Log in

View Full Version : DialCops Protection

THORAC
October 20th, 2003, 13:06
Hi all

The file that is protected by DialCops is an Access mde file. The protection basic is time limitation and serial. The mde file has a module that is directly connected with the protection exe. With my finding on the protection i found 3 files took place on the protection. 1 of the file is a exe and it is programmed by Turbo pascal and it is 16bit. This exe connected by an 16 bit dll file and this 16 bit dll file connected to an 32bit dll file. These two dlls are programmed in delphi. These both 3 files have import and export functions.
Finally the last 32 bit dll tells the program if the serial is correct or not. I have been trying to solve the protection algo for a week but i still have nothing. Becuase for me it is too complex to understand.
I found a function in both 3 protection files called CheckAccessCode. I try to “nop” the the calls of this function but unfortunatelly the program return an error that “Protection check not approved”.
These are my findings so,
Finally I need information about this protection algo. If some of you success in DialCops cracking please let me know. Any information will be fine. Thanks a lot.

THORAC
dELTA
October 20th, 2003, 14:33
I've heard it's used to protect software, but that's just a rumour...

Any1 know something about the FAQ?

JMI
October 20th, 2003, 14:49
Isn't that there thing something folks is supposed to read BEFORE they post? Or at least I think I read that somewhere.

You don't suppose he might have actually put "dialcops" into his favorite search engine and actually have done a little of his own research do you? And if he did, tell us what HE learned??? Nah. Too hard.

Regards.
nikolatesla20
October 20th, 2003, 20:38
Um, actually, the board used to say at the top "Please read the FAQ", but it doesn't say anything anymore. You should put that back in there.

-nt20
Woodmann
October 20th, 2003, 22:54
Oh Yes...........

I will put it back up on the main page...............
It will be a very plain and simple, to the point FAQ.

Love, Woodmann
naides
October 21st, 2003, 09:42
Quote:
[Originally Posted by THORAC]Hi all

The file that is protected by DialCops is an Access mde file. The protection basic is time limitation and serial. The mde file has a module that is directly connected with the protection exe. With my finding on the protection i found 3 files took place on the protection. 1 of the file is a exe and it is programmed by Turbo pascal and it is 16bit. This exe connected by an 16 bit dll file and this 16 bit dll file connected to an 32bit dll file. These two dlls are programmed in delphi. These both 3 files have import and export functions. Weird

Finally the last 32 bit dll tells the program if the serial is correct or not. I have been trying to solve the protection algo for a week but i still have nothing. Becuase for me it is too complex to understand.

This is where you need to concentrate: if you know where the serial validation is taking place, but cannot figure out the algo, at least find out 1) Who asks if the serial is correct, and 2)how does the program report that the serial is correct, and 3)fake the "correct" answer
I found a function in both 3 protection files called CheckAccessCode. I try to “nop” the the calls of this function but unfortunatelly the program return an error that “Protection check not approved”.

Nopping may be not enough. The function may return some magic value, perhaps in EAX, perhaps in the stack. Look what happens after the CheckAccessCode function is called and you may learn what the program expects from it (some magic value)

Also, take advantage of the nag screen: “Protection check not approved” when the program decides to place a MessageboxA saying “Protection check not approved”, it looked somewhere to find out that the damn protection check did not fly. Trace back where the decision to make that complaint is made and learn from it

These are my findings so,
Finally I need information about this protection algo. If some of you success in DialCops cracking please let me know. Any information will be fine. Thanks a lot.

THORAC

THORAC
October 21st, 2003, 14:03
Thx naides
I think this protection is not like serial fishing. It is more complex. I think the check is done in the mde file.
Forexample like hasp reversing. It has a different algo. Lots of services and functions.
I think this protection is like flexlm because it is generting a seed.
I will do your suggestions.

thx again
Aimless
October 22nd, 2003, 01:57
Maybe this would help you understand the basics of this protection?

http://www.woodmann.com/fravia/cdromcla.htm

Have Phun
THORAC
October 22nd, 2003, 09:02
Thx for your reply. Yes few functions look like that but not all of them. This protection is a bit far from CD-Cops.