Lo folks,

atm i workin' on an interesting target. Main_App is protected by PCShielh which is not the problem. But programm provides also many different dgb checks. I have IceExt installed and the programm is able to detect sice installed, running or not...
Intersing tho is that there is an app called antidbg.dll which is managing all thoses debug checks. After examin the file i found some interesting string - > " Anticracking.sk" i tried PEiD to idetify whether its svkp but it doesn't detected it.
So i ask you whether there is a SVKP-DevelopersKit zu implement SVKP from soucecode on.... ?

regards,

OHPen

maybe you will find info about it on SVKP's web-site!???
or contact author by e-mail!???

there is indeed an svkp SDK, you can get the files + sample src code from the Trial version..

Afaik, the svkp api functions are done as follow:
- you write your app using a "dummy" svkp dll that exports all the functions (but the code in that dll is just a 'ret' really)
- compile, test, etc.
- when you protect your file, the dummy dll is removed from the import table (so its not actually distributed with the protected file), but the array of pointers in the import table is kept in place (which are still referenced by code)
- when you run the app, the guard module patches those values to code that was unpacked in memory (before the oep was reached).

SVKP author also wrote a book, something like "Crackproof your software", so they might have used some of his source code.

@doug

thx for your answer, maybe i will play a bit with this SDK in order to understand the protection a bit better.

regards,

OHPen

I think you can check anticracking.sk for AntiCracking’s Anti-Debugging Library.