hacking games with starforce

[Morglum007]

Well, ummm, sorry for the late, but i'm at holydays, so cannot reply as soon as other.

Well, respecting that russian SF tool, it is just a dumper and do not include pcodes catching. It does the "easy" thing, reconstruct OEP and IT, with some CRC fixing.

Respecting VOB, well we haven't studied such prot, so cannot say anything about.

About p-code catching, we have pointed the routine that calls such pcodes, and there is just about 500 p-codes, so no 500 mB logger needed. It is pretty similar to SecuROM API routione with minimal variants, just changing some instructions to fool novice crackers. As said for other user, here or in another forum, p-codes are different from game to game and are increasing in number to make it "impossible" to trace all. Thats why there isn't a standart tool for SF dumping.

I know both that russian tool and others, but nothing to do with p-codes right now. As told in my web page, we are a very interesting researching group and have a lot of progress in every SF way.
We are so close to make a valid SF key from an original one, but we are reversing the whole thing too.
Respecting p-codes, most are just jmp to main x86 code into main .exe, but some are into VM, and that x86 code generation is the problem.

The way SF is muting is the way crackers are doing too, and crackers are muting fast, so SF will be "solved" soon, in every aspect.

As said Kosmonaut too ( from cdfreaks and "member" of our little group), SF is something made from expert crackers, and do not know a lot about copy-protection. It is just a CD cops check with a very impressive guarding code.
Our latest research thinks SF have not a very smart cd checking, and maybe could be duplicated with a "twinpeak" method soon. It seems SF checks for the "asymetric" and EXTERNAL data spiral. Because burned CD are asymetric in the inner zone ( p-cav, cav) and "symetric" in the outer one (clv), that can make SF to distinguish between copy and original.

There is a lot of more interesting things about SF, but thats all for now.

Good luck eveybody.

TIP: I do not like another type of emulation ( like RAM one) cause thats can be always blacklisted by making spin command test on every drive.Well, time will say.