Page 1 of 1
How to protect enigma form dump file
Posted: Fri Dec 13, 2013 9:16 am
by webcms
Dear Sir.
Could you guide me how to protect enigma form dump file?
I found the exe that protect with enigma protector can dump in memory and all engima protector gone.
Thank You.
Re: How to protect enigma form dump file
Posted: Fri Dec 13, 2013 10:43 am
by Enigma
Hi webcms,
If the file can be dumped after protection, and it keeps working, then the file was protected incorrectly, or not enough, no protection features are used.
Re: How to protect enigma form dump file
Posted: Tue Dec 17, 2013 5:04 am
by webcms
can you suggest best setting in protection features should i set it?
Re: How to protect enigma form dump file
Posted: Tue Dec 17, 2013 6:13 am
by Enigma
Do you protect a .NET application?
Re: How to protect enigma form dump file
Posted: Sat Dec 21, 2013 5:06 pm
by webcms
Yes.
i'm protect .net app and buy use splashscreen.
so it can't use reflector or sae after protect it.
but if i'am use DotnetDumper.
it can dump this exe.
After dump it. engima protector is gone.
and can use reflector or sae.
Do i'm make video to show you?
Re: How to protect enigma form dump file
Posted: Tue Jan 07, 2014 10:15 pm
by zop
Well, I've added many EP_CheckupIsEnigmaOk() and EP_CheckupIsProtected() in my code, like:
Code: Select all
#if RELEASE
if (EP_CheckupIsEnigmaOk())
InitializeComponent();
else
Environment.Exit(0);
#else
InitializeComponent();
#endif
And something like that in my if-else-while statements:
Code: Select all
#if RELEASE
if (content.IndexOf("Ok", StringComparison.Ordinal) > 0 && EP_CheckupIsEnigmaOk())
#else
if (content.IndexOf("Ok", StringComparison.Ordinal) > 0)
#endif
So app do not work after dump.
Also, I recommend to obfuscate your code before protecting it. So those steps are helpful against non-professional reverser.
P.S. Found good topic
HERE
Re: How to protect enigma form dump file
Posted: Wed Jan 08, 2014 9:22 am
by Enigma