FoxB
May 4th, 2004, 00:59
I have the target, protected Key-lok dongle and calls of function kfunc() are inserted into MS Access application.
I had to write the library intercepting all references to original library kldll32.dll.
MSAccess executable-> application.dll-> msvbvm60.dll-> emulation.dll-> kldll32.dll
After a run target I have only one call kfunc() instead of described in two:
_KFUNC@16:
Arguments=000056e1, ValidateCode1=0000ee5f, ValidateCode2=0000dfc8, ValidateCode3=00000000,
ReturnValue1=0000a34e, ReturnValue2=0000cb34
The subsequent run of my target have shown, that entrance value Arguments and returned values of value changes only:
_KFUNC@16:
Arguments=00000d69, ValidateCode1=0000ee5f, ValidateCode2=0000dfc8, ValidateCode3=00000000,
ReturnValue1=0000cc48, ReturnValue2=0000d5d3
_KFUNC@16:
Arguments=00003b8c, ValidateCode1=0000ee5f, ValidateCode2=0000dfc8, ValidateCode3=00000000,
ReturnValue1=0000b3b0, ReturnValue2=00000a8f
I had to address for example from Key-Lok II SDK and I have checked up, that all over again there is call KLCHECK:
kfunc (KLCHECK, ValidateCode1, ValidateCode2, ValidateCode3), and then
kfunc (Argument1, Argument2, Argument3, 0)
_KFUNC@16:
Arguments=00000001, ValidateCode1=0000488b, ValidateCode2=0000fee2, ValidateCode3=0000ef90,
ReturnValue1=0000b954, ReturnValue2=0000ea79
_KFUNC@16:
Arguments=00002428, ValidateCode1=0000a79e, ValidateCode2=0000532d, ValidateCode3=00000000,
ReturnValue1=0000abe4, ReturnValue2=0000dd5d
After substitution of correct values (thanks Sab:-)) I have good result with an example from SDK.
My question - as it is possible for me find valid call of kfunc()?
WBR
I had to write the library intercepting all references to original library kldll32.dll.
MSAccess executable-> application.dll-> msvbvm60.dll-> emulation.dll-> kldll32.dll
After a run target I have only one call kfunc() instead of described in two:
_KFUNC@16:
Arguments=000056e1, ValidateCode1=0000ee5f, ValidateCode2=0000dfc8, ValidateCode3=00000000,
ReturnValue1=0000a34e, ReturnValue2=0000cb34
The subsequent run of my target have shown, that entrance value Arguments and returned values of value changes only:
_KFUNC@16:
Arguments=00000d69, ValidateCode1=0000ee5f, ValidateCode2=0000dfc8, ValidateCode3=00000000,
ReturnValue1=0000cc48, ReturnValue2=0000d5d3
_KFUNC@16:
Arguments=00003b8c, ValidateCode1=0000ee5f, ValidateCode2=0000dfc8, ValidateCode3=00000000,
ReturnValue1=0000b3b0, ReturnValue2=00000a8f
I had to address for example from Key-Lok II SDK and I have checked up, that all over again there is call KLCHECK:
kfunc (KLCHECK, ValidateCode1, ValidateCode2, ValidateCode3), and then
kfunc (Argument1, Argument2, Argument3, 0)
_KFUNC@16:
Arguments=00000001, ValidateCode1=0000488b, ValidateCode2=0000fee2, ValidateCode3=0000ef90,
ReturnValue1=0000b954, ReturnValue2=0000ea79
_KFUNC@16:
Arguments=00002428, ValidateCode1=0000a79e, ValidateCode2=0000532d, ValidateCode3=00000000,
ReturnValue1=0000abe4, ReturnValue2=0000dd5d
After substitution of correct values (thanks Sab:-)) I have good result with an example from SDK.
My question - as it is possible for me find valid call of kfunc()?
WBR