Forums > MaxMSP

[FYI] Successfully protected a standalone Max app on PC

February 13, 2010 | 11:18 pm

Hello all,

My client and I appear to have successfully protected a standalone Max application I built, using PC software from Oreans:

http://www.oreans.com/products.php

The key here is the "XBundler" plug-in, which allows you to "wrap" additional files into the application bundle: media, text, whatever you want. In this case, the all-important factor was the .mxf file, which is vulnerable to reverse-engineering. There is an option to bundle the file into the finished application, have it encrypted, and never be written to disk during runtime. Once the app was protected, we threw away the .mxf and everything worked just fine…the software makes a .bak file that has the .mxf encrypted inside. You then run the .exe (Max standalone app) as usual and it knows how to open it.

This was NOT straightforward, as many protection software apps don’t allow this kind of bundling, they generally only protect .exe, .dll, etc., and not text files. Also it took awhile to get the settings just right, but there are a ton of options, so we needed to read the documentation carefully.

The Max standalone runs in Trial Mode until a hardware-dependent License key has been entered. This can be done with a generated .dat file or a Windows Registry Key entry.

The cost was about 450 Euros for the Single Developer License. You can allow software updates for your application as needed.

I don’t know about similar software solutions for Mac, so if anyone has tips on this, I’d be very interested to hear about them.

Hope this is helpful to some!


February 23, 2010 | 7:58 pm

Hi, nice post
I am also interested in a similar solution. Could you please guide me a little bit more? As for example how much coding does it need, price for over 100 copies and so on.
If you want you can contact me off list

Stavros – stavrosdee@msn.com


February 24, 2010 | 3:01 am

Thanks Seejay – had you also looked at Molebox?

http://www.molebox.com/

I’ve not tried it personally, but someone told me that it works with Max applications. It seems a bit cheaper too, at 300 Euros for a license that allows up to 5 activations…

Also don’t know of any Mac solutions.


February 24, 2010 | 2:56 pm

Thanks for the info—Molebox looks like a very good alternative. All about the encryption capabilities. I think the advantage to Oreans is that you can protect as many apps as you want (I’m not totally sure about this), though you need to stay "subscribed" to keep your copy active. It’s not bad rate-wise though. Definitely if you had just a few apps to work with, Molebox would be great, and the process looks like it might be easier.

@stavros: Didn’t need to do any extra programming, though they have a full SDK if you need it. This could be helpful with automating certain parts of a serial generation/licensing process. Though I’m not sure where/when/how to implement their SDK functions, they’re designed to be used within your application that’s already written in a language which supports calling those functions, so… where would they go in a Max standalone? Maybe a good question for the Dev list, but I don’t know… anyway, they seem to be a good option. Like I said, the interface all works, but there’s a LOT there and it will take some hours of reading docs and doing test runs. At least it did for me…it was quite the learning experience.


July 22, 2010 | 6:16 pm

Late reply, sorry about that, but thanks seejayjames for the info and the suggestions.

I did try the Molebox product but I don’t think it can be any useful to MaxMSP standalone applications. It creates a packed – sort of an encrypted version – .exe that it is based on a pre-existing .exe file. This is a problem because if you want to encrypt your .mxf files you don’t have the option to do it. I have emailed the company to clarify if you can also use it to encrypt other files than .exe as well.

Stav.


September 24, 2010 | 10:29 pm

We (http://www.lividinstruments.com) have a fairly useful system for protecting standalones using a web registration if anyone is interested. It is all max based and cross platform, and uses an online form to provide keys. It is not perfect and not bullet proof, but if you are interested, I could likely help out.


September 25, 2010 | 9:54 am

@pnyboer
please tell us more about it.
Is it for Mac too?


September 25, 2010 | 9:07 pm

+1 for me, especially cross-platform… this has been pretty troublesome and expensive to get going. Very interested in your system. Feel free to email offlist or to post here if you think that’s OK too.


September 25, 2010 | 11:53 pm

I vote for contacting peter offlist, and probably will be doing soon :)


September 26, 2010 | 8:10 am

Please keep posting on this line. I have an interest too.


November 6, 2010 | 1:13 am

I try to find some way to protect the patch in osx.

In windows is very simple just bundle all in oen single exe file and dne, you have protection for prevent anybody edit the patch.

But in OSX?

I not find anyway yet, im searching for 3 months and cant find.
pnyboer your system can prevent edition of the patch?


November 6, 2010 | 1:20 am

Basically is needed some way to protect copy and edit of any osx stand alone created with max.
Is amazing nobody from Cycling 74, dont take acre about this.


November 6, 2010 | 7:00 pm

Hi,
Sorry I haven’t followed this post. I need to add it to my favorites! Anyway, contact me off list at pete at lividinstruments and I can give more detail.

Peter


November 6, 2010 | 8:31 pm

I try contact by lividinstruments.com, nobody reply.
Contact to where please? some specific mail please?
Thankyou !


November 7, 2010 | 3:11 pm

what email did you use? I can look it up. Or send me an email to pete@lividinstruments.com


November 7, 2010 | 6:09 pm

@Larsen187:

"In windows is very simple just bundle all in oen single exe file and dne, you have protection for prevent anybody edit the patch."

How do you do this? What program will bundle it into a single .exe file for you? And is it free?

If you build a standalone Max app on Windows you can still crack the .mxf.


October 28, 2013 | 8:55 am

@Seejay:

I tried to protect our app with Themida and XBundler just as you posted. After one day of trying, it does not work. I can start the Max Runtime but the mxf file (which I deleted after protecting the app with Themida/XBundler) can not be opened via open file dialog.

Here is my Themida log file. Can you give me a hint, which settings to choose?
Thanks!

Themida - Advanced Windows Software Protection System  [Version 2.2.3.0]

Protection Options for MAXapp.exe
---------------------------------

Macros Information
------------------
VM Macros: 0
CodeReplace Macros: 0
ENCRYPT Macros: 0
CLEAR Macros: 0
MUTATE Macros: 0
STR_ENCRYPT Macros: 0
CHECK_PROTECTION Macros: 0
CHECK_CODE_INTEGRITY Macros: 0
CHECK_VIRTUAL_PC Macros: 0


Protection Options
------------------
Anti-Debugger: Advanced
Anti-Dumpers: ENABLED
Entry Point Ofuscation: ENABLED
Resource Encryption: ENABLED
VMWare compatible: ENABLED
API-Wrapping Level: Level 1
Anti-Patching: None
Metamorph Security: ENABLED
Memory Guard: ENABLED
When Debugger Found: Display Message
Application compression: ENABLED
Resources compression: ENABLED
SecureEngine compression: ENABLED
Anti-File Monitor: ENABLED
Anti-Registry Monitor: ENABLED
Delphi/BCB form protection: ENABLED


Virtual Machine Settings
------------------------
Number of Virtual APIs wrapped: 0
API Virtualization Level: 3
Entry Point Virtualization: 0 instructions
Multi Branch Technology: DISABLED
Virtual Machine Processor: Mutable CISC processor
Number of CPUs: 1
Opcode Type: Metamorphic - Level 2
Dynamic Opcode: DISABLED


Advanced Protection Options
---------------------------
Encrypt Application: ENABLED
DLL plugin: DISABLED
Hide from PE scanners: Standard
.NET assemblies: ENABLED
Active Context: ENABLED
Add Manifest: Don't add manifest


XBundler files
--------------
MAXapp.mxf

Viewing 17 posts - 1 through 17 (of 17 total)