Hello.

I was wandering if there is any info on this protection (DistributrShield). They have a website:

http://www.distributeshield.com

but it says:

www.distributeShield.com is coming soon...

I encountered this protection (it seems to be more than protection) in DVDneXtCOPY 2 program
The TE's release uses bogus ProductKey and PermanentKey and I'm a little skeptical the program works OK with those keys (I made three burn-coasters ).

The scan with PEID's KryptoAnalyzer showed BLOWFISH, MD5, CCITT-CRC16, BASE64 table, PI fraction (used in BLOWFISH) in the file dsvalidate.dll of the DVDneXtCOPY 2 install folder.
There is also file dsvalidator.dll in the
"Program Files\Common Files\DistributeShield"
directory, and KryptoAnalyzer found BASE64 and MD5.

However, there is a file dsvalidate.sig as well, it is BASE64 encoded, and it could be RSA-1024 signature.

I have forced functions ValidateProductKey and ValidatePermanentKey to return SUCCESS from OllyDbg, but the CPU usage was too high for trying to burn a disc.

I will appreciate any info on this protection.

Regards.

[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)