
May 20th, 2003, 17:03
I have been toying with a couple of proggies that have a bunch of embeded protections that could interest a few of the "newbies" in here. To start, they will all default to demo versions with the option to enable being presented on run (ok this doesn't sound interesting..I know). What is interesting is that the proggies can be enabled by a variety of options...password, hardware lock, or network lock. Another wonderful feature of the developer is that they will give you a temp password to enable these proggies for a limited time. The main protection is disabled menu function. You cannot save or print in demo mode. The programs are gui interfaces to fortran modules (these are all freeware and are not really of importance to our study). In the enable screen we see that all modules are initially listed as "disabled" with some or all changing to "enabled" depending on your level of access. The hardware protection is sentinel (imagine that...lol) as is the network protection. I have followed through a few versions and noted a few improvements by the authors on the protection schemes (gone are the messageboxes and messagebeeps that used to yell at you when you tried to save or print in demo mode). The password option brings up an enable screen which presents you with a unique identifier (based on comp hardware most likely). Serial fishing is not an option as the actual password check routine seems to be well coded (oh...perhaps we shouldn't go there...there is a connection to DoD and we DONT want to break their codes eh? (secondary note: the DoD is most likely the old fortran proggies)) So to make a long story short, I have approached this from the point of menu reversing...who care if its demo if I can save and print right? For menu reversing, my favorite BP in SICE is courtesy of +Spath:
bpx Enablemenuitem if((@(ss
esp+0c))&1)==1)
Gotta love that one! So, unfortunately at this point after all the hard work they put into their protection I found that I could change a push 01 to push 00 and re-enable the two functions in one of the proggies (this no longer works in current version...ah an old dog learns new tricks) For the others, I was following the initial splash dialog to see what triggered it to know that I wasn't enabled..this led to other interesting places. So to summarize, in each one of the proggies we have :
1) Splash screen
2) Disabled menus
3) Password protections
4) Time restrictions (password can enable for varying periods)
5) Hardware protections (time restrictions again here)
6) Network protections (again time restrictions)
A downside to these programs are their size, most are larger than what newbies like to deal with as the disassembly can take a bit of time even on fast machines, but as the old ones used to say...take the opportunity to have a nice sip of your fav bevvie as you wait...eh?
If nothing else is gained by this rather long babbling...take to heart the above breakpoint as it is wonderful in menu reversing. As for the identities of the proggies...I would bet if you searched for hydraulic modeling software and watershed you would in turn know the answer.
Until my next ramble,
Rackmount
bpx Enablemenuitem if((@(ss

Gotta love that one! So, unfortunately at this point after all the hard work they put into their protection I found that I could change a push 01 to push 00 and re-enable the two functions in one of the proggies (this no longer works in current version...ah an old dog learns new tricks) For the others, I was following the initial splash dialog to see what triggered it to know that I wasn't enabled..this led to other interesting places. So to summarize, in each one of the proggies we have :
1) Splash screen
2) Disabled menus
3) Password protections
4) Time restrictions (password can enable for varying periods)
5) Hardware protections (time restrictions again here)
6) Network protections (again time restrictions)
A downside to these programs are their size, most are larger than what newbies like to deal with as the disassembly can take a bit of time even on fast machines, but as the old ones used to say...take the opportunity to have a nice sip of your fav bevvie as you wait...eh?
If nothing else is gained by this rather long babbling...take to heart the above breakpoint as it is wonderful in menu reversing. As for the identities of the proggies...I would bet if you searched for hydraulic modeling software and watershed you would in turn know the answer.
Until my next ramble,
Rackmount