[C++]Protect DLL based HWID

// coded by drache
// modified by rcd
#include <windows.h>
//include header dari protector
//#include "ThemidaSDK.h"

UCHAR
szFileSys[255],
szVolNameBuff[255];

DWORD
dwMFL,
dwSysFlags,
dwSerial;

#define My_HWID (1289182852)

VOID CheckValidHardwareID()
{
/* WEAK POINT */
/*
LAKUKAN PERLINDUNGAN TERHADAP FUNGSI CheckValidHardwareID()
karena jika CheckValidHardwareID() di patch dengan RET maka CheckValidHardwareID()
tidak akan dipanggil dan dll berjalan tanpa pengecekan HWID !
kamu bisa gunakan CodeVirtualizer, Themida Code Replace, atau Enigma Protector untuk melindungi fungsi CheckValidHardwareID()
*/
//CODEREPLACE_START // CODE REPLACE EXAMPLE
//VIRTUALIZER_START // VIRTUALIZER EXAMPLE
//#include "vm_begin.inc" // ENIGMA PROTECTOR EXAMPLE
GetVolumeInformation("C:\\",(LPTSTR)szVolNameBuff,255,&dwSerial, &dwMFL,&dwSysFlags,(LPTSTR)szFileSys,255);
if (dwSerial == My_HWID) // Lakukan perbandingan dengan hwid yang baru diambil dengan My_HWID
{
MessageBox(0,"VALID HARDWARE ID","INFORMATION",MB_OK | MB_ICONINFORMATION);
// Serial valid
}
else // Jika serial tersebut tidak cocok
{
MessageBox(0,"VALID HARDWARE ID","INFORMATION",MB_OK | MB_ICONERROR);
ExitProcess(1); // Force Exit
// Invalid Serial
}
//CODEREPLACE_END // CODE REPLACE EXAMPLE
//VIRTUALIZER_END // VIRTUALIZER EXAMPLE
//#include "vm_end.inc" // ENIGMA PROTECTOR EXAMPLE
}
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
if (dwReason == DLL_PROCESS_ATTACH)
{
DisableThreadLibraryCalls(hDll);
//CODEREPLACE_START // CODE REPLACE EXAMPLE
//VIRTUALIZER_START // VIRTUALIZER EXAMPLE
//#include "vm_begin.inc" // ENIGMA PROTECTOR EXAMPLE
/* WEAK POINT */
/*
LAKUKAN PERLINDUNGAN TERHADAP PEMANGGILAN FUNGSI CheckValidHardwareID()
karena jika CheckValidHardwareID() di patch dengan RET maka CheckValidHardwareID()
tidak akan dipanggil dan dll berjalan tanpa pengecekan HWID !
kamu bisa gunakan CodeVirtualizer, Themida Code Replace untuk melindungi fungsi CheckValidHardwareID()
*/
CheckValidHardwareID();
//CODEREPLACE_END // CODE REPLACE EXAMPLE
//VIRTUALIZER_END // VIRTUALIZER EXAMPLE
//#include "vm_end.inc" // ENIGMA PROTECTOR EXAMPLE
}
return TRUE;
}

Perlu diperhatikan bahwa function CheckValidHardware() harus anda proteksi dengan aplikasi protector (Themida, Virtualizer, dll..) agar tidak mudah dibypass

Antivirus results
AhnLab-V3 - 2011.04.25.02 - 2011.04.25 - -
AntiVir - 7.11.7.7 - 2011.04.25 - -
Antiy-AVL - 2.0.3.7 - 2011.04.25 - -
Avast - 4.8.1351.0 - 2011.04.25 - -
Avast5 - 5.0.677.0 - 2011.04.25 - -
AVG - 10.0.0.1190 - 2011.04.25 - -
BitDefender - 7.2 - 2011.04.25 - -
CAT-QuickHeal - 11.00 - 2011.04.25 - -
ClamAV - 0.97.0.0 - 2011.04.25 - -
Commtouch - 5.3.2.6 - 2011.04.25 - -
Comodo - 8470 - 2011.04.25 - -
DrWeb - 5.0.2.03300 - 2011.04.25 - -
eSafe - 7.0.17.0 - 2011.04.24 - -
eTrust-Vet - 36.1.8289 - 2011.04.25 - -
F-Prot - 4.6.2.117 - 2011.04.25 - -
F-Secure - 9.0.16440.0 - 2011.04.25 - -
Fortinet - 4.2.257.0 - 2011.04.25 - -
GData - 22 - 2011.04.25 - -
Ikarus - T3.1.1.103.0 - 2011.04.25 - -
Jiangmin - 13.0.900 - 2011.04.25 - -
K7AntiVirus - 9.98.4470 - 2011.04.25 - -
Kaspersky - 9.0.0.837 - 2011.04.25 - -
McAfee - 5.400.0.1158 - 2011.04.25 - -
McAfee-GW-Edition - 2010.1D - 2011.04.25 - -
Microsoft - 1.6802 - 2011.04.25 - -
NOD32 - 6069 - 2011.04.25 - -
Norman - 6.07.07 - 2011.04.25 - -
Panda - 10.0.3.5 - 2011.04.24 - -
PCTools - 7.0.3.5 - 2011.04.21 - -
Prevx - 3.0 - 2011.04.25 - -
Rising - 23.55.00.05 - 2011.04.25 - -
Sophos - 4.64.0 - 2011.04.25 - -
SUPERAntiSpyware - 4.40.0.1006 - 2011.04.25 - -
Symantec - 20101.3.2.89 - 2011.04.25 - -
TheHacker - 6.7.0.1.182 - 2011.04.24 - -
TrendMicro - 9.200.0.1012 - 2011.04.25 - -
TrendMicro-HouseCall - 9.200.0.1012 - 2011.04.25 - -
VBA32 - 3.12.16.0 - 2011.04.25 - -
VIPRE - 9114 - 2011.04.25 - -
ViRobot - 2011.4.25.4428 - 2011.04.25 - -
VirusBuster - 13.6.319.2 - 2011.04.24 - -
File info:
MD5: 197f3138c9d9f104c90e94625d71e7c0
SHA1: 492c06bd7a883c725d3248ebdbfef4626c29ec53
SHA256: 4da5722f76daef1cb5499997d1a44096e224d6b0b7fad99dc1116d0b3d6f1624
File size: 24576 bytes
Scan date: 2011-04-25 13:55:15 (UTC)