protection on your ea from being unlocked

Hi,
Many coders/traders have same query like you. It is the biggest troubles if you would like to share your indior or EA, while you constantly shy someone will decode it.
Today, there's absolutely no way to decompile build 600 , but what will be tomorrow... Everything that's been constructed - can always be broken.

I tried to ask Mr.Google and here are few response:
1. Place your code in a DLL
2. Do not let anybody can comprehend your egy . They can decompile your EA, but can't know anything, or at least, really hard.

Below are a few links for you:
https://www.mql5.com/en/forum/149767
https://www.mql5.com/en/articles/1572

Quote:

---

Originally Posted by ;

Hi, Many coders/traders have same query just like you. It's the largest problems if you want to share your indior or EA, while you always shy someone will crack it. Today, there's no way to decompile construct 600 , but what will be tomorrow... Everything that has been built - could always be broken up. I tried to ask Mr.Google and here are few response: 1). Place your code in a DLL 2. Do not let anyone can understand your egy . They could decompile your EA, but can't understand anything, or at least, very hard. Here are a few links for you:...

---

thanks for the feedback. My replies below

1) I did read these posts earlier (I additionally google up) but I can't get a good conclusion from them
two) I want to explain how the EA works as it is not too easy with no

actually, what I want is to have some understanding exactly what the hackers are searching for, therefore I could somehow wreck up those things to make their life super hard so that they will just stop trying

Quote:

---

Originally Posted by ;

quote thanks for the comments. My replies below 1) I did read these posts earlier (I additionally google up) but I can not get a good decision from them 2) I need to explain the way the EA functions as it's not too easy with no actually, what I need is to have any understanding exactly what the hackers are looking for, so I can somehow wreck those things up to make their life super difficult so they'll just give up

---

anyone?

Placing code into DLL makes it even more easy to hack it. Because there are several more tools to perform this available.

Quote:

---

Originally Posted by ;

Hi, Many coders/traders have same query like you. It is the biggest problems if you want to talk about your indior or EA, while you shy someone will decode it. Today, there's no way to decompile construct 600 , but what will be tomorrow... Everything that has been built - could always be broken. I attempted to ask Mr.Google and here are couple of response: 1). Put in a DLL 2. Do not let anyone can comprehend your egy . They could decompile your own EA, but can't know anything, or at least, very hard. Here are some links for you:...

---

Quote:

---

Originally Posted by ;

Hi all, first of all I would like to clarify I'm not a hacker and don't have intention to hack on anyones EA. I code my EA using acc lock so they can join my affiliate what I do is when somebody enrolled under me, I'll send them with the ex4 file to be used but have some suspicion they are getting the ex4 to be unlocked with somebody so that it can now be publicly utilized. Why I suspected? Since there's 1 guy who afterwards enrolled, deposited USD1k trade only a few small lots and after some time he asked to provide him ex4 for another 5 more acc about the pretense...

---

Its knowed protection was broken (about b600 ). Even you have general advice how functions and steps to perform it. Anyways the code you get is asm subsequently is useless oftentimes. Not many protections are simple to crack whenever you have the code decompiled ( in this instance protection broken ) and always depends if the attempt to perform it disappears. Evidently in forex tools never compensate this because all profitable chances depends directly of trader using them. That is my opinion...

Quote:

---

Originally Posted by ;

quote its own knowed protection has been broken (about b600 ). Even you have info how functions and measures to do it. Anyways the code you get is asm then is useless oftentimes. Not all protections are simple to crack whenever you have the code decompiled ( in this instance protection broken ) and always depends if the attempt to do it compensate. Apparently in forex tools never compensate this because all profitable opportunities depends directly of trader utilizing them. That is my view...

---

sorry I do not quite understand you

ts knowed protection has been broken (about b600 )
** You mean the protection on construct 600 is no more?

Quote:

---

Originally Posted by ;

quote sorry I don't quite know you ts knowed protection was busted (about b600 ) ** You imply that the security on build 600 is no longer?

---

Yes. It was busted. But they'll change shortly...

How protecting our ea is a renowned question between coders consistently but unfortunately there isn't any certain safe response for this question yet
but should you would like to sell your ea or sharing it a fantastic way is that you run your ea on investor accounts yourself, and and to avoiding that they replie your ea trading on a different accounts you can hide positions a few hours in a week by changing the password for a couple hours. .
Or you can refer them to myfxbook to follow trading and your ea performance through myfxbook
Regards

Quote:

---

Originally Posted by ;

quote Yes. It was busted. However they'll change soon...

---

As far as I know it wasn't broken/hacked in the way that you are able to decompile all build stuff. Just some stuff protected by MT in their market and even then only under well defined conditions.

For me the best protection would be not to discuss the vital calculation. So the most effective way for me is to build a webservice that gives you the calculation results and only build the webclient with mql. So you've got all security egies calculations at your server and never at customer website. Decompiling the customer will give nothing of interest to them.

Quote:

---

Originally Posted by ;

quote As far as I know it wasn't broken/hacked in the way which you can decompile all build stuff. Only some stuff protected by MT in their market and even then only under well defined conditions. For me the best protection is always not to share the vital calculation. So the safest way for me would be to build a webservice that gives you the calculation results and just build the webclient with mql. So you have all protection egies calculations in your server and never at customer site. Decompiling the customer will give them nothing of interest....

---

It had been totally broken. Steps for skip protection are not there. Market tools are secure because have a second protection layer. Anyway you get asm code not source code afterward is not big Issue

1 Attachment(s)

Quote:

---

Originally Posted by ;

quote As far as I understand it was not broken/hacked at the manner that you can decompile all build stuff. Just some things protected by MT in their market and even then only under well defined conditions. For me the very best protection is always not to discuss the vital calculation. So the most effective way for me personally would be to build a webservice that gives you the calculation results and just build the webclient with mql. So you've got all security egies calculations in your own server and never at customer site. Decompiling the customer provides them nothing of attention....

---

For hackers, it is not crucial to decompile all things (though it will be ideal)

what they need to do is find within ex4 the bytes that locked the EA into the acc and remove that. This way, though they can not decompile it, at least there's no restriction to use it pass the expiry date or use it on other acc. That is something I would like to prevent or at least try to create it so hard it is not worth the effort

I googled up on hex editor and downloaded a hex editor tool and tries to see what my ex4 looks like. I compiled the exact same mql4 (with just different file name) 3 times. Attached are exactly what I saw

1) Although all 3 ex4 are exactly the same (except file name), I view entirely different hex value. This means mt4 somehow added some things within their compiler to create each ex4 unique

two) even though my ea has strings, so I can not seem to find anything that resembles something I can make out

My decision (again I am not a hacker, I am just trying to find ways to protect my ea) if just using hex editor, it is quite difficult to pin point exactly what and where to change

am I correct in this?
https://www.forexforum.co.za/general...-question.html

Quote:

---

Originally Posted by ;

quote for hackers, it is not necessary to decompile all things (though it will be ideal) what they need to do is loe within ex4 that the bytes that secured the EA into the acc and eliminate that. This way, though they can not decompile it, at least there is no restriction to use it pass the expiry date or use it onto additional acc. That is something I would love to avoid or at least attempt to create it so hard that it is not worth the effort I googled up about hex editor and downloaded a hex editor tool and tries to see what my ex4 looks like. I compiled the same...

---

I explained before. Protection is broken. Apparently you are working with protected stuff then you have the captures behaviour

Quote:

---

Originally Posted by ;

quote As far as I understand it wasn't broken/hacked in the manner which you are able to decompile all build stuff. Only some stuff protected by MT in their market and even then only under well defined conditions. For me the very best protection would be to not share the very important calculation. So the safest way for me would be to build a webservice that provides you the calculation results and only build the webclient with mql. So you've got all protection egies calculations at your own server and never at customer website. Decompiling the customer provides them nothing of attention....

---

I have no clue how the webclient thing works

any keywords I can use to google it?

Quote:

---

Originally Posted by ;

quote I explained before. Security is broken. Apparently you're working with secure stuff then you've got the ches behaviour

---

As stated by everyone over about the mql5.com forums there isn't any evidence that current builds can be decompiled and everyone so much claiming to do this has proven out to be a scammer. I delivered one of my own ex4 just to test and of course it too was a scam. I am interested where did you find evidence that security is broken?

Quote:

---

Originally Posted by ;

quote As stated by everybody over on the mql5.com forums there isn't any proof that recent builds can be decompiled and everybody so far claiming to do this is proven to only be a scammer. I sent one of my own ex4 just to test and of course it also was a scam. I am curious where did you discover evidence that security is broken?

---

I understand for now it isn't feasible to decompile but possible to just alter the ex4 content to unlock the EA eg if it's secured to acc has an expiry?

Quote:

---

Originally Posted by ;

quote I understand for now it is not feasible to decompile but possible to just change the ex4 material to unlock the EA eg if it's secured to acc has an expiry?

---

How can that be achieved with no source code.

Quote:

---

Originally Posted by ;

quote How can this be achieved without the source code.

---

I am not 100% sure but I was told hackers do some thing to ex4 file with hex editor or memory ditch or some sort of injector. I don't have any idea how it's done (if possible)

Quote:

---

Originally Posted by ;

quote According to everyone over on the mql5.com forums there's no proof that recent builds can be decompiled and everyone so much claiming to do this has turned out to only be a scammer. I sent one of my own ex4 simply to try and of course it also was a scam. I'm interested where did you find signs that security is broken?

---

Did you ask service desk? Should you work with them normally sometimes they can reply you a few questions. Anyway you've got one mql5 thread using a true case. Moderator affirms that document was broken then no doubt about was real case. However, we are talking about remove coder protection like bomb. When you bypass file ex4 security you receive asm code, not source code. Then you can bypass protections such as games but you cant restore legible code as preceding b600 ex4 documents

Quote:

---

Originally Posted by ;

quote How can that be achieved without the source code.

---

Cracker does not need mql4 however .ex4. I got my EA being cracked recently. I can trace all action from my EA by that way I confirm my EA being deciphered. All datas I collected show me no doubt

Hi all,

first of all I would like to explain I am not a hacker and I don't have intention to hack anyones EA. I code my EA using acc lock so that they can join my affiliate

what I do is when somebody registered under me, I'll send them the ex4 file for use but I have some suspicion they are receiving the ex4 to be unlocked by somebody so it can now be publicly utilized. Why I suspected? Because there is 1 man who after registered, deposited USD1k transaction just a few small lots and after a while he asked to provide him ex4 for the following 5 more acc on the pretense he wishes to use different egy for different acc

after I gave him the exact ex4 for 5 acc, I noticed he'd withdraw his capital along with the first acc and these 5 acc never had some trading activities because

the only conclusion I can make is, he's trying to unlock my EA. I have asked about and what I collect is construct 600 can't be decompiled but it can't be unlocked (something about injector). This has me worried

the way I locked my EA differs in the sense if the account doesn't fit what's set from the EA, the EA will still operate BUT I place a few traps where the EA will perform abnormal things. My target was to make it harder for a hacker to hack it by making it less obvious

bwt, I plan to perform more advanced safety for my following EA upgrade

Query :
All the safety features I have set in placed are just to counter what I guess the hackers are searching for when they attempt to unlock. But I don't have any clue what they are currently searching for. It's just like shooting a machine gun from the dark, trusting It's Going to hit the goal somehow

What I really have to know is exactly what the hackers are actually looking (only Large level thoughts) when they are hacking so I Can set in codes to make it harder or perplexing to them

wish somebody will assist me here

TQ