Then it'll be more difficult to hack, there's no such thing as anything impossible to hack, as long as it is encrypted and decrypted by the software itself it can be hacked

as long as it is encrypted and decrypted by the software itself

Please leave the mode of operation to someone who's done it before, if you mean to actually use my AES code then just tell me, don't use that library alone. Encrypting 16 bytes at a time reveals code patterns, which can give away major clues to your data.

Oh yeah, encrypting your code (like decrypting on every function call?) does not make it invisible to reversers.

I'm not worried about professional reversers but I do want to make their job as hard as possible... For starter, the encryption code will not be in the final executionable. It will only contain the decrypting code. Shouldn't this help to slow down the process?

I'm not really worry about the professionals. I always wanted to learn how to do this anyway. Forget about them. Where do we start?

I want to encrypt each and every string individually outside of the process with some strong encryption code and I also want to encrypt all the procedures that are not use during start-up. Then I'll place them in a include file and assemble it all together with FASM... than pack it with FSG or other suggested packer.

Does your opponent know how to find another free alternative on the 'net?

I don't understand. A simple registry key is a long way from what I described.

Quote:

I want to encrypt each and every string individually outside of the process with some strong encryption code and I also want to encrypt all the procedures that are not use during start-up. Then I'll place them in a include file and assemble it all together with FASM... than pack it with FSG or other suggested packer.

Sorry if my long post mis-lead. Forget about my reasons why. This is all I want to do.

Okay, maybe I was off on a tangent a bit,

but one should still try to equate the extra time and bugs involved with adding encryption/security against the expected return in revenue.

Even most large companies decide that encryption/security will eventually cost more in the long term than it provided in extra returns.

Never mind me, you can still go and do all the encryption/security stuff if you like..

It will slow down an attacker a small amount, but not by much

Funny, I grew up only to find it was always the super coders talking that way. I read 10 years worth and that's what keep me from even wanting to be a programmer for year. so don't feel bad. I know this is not your true style on the subject. If it wasn't for you I would have gave up FASM in a week like i did once before when I really wanted to try but was too afraid to ask for help. I saw many never receiving none

include 'win32ax.inc'

macro macroBITCH
{ 
        mov eax decrypt BIG_BOY
        and     SHAKE_HIM_DOWN
ret 
}        

.code
  start:

mov eax, procCHICK

Call BIG_BOY

invoke  MessageBox,0,"Get me a beer baby.. What's for dinner!",0,0

        invoke  ExitProcess,0
; .............................................................
;  I been totally crypt by blowfish in another program but some
;  how ic2 put me back inside here between two CHICKS
;  I dead as a door nail.. That fool name ic2 even crypted
;  even what id me as a procedure ...  Even IDA can find me...
;  I got to wait for my wife procCHICK or my slick ass 
;  girlfriend  macroBITCH to
;  turn me On. 

proc   BIG_BOY
endp
            
; .............................................................
;  I am the Decrypt for BIG_BOY entire block of code ...
;  Not just what inside the proc but the whole code block
;  I think it's my turn to get a piece of BIG_BOY today
;  I know he needs if he want to exsist.  That macroBITCH
;  just jerk him around

proc procCHICK. 

          mov eax decrypt BIG_BOY
          and       LOVE_HIM_WELL
endp

.end start    

start:
      call    decode_some_shit
    call    the_shit
    invoke  ExitProcess,0

decode_some_shit:
  ;put whatever decryptor/decoder here you want
       ret

the_shit:
    file    'MyEncodedEncryptedBinaryStuff.bin'

.end    

the_shit:
   invoke  MessageBox,0,0,0,0
  ret    

...I use LoadLibrary GetProcAddress.for all my API calls.

ic2 wrote:

...I use LoadLibrary GetProcAddress.for all my API calls.

You are likely to trigger a virus detection if you start doing that sort of thing. Also be mindful of writing to the code section, some OS version/settings will block you.

In other words, daniel believes it would be a shameful waste of time.

I, on the other hand, think that if you would like to encrypt your code/data, it's all up to you. Place it on a crackme site, the full code will probably be given back to you within hours.

I'd say go for it. Try it out, learn how it's done, you might even figure out a new way to do it that will make it much better. You cannot know until you try, so make it and then post it here so we can break it!!!!