Results 1 to 2 of 2

Thread: Crypkey - Beating my head against the wall

  1. #1

    Crypkey - Beating my head against the wall

    Hi Guys, So I'm trying to learn the ins and the outs of Crypkey protection in an application. I've read most of the previous posts on the subject.

    I've used ckinfo successfully in a previous version of the same application and generated the key options required just by pure chance, as they Key level was 1 and the options were just 1 through 5.
    Now in the newer version of the application, using ckinfo 1.14 to generate the keys just gives me an error -2 when I enter the site keys I create using the same key levels and options.

    A little background on me.
    I'm operating ollydbg 1.0 with plugins at a beginners level. Have patched a few apps. I have also managed to dump and emulate a couple superpro dongles with other applications as well as modify a variable on the key dump to allow more options in the application.

    So, I know in order to find my key levels and key options, I should be attaching olly to my target.exe and/or the crp32002.ngn file when its running. But olly doesn't seem to be attaching correctly to the target.exe
    I can attach it to the NGN file, and using ultrastring reference plugin I find some spots in the NGN code where getlevel and getoptions are referenced. Breakpoints on these items are never called

    Note, If I don't push Play in olly right away after attaching to crp32002.ngn, when I bring my licence page up after resuming, the trial license seems to be killed and displays as no license until I restart the application. So there must be some kind of timer involved between the crp32002.ngn and crypserv.exe to detect debuggers.

    Now, I haven't any experience in creating sig files in IDA and can't seem to find one online for crypkey 7.0+ to use against my target.exe in ollydbg. Is there a link to the SDK that is not dead?

    Any tips or advice on how to continue would be appreciated.
    Please see attached.
    Link to target DLL can be made available upon request.
    I believe its being protected by crypkey 7.7.0.1

    Thanks from a noob to the RE scene.
    Psgama
    Attached Files Attached Files
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Also, I can't seem to find where the trial sitekey is stored. Should this be in my NGN dump? If so I should be able to parse it into ckinfo and get the key level information that way?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Crypkey 7.1
    By NEODIG in forum The Newbie Forum
    Replies: 40
    Last Post: May 5th, 2013, 13:12
  2. I can only shake my head.
    By FrankRizzo in forum The Newbie Forum
    Replies: 34
    Last Post: May 25th, 2007, 19:50
  3. Crypkey (again)
    By Cobra in forum The Newbie Forum
    Replies: 3
    Last Post: April 7th, 2004, 07:24
  4. Crypkey
    By peterg70 in forum Malware Analysis and Unpacking Forum
    Replies: 10
    Last Post: November 13th, 2001, 03:02
  5. Crypkey SDK.
    By Ziggie in forum Malware Analysis and Unpacking Forum
    Replies: 1
    Last Post: November 12th, 2001, 07:50

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •