Go Back   FileForums > CD & DVD > CD/DVD Copy Protections & Utilities
Register FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 09-10-2007, 08:53
caki caki is offline
Registered User
 
Join Date: Dec 2004
Location: UK
Posts: 899
Thanks: 0
Thanked 0 Times in 0 Posts
caki is on a distinguished road
Quote:
Sorry if its a bit sketchy it was actually closer to 9 years.. i looked back at my old code tonight
I kind of have an idea of what you are talking about, especially where it uses the return address of a call to calculate the correct API to go to Only thing they really added in safedisc these days are stolen bytes, (which is where safedisc attatches its own ring 3 debugger to the process, which catches int 3's executed in the code sections and emulates commands that those int 3's had replaced) and a developer API that basically decrypts values that the devs give it. For example, the devs encrypt 2 ints, and then pass it to the Safedisc API, and then it returns two decrypted integers (I might be wrong, but hey thats all I could guess without the original source code ).

Anyways, I expect the stolen bytes to give sunbeam here a bit of trouble. Why? Well think about it: Its impossible for 2 ring 3 debuggers to debug the same process, right? So the safedisc ring 3 debugger will never attach to the process as long as Olly is debugging it, and the process that Olly is debugging will hang forever waiting for the safedisc debugger to attach. There is a way around this, but it is long and cumbersome (and apparently doesn't work in Vista ).

As for securom, well seems like they hired some sadistic motherfuckers to recode the protection for them, lots of new features in it... and I probably haven't found all of them yet ^^
__________________
Sanity is for the weak.
Reply With Quote
Sponsored Links
  #2  
Old 09-10-2007, 11:28
TippeX's Avatar
TippeX TippeX is offline
zeroes and ones.....
 
Join Date: Jan 2003
Posts: 3,842
Thanks: 2
Thanked 33 Times in 23 Posts
TippeX is on a distinguished road
Quote:
Originally Posted by caki View Post
Its impossible for 2 ring 3 debuggers to debug the same process, right? So the safedisc ring 3 debugger will never attach to the process as long as Olly is debugging it, and the process that Olly is debugging will hang forever waiting for the safedisc debugger to attach. There is a way around this, but it is long and cumbersome (and apparently doesn't work in Vista ).
softice m8, or syser, or trw2000 in win2k - safedisc works perfectly with a well hidden softice
or coding your own api hooker for both the processes works fine, no drivers used, so they're open for abuse
__________________
bleh
DO NOT PM me with questions, leave that in the forums...ESPECIALLY if i dont know you...
Reply With Quote
  #3  
Old 09-10-2007, 12:52
caki caki is offline
Registered User
 
Join Date: Dec 2004
Location: UK
Posts: 899
Thanks: 0
Thanked 0 Times in 0 Posts
caki is on a distinguished road
Oh don't worry, I have a simple API hooker that works just fine under Vista, I was referring to my method where I use Olly fails in Vista because it seems to be impossible to detatch from a process in Vista and leave the process running. DebugActiveProcessStop also doesn't work; always returns privilege errors, and I'm running under admin...
__________________
Sanity is for the weak.
Reply With Quote
  #4  
Old 09-10-2007, 23:41
TippeX's Avatar
TippeX TippeX is offline
zeroes and ones.....
 
Join Date: Jan 2003
Posts: 3,842
Thanks: 2
Thanked 33 Times in 23 Posts
TippeX is on a distinguished road
maybe you also need debug privs?
__________________
bleh
DO NOT PM me with questions, leave that in the forums...ESPECIALLY if i dont know you...
Reply With Quote
  #5  
Old 10-10-2007, 06:46
caki caki is offline
Registered User
 
Join Date: Dec 2004
Location: UK
Posts: 899
Thanks: 0
Thanked 0 Times in 0 Posts
caki is on a distinguished road
Quote:
Originally Posted by TippeX View Post
maybe you also need debug privs?
Yeah yeah, got that since DebugActiveProcessStop is being executed inside Olly's process, not the target process, and Olly obviously has debug priviliges... it doesn't matter, since like I said the API hooker works fine.
__________________
Sanity is for the weak.

Last edited by caki; 10-10-2007 at 06:52.
Reply With Quote
  #6  
Old 13-10-2007, 12:37
DABhand DABhand is offline
Banned
 
Join Date: Nov 2004
Location: Near my PC
Posts: 5,406
Thanks: 0
Thanked 3 Times in 3 Posts
DABhand is on a distinguished road
I think this is when I can do the Forum Dance \o/

I do believe the thread is dead :P
Reply With Quote
  #7  
Old 13-10-2007, 13:11
caki caki is offline
Registered User
 
Join Date: Dec 2004
Location: UK
Posts: 899
Thanks: 0
Thanked 0 Times in 0 Posts
caki is on a distinguished road
Naww, I do believe Sunbeam is still going at it, over and over again, just to prove sheep wrong. I wouldn't be surprised if in a month he produces a working dump.
__________________
Sanity is for the weak.
Reply With Quote
  #8  
Old 13-10-2007, 13:58
Synaesthesia Synaesthesia is offline
Registered User
 
Join Date: May 2007
Location: Incensed
Posts: 92
Thanks: 0
Thanked 0 Times in 0 Posts
Synaesthesia is on a distinguished road
Am in a really good mood today Was playing HL2 and decided to learn a few more things from master's bag (sheep). So I got his "ages" trainer and start playing. Got to the first part in-game where you get a hold of grenades. Well, unlimited ammo + rapid fire = BOOM. Launches tons of grenades and lags the game so baaaaadly, I couldn't help but laugh. Picture this - small room, 2 enemies - you and 500 grenades. Hilarious!!!!

Regarding thread topic, I lost interest in it. It's not worth the time to start-up reading on protections like these. Yeah, you might say they're the "shit". If you already know how to do it, good for you - stop messing around and start releasing then...

Why not to bother with it?

a. none of you will ever use such a protection in a trainer (that's where we all started - sheep using SecuROM-like protections in his trainers - yea right - he didn't know how to bring it into discussion...)

b. I find it retarded to start on a crusade and just learn how to do it only to prove a point - it's not the proof that bothers me (surely bothers you), but the moral behind it...

So, we leave it at "sunbeam is a noob" and we call it a day

Cheers

P.S.: Still laughing at the parade (me, you and 500 grenades) xDD

Last edited by Synaesthesia; 13-10-2007 at 14:05.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



All times are GMT -7. The time now is 07:18.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
FileForums @ https://fileforums.com