New GDRom Protection Crack Tools

[xena]

GDRom Protection Crack Tools by Pekearai (http://luna.spaceports.com/~selfboot/Downloads/downloads.htm)

--------------
File explanation -

hack3.exe :
It change a numerical of value in "1st_read.bin"
it rewrites 45150 and 45166 LBA, "5EB0 to 9600"
It use to crack the GDROM protection . eg. hang or reset after S**A Licensed Screen

hack3 1st_read.bin 0.


cdda.exe : Patch 1st_read.bin to enables it to use CDDA.
Notes: It only works on Gametype katana with cdda like "vitural-on, Mr.Dirller, GT2..."

cdda 1st_read.bin


dahack.exe: 1st_read.bin in which CDDA is contained uses here.

1st_read.bin is rewritten using dahack.exe.
The usage is the same as that of hack.exe.

For example, if session 2 start at LBA 35500.

dahack 1st_read.bin 35500 .

Next,

cdda 1st_read.bin

Then run binhack .

Cautions: This patch is not test on all DA games,

This patch information is using the method which post by Mr.KiMWU
Please use as self-responsibility. .

[Jim]

does this work??? does this make it possible to copy a dc game straight from the gdrom??? please email with detailed instructions...thank you..... Yodude565@aol.com

[zetsword2001]

Hey, email me too dude, i'd appreciate it.

[emulsoin]

im curious too... please email me

[xena]

Hack3 .exe is for use to crack the Bootbin protection after u rip it from GDROM.
eg. hang or reset after S**A Licensed Screen

cdda.exe :
Patch 1st_read.bin to enables it to use CDDA.
It means u can active the cdda from accession non-cdda release, ie.u can patch Non-CDDA S**A GT to S**A GT with CDDA.

dahack.exe is for patch the cdda lba in Bootbin




GDK -> Click to download <- (http://luna.spaceports.com/~selfboot/Downloads/downloads.htm)

[DreamcastKeV]

lol... why don't you cheapasses just buy a ripping cable instead of looking for sofware to do it? its really not that hard and its impossible to do with a normal cd drive..

[xena]

to DreamcastKeV

without binhack & iphack like Tools ...Do u think u can burn protection GD game bin to non-boot or selfbootable ~~LoL

----------------------

[DLT]

Ok, so what is BinHack? Where ya get it? Is it just wjat sets 1st_read.bin to say like 11700? If so, must i run hack3.exe first?

[xena]

>lol... why don't you cheapasses just buy a ripping cable instead of looking for >sofware to do it? its really not that hard and its impossible to do with a normal >cd drive..

binhack in echelon sbkit

U need run hack3.exe before u create iso :)

1) hack3 1st_read.bin 0
"crack the protection first"

2) hack 1st_read.bin 11700
hack 2_dp.bin 11700
hack maigo.bin 11700
hack sg_dpldr.bin 11700
hack *.bin 11700 .....
"Patch selfboot Lba"

3) Binhack 1st_read.bin & ip.bin
"Patch the ip.bin to bootable"

-----

[DLT]

ok, this is what i did. i got all the data, downsample the *.dcz files so it would all fit on my cd. i then ran:
hack3 1st_read.bin 0

then:
hack xxxx.bin 11700 for the other *.bin files
then binhack for ip.bin and 1st_read

made an iso, insert ip.bin, burned it

it goes to the sxxa screen, then, still, is like my dc shuts of, loose the picture completely. What am i doing wrong?

[xena]

which gxxe u re trying???

[DLT]

rayman 2

[DLT]

xeno, tried again, and same thing. i don't understand. i run hack3, hack, and binhack. it goes to the sxxa screen, then, tries to load, then blacks out (like my dc isn't even on). i hacked 1st_read.bin with hack3 and hack and binhack, and all the others (exept for ip.bin) with hack.exe. my lba is 11700, so i use that.
hack3 1st_read.bin 0
hack 1st_read.bin 11700
hack restofbins 11700
then run binhack, make iso, insert ip, burn. fails everytime

[DLT]

ok xena, few questions....

could it be my other bin files, like 2_do.bin? should i run hack3.exe on them, too?
and, when i run hack3.exe on a file, then hack.exe, the hack.exe has no effect on the file..but if i run hack.exe, then hack3.exe, hack3.exe only chnages 2 parts of the bin file, instead of 3. may not be explaining this good.

should i run:
hack3 binfile 0
hack binfile start-lba(11700)

or

hack binfile start-lba(11700)
hack3 binfile 0

or hack3 binfile start-lba(11700)

?

[xena]

hack3.exe only work on orginal unpatch bootbin
"6EB0 0000 0100 0000 4344 303031",
if u patched the bootbin to 11700 or 11702 first ,the hack3.exe will not patch the bootbin


did u get the screen information when u patch the bootbin like below??

---dos screen---
c:\selfboot\dreamrip\hack\hack3 1st_read.bin 0
000a45a4->
000a4974->
0012f998->


---------------
Also what's the rayman 2 game type ,Katana,katana with cdda,wince or wince with cdda?

How many .bin file hv string CD001?
hv warning da or not?
Please give more information,otherwise can't help.

[DLT]

ok, yes i got information like that when running hack3. the game is Katana , no cdda. unless i chnaged it whem i edited the bin files, none of them have the string cd001. it does not have warning.da, either. question though. when i run hack3, i do get the output info, but then when i run hack.exe on 1st_read.bin after running hack3, i do not get any information becuase it does not modify the file any. thnaks xena

[xena]

question to DLT

none of them have the string cd001?
what's about bootbin"1st_read.bin"

did u test this game without hack3.exe just normal binhack only?maybe this game doesn't hv any protection on it.

try burn 45000 sector at the first session and data for the rest.

Burn 2 times : mktmp audio.raw 39513600
data track start at track3 mode 2xa