Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 06-29-2004, 05:58
dizzi
 
Posts: n/a
Unhappy SoftLock/HardLock

I have program which can be activated with %subj% But i cant find anything useful about that. I cant break with softice on EP (i cant run program with softice loaded), ida cant dissasembly it very well (despite its not packed), procdump segfault when im trying dump it from memory. I cant find any way in which i could try something.
Reply With Quote
  #2  
Old 06-29-2004, 06:47
JMI JMI is offline
Leader
 
Join Date: Jan 2002
Posts: 1,627
Rept. Given: 5
Rept. Rcvd 199 Times in 99 Posts
Thanks Given: 0
Thanks Rcvd at 98 Times in 96 Posts
JMI Reputation: 100-199 JMI Reputation: 100-199
Well it should be obvious that you are facing anti-softice detection, anti-ida and other counter measures. Therefore a good tactic would be to do some research on those issues generally. There are many articles on the net on softice detection. You need to learn about hiding softice from such attacks.

But the first step in attacking ANY protection system would be to actually spend some time READING articles and tuts on the net devoted to reversing your target. It is usually useful to also go to the website of the company and find out what information may be available there on what they claim the product can do.

Regards,
__________________
JMI
Reply With Quote
  #3  
Old 06-29-2004, 14:41
dyn!o's Avatar
dyn!o dyn!o is offline
Friend
 
Join Date: Nov 2003
Location: Own mind
Posts: 214
Rept. Given: 1
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 8
Thanks Rcvd at 0 Times in 0 Posts
dyn!o Reputation: 1
Pretty interesting.

SafeLock and Hardlock are different protections.

SafeLock was made for SafeLock company by some russian guys in recent months - it's nothing unusual, IceExt completely hides the debugger and then you can do what you want (it isn't strong protection, for example: import table is almost untouched).

Hardlock is hardware dongle based protection with its usual envelope idea. There exists some ready made tools which allow to automatically deprotect the envelope or emulate it (I don't mean the emulator from BrainStudio but other interesting small software which disables the HardLock envelope automatically - assuming you have at least one valid dongle or access to it).

Good Luck.
Reply With Quote
  #4  
Old 06-29-2004, 16:46
dizzi
 
Posts: n/a
JMI:
hehe thx for your opinion, but dont worry, i usually try search net first, and did all what you've told

dyn!o:
thx for interesting informations. (btw its SoftLock not SafeLock
I already tried patched iceext for ds3.1 but after some time of program was running my computer restart.
As i said i tried to break on EP to bypass SI detections, but i cant do it, delayed messagebox is always first (text in it is ofcourse encrypted)

after program start there is menu in which you can choose unlock method - you can plug hardlock, or softlock .lc file.

ill keep trying, more info later (i hope)
Reply With Quote
  #5  
Old 06-29-2004, 18:32
dyn!o's Avatar
dyn!o dyn!o is offline
Friend
 
Join Date: Nov 2003
Location: Own mind
Posts: 214
Rept. Given: 1
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 8
Thanks Rcvd at 0 Times in 0 Posts
dyn!o Reputation: 1
Sorry, of course I meant SoftLock (software protector) - not SafeLock (it's CD protection only).

Anyway, very interesting situation occured. SoftLock mixed with HardLock? I wonder who choosed so strange solution?

Greetings.

Last edited by dyn!o; 06-29-2004 at 18:36.
Reply With Quote
  #6  
Old 06-29-2004, 19:57
hobgoblin hobgoblin is offline
Friend
 
Join Date: Jan 2002
Posts: 124
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 2
Thanks Rcvd at 5 Times in 5 Posts
hobgoblin Reputation: 0
Target?

What target are you working on?

hobgoblin
Reply With Quote
  #7  
Old 06-29-2004, 23:20
dizzi
 
Posts: n/a
Its SAPRO/32 - Saphire suite, which is running on LogiCad "platform" (produced by kirchner soft) If there is someone interested, just pm me.

Btw IceExt patched for ds 3.1 freeze my box in other cases too, so its issue of IceExt and not SoftLock protection.
Reply With Quote
  #8  
Old 06-29-2004, 23:29
dizzi
 
Posts: n/a
I forgot to write, that main problem is that i cant find homepage of "my" softlock protection - its seems that Alladin (hardlock manufacturer) hasnt anything with it. And there is bunch of programs called softlock, but any of them seems to be that right.
Reply With Quote
  #9  
Old 06-30-2004, 03:06
JMI JMI is offline
Leader
 
Join Date: Jan 2002
Posts: 1,627
Rept. Given: 5
Rept. Rcvd 199 Times in 99 Posts
Thanks Given: 0
Thanks Rcvd at 98 Times in 96 Posts
JMI Reputation: 100-199 JMI Reputation: 100-199
Well maybe you aren't looking in the right place.

Using "softlock" (without the quotes) i got a link to this page:

http://www.kirchnersoft.com/ger/g-index.htm?/eng/news/e-SoftlockInfo.htm

which you identify as the maker of the LogiCad "platform" on which your target if running. This page, available in both German and English, has a potentially interesting title of:

Softlock Versus Hardlock
FAQ Special: Softlock License Service

which has some information on some aspects of the process of obtaining a license which should interest you.

You may be finding it difficult to find a home page for "Softlock" because the original company changed it name to Digital Goods around 2000 and then went out of business and sold off it intellectual property to pay off it's debts. See: http://www.infotoday.com/it/jan01/news11.htm

There is a company at: http://www.newlife.co.za/softlock.aspx
selling something called "New Life Softlock.net" which could, and I only say could, have something to do with what you are dealing with. They have a free download you could look at to compare with your target's protection.

Regards,
__________________
JMI
Reply With Quote
  #10  
Old 06-30-2004, 03:47
dizzi
 
Posts: n/a


JMI yes, you are thinking exactly like me, all what you wrote, ive did yesterday
new softlock is completly different


ill probably give up searching of some resources on internet

I have to look better for some weakness
Reply With Quote
  #11  
Old 06-30-2004, 15:52
dyn!o's Avatar
dyn!o dyn!o is offline
Friend
 
Join Date: Nov 2003
Location: Own mind
Posts: 214
Rept. Given: 1
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 8
Thanks Rcvd at 0 Times in 0 Posts
dyn!o Reputation: 1
Isn't it the software protection from *ww.softlock.net?

Greetings.
Reply With Quote
  #12  
Old 06-30-2004, 18:29
dizzi
 
Posts: n/a
No, it isnt.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SoftLock davo007 General Discussion 6 09-28-2009 14:24
Softlock app taos General Discussion 0 07-21-2006 23:10


All times are GMT +8. The time now is 06:51.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )