Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 02-17-2005, 17:10
Sky Sky is offline
Friend
 
Join Date: Aug 2004
Posts: 70
Rept. Given: 3
Rept. Rcvd 3 Times in 2 Posts
Thanks Given: 6
Thanks Rcvd at 15 Times in 11 Posts
Sky Reputation: 3
Use IceExt? i think it'll help you with SIce hiding from StarForce...
Reply With Quote
  #2  
Old 02-17-2005, 18:03
peleon peleon is offline
Friend
 
Join Date: Sep 2003
Posts: 174
Rept. Given: 0
Rept. Rcvd 7 Times in 1 Post
Thanks Given: 0
Thanks Rcvd at 7 Times in 7 Posts
peleon Reputation: 7
fripouille: Starforce has been discussed here a lot. You should use the search button first.

Sky: About using IceExt, i doubt it will help against Starforce because own redirection of debugging interrupts that make Sice to crash.

Regards.
Reply With Quote
  #3  
Old 02-18-2005, 01:33
fripouille
 
Posts: n/a
Hi all .
Thanx, but in fact, IceExt is no use against starf0rce. It detects 2 Meltice tricks, but this can be easily made by hand... not a big deal.
Peleon : I tried to use 'search' option before, but I can't see any 'search' button in this forum.
Sure, I need new glasses.

thanx a lot... more informations are of course welcome.
bye.
Reply With Quote
  #4  
Old 02-19-2005, 22:47
niom niom is offline
Friend
 
Join Date: Jul 2004
Posts: 21
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 0 Times in 0 Posts
niom Reputation: 0
you should use windbg instead of softice, because its not that 'intrusive' as softice and you'll need only one simple trick to prevent detection

once you can use a debugger to view interesting parts (like the prodrv06) you'll see a very simple code-decryption, api loading at runtime and a little vm
Reply With Quote
  #5  
Old 02-20-2005, 01:46
Cobi Cobi is offline
Friend
 
Join Date: Sep 2004
Location: Germany
Posts: 55
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
Cobi Reputation: 0
You could implement your own Ring0 Debugger bypassing the Windows/Processor Debugging Features by adding a new Interrupt to the IDT which invokes cli and jumps into your Code.
So its
-nearly Undetectable (except by selfchecking Code)
-useable for StarForce Apps

If anyone wants to start such a Project, i will join
Reply With Quote
  #6  
Old 02-22-2005, 14:58
elephant elephant is offline
Friend
 
Join Date: Feb 2005
Posts: 94
Rept. Given: 2
Rept. Rcvd 29 Times in 15 Posts
Thanks Given: 132
Thanks Rcvd at 127 Times in 41 Posts
elephant Reputation: 29
It seems there is no too much information about Staforce cracking, but someting obvious is that the protection is being cracked. We have some examples like Xpand Rally (StarForce 3.3) cracked by Ultima or the more recent Will Of Steel (Starforce 3.4.67.7) cracked by Hoodlum.

Unfortunately there are no tutorials or know tools to help in the cracking of SF, at least for the public masses. The best information I have found is the tutorial of yates called "StarForce 3 - Brief insight into a hidden world" that explains how the mov instruction works in the SF Virtual Machine. You can get it from: http://www.yates2k.net/cd/starforce.rtf

Does anyone have got more technical information about this protection?
Reply With Quote
  #7  
Old 02-23-2005, 06:22
dyn!o's Avatar
dyn!o dyn!o is offline
Friend
 
Join Date: Nov 2003
Location: Own mind
Posts: 214
Rept. Given: 1
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 8
Thanks Rcvd at 0 Times in 0 Posts
dyn!o Reputation: 1
Quote:
It seems there is no too much information about Staforce cracking
There is completely no useful information.

Quote:
the more recent Will Of Steel (Starforce 3.4.67.7) cracked by Hoodlum
It's a fake relased by Hoodlum's competition. So far Ultima is the only one who cracked SF with VM (Xpand Rally + Colin 2005).

Quote:
is the tutorial of yates called "StarForce 3 - Brief insight into a hidden world"
Unfortunately it's small and obsolete information concerning single SF VM instruction.

Good luck.
Reply With Quote
  #8  
Old 02-25-2005, 05:17
fripouille
 
Posts: n/a
Smile

Hi !
Thank you all for your answers !... even if the last one doesn't sound pretty optimistic.

It seems to be a really hard target, but even if I'm almost sure of being unable to break it down, I'm just going to start a 'step by step' approach.
First, I'll follow niom's advice and try to use windbg instead of SI. Even if I'm not familiar with this proggy.
once again, thanx.

bye
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 15:44.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )