iLok Pace protected app terminates...

[Black_Legion]

I'm working on unpacking/patching a software which is protected by PACE InterLok v5.9.5.3483.
I tried some anti-anti-debug techniques used in Olly plugins to finally open/debug the program with Olly. but when the Authorize dialog (of software) comes up, the process terminates after 3-4 seconds..!
i also used timing anti-anti-debug techniques available in ScyllaHide plugin, but not useful.
anyone knows how can i bypass this process termination?

(as i know iLok has a driver "Tpkd.sys" which prevents from debugging, but i don't know how to bypass it. i already read some documents about iLok, but they seems to be old. this tpkd version is about 5.9)

[WaSt3d_ByTes]

Can you share with us the target?

[Black_Legion]

Originally Posted by WaSt3d_ByTes

Can you share with us the target?

sorry for delay
i'm afraid it is not possible because it's bound to hardware specifications (installed on laptop) and i have no access to setup.


after some researches i found some similar software with same PACE iLok locking system cracked by XFORCE team.
what they did was to replace the x509v3 certificate in the exe file, and sign the license (.ilf) with their own cert, results in generating new ilf license.
i tried to go the sameway.
i built my own certificate with exact length same as original one. signed the license using XML Signer, but not succeed to authorize the software.
the original license has two X509Certificate sections, which the second one is the one can be found in exe file and has been replaced in XFORCE crack.
but i have no knowledge about first X509Certificate and its usage.
if i had access to PACE iLok SDK, i was able to research more.

anybody knows what's the first X509Certificate section and its use?
maybe i did wrong in signing section, if someone knows how, please correct me.
also if someone has access to Pace SDK, please share it.

edited:
i attached the ilf license by XFORCE team