get hardcoded hd serial with c++

hi all
new here
nice forum you have

saw http://cboard.cprogramming.com/showthread.php?p=427642
trying to compile it , downloaded disphelper_081.zip, copied the 2 files .c, .h
and copied the main from the topic 427642 ,
didnt see spaces in root , added .c to the project , cant compile

help please if you can
thanks in advance

What compile errors are you getting?

sorry i do compile but when i run i get this
http://rapidshare.com/files/80810223/error.JPG

problem is in
dhGetValue(L"%s", &pszSerial, wmiMediaItem, L".SerialNumber");
i think

really weird thing is that the exe does work for a friend
not for me
it shows for him the right letters and numbers for the serial,
but not in the right order

Call me lazy, but I'm not going to deal with a download service to look at your error message. You can attach jpegs to messages here, if you want, or cut and paste the error into your message.

:\ lol also have probs uploading... :/\
not my day
it shows a messagebox with the error

cant copy and paste , manually write:

member .serialnumber
function getvalue
errorin internalinvokev
error typemismatch
code 80020005
source application

I'm assuming that you have one or two physical drives and at least one or more logical drives. Thus, the code is throwing an exception because it cannot query the serial number of the logical drives. To bypass this exception change:

Code:

---

dhToggleExceptions(TRUE);

---

to

Code:

---

dhToggleExceptions(FALSE);

---

Here is the above error.jpg for those of you who don't want to deal with rapidshare:

hi
thanks,
now it doesnt throw exceptions but still dont see the serial
for a friend it works beside the fact it mix the position of some of the chars and omit a few also

i have an allowed list of serial in my prog , and the prog check (with other code atm , that
cant read scsi (friend has scsi not me and for him id works)) the serial and if it is in the allowed list. it does a check when you press start , and if it didnt find it before in the allowed list it doesnt let you continue,
two questions about that
first i see the serials plaintext in the .exe if i edit it , how to hide it the most easy way ?
(using codegear c++ builder for that prog , not for this code we discuss here , which i use
vs6 for it atm for tests)
and second question how to make it harder for hexeditors to just bypass the checks

thanks in advance

Encrypting the serial number would be fairly simple. A simple XOR encryption will do. Storing the MD5-sum [or CRC32 or similar] of your built-in list of serial numbers would be a way to make sure they haven't been tampered with.

To avoid people removing the check itself (by changing the branch conditions, inserting NOP's to the call or some such) that is much harder - there's no real simple answer to that one. Using macros or inline functions that forces the check code to be instantiated many times will make it harder to find and destroy the checks - but only marginally.

Also consider that if someone really wants to cheat your program, there is always the possibility to patch the "get me the serial number of the hard-disk" kernel code so that it always returns [whatever is allowed by your program]. Someone with a bit of debug & kernel programming skills will be able to do that.

--
Mats

thanks for your answer ,

do you know please simple class i can use to encrypt / md5 the serials ?
thanks

I'm pretty sure a MD5 checksum program can be found via google. Same for a simple XOR encryption [the hard part here will be to have a suitable key - ideally, the key should be as long as the serial number of the hard-disk, to make detecting the key itself harder].

--
Mats

didnt find something straightforward :\

Try this:
http://www.gnu.org/software/textutils/textutils.html

It contains "md5sum" source code, amongst many other things.

And:
http://www.cprogramming.com/tutorial/xor.html

--
Mats

thanks will try

Given enough effort, any security check can be defeated. The goal shouldnt be to prevent them from defeating your security, since thats impossible, the goal is to make it as time consuming and difficult as you can. Hopefully it costs them more to hack the program than it does to just buy it. Encrypting the serial numbers, even poorly, has the added benefit of making it a felony to reverse engineer the security.