hacking games with starforce

[BarryB]

I'm not sure a 'universal' crack could be made Morglum, maybe coded tools to help in the tracing/creating these functions that don't get dumped, or maybe you mean once dumped, then fix it with a universal tool? Still not sure it's that easy, the developers of this protection meant it to be tough to crack, and it's proving just that!

[Morglum007]

Originally Posted by BarryB

I'm not sure a 'universal' crack could be made Morglum, maybe coded tools to help in the tracing/creating these functions that don't get dumped, or maybe you mean once dumped, then fix it with a universal tool? Still not sure it's that easy, the developers of this protection meant it to be tough to crack, and it's proving just that!

Well, i think it is possible. The problem is to hook EVERY p-code, used or not, and not just the minimum required to launch with a specific release of the game. Thats like the API calls in SecuROM. In SF there is a p-code table and a "translation table" found in near .dll ( not protect.dll) The problem is to get all translated. With US/UK/german releases, it is fixed just the p-code to make working such releases, but not every one, so other releases in other countries do not have "support". the way of obtain such table will make a "universal" way of procceding.

Good luck!

[ByteMare]

Ok, what about those "Active protection functions",something similar to sexxurom triggers? Just checked out a "known title" and *wow* hooking every p-code sure as hell gonna take some time....nice antidebug, it took me 3 beers to get around (and some reboots) I should join your forums, Morglum..this starts to look like a real challenge heh

[Morglum007]

Well, that "Active protection functions" are too easy to find in SecuROM. It is just API call. SF works in another way.

Good luck!

[TippeX]

Originally Posted by Morglum007

Well, that "Active protection functions" are too easy to find in SecuROM. It is just API call. SF works in another way.

Good luck!

thats called 'triggers'

sf3 works in many ways, api rerouting, api hooking, virtual file system and p-code procs, oh and the sf3 api system doesnt work in another way, look deeper and think a little

[Morglum007]

Well, what i mean to say is that SF is not based on that "active functions" that are know as triggers. The difficulty of SF resides in its p-code fixing. In SecuROM it's quity easy to find such triggers, cause once dumped, iAT fixed and OEP found (with crc fixing of course), there is just to nop or jnz to jz some call to cercain API and done. Anyway, not every SecuROM released game have triggers on it, and just only a few titles have it ( commandos 3, vietcong...)
Thats like the "silent alarm" "technology" of newest safedisc, and both of them copied the Codemasters/Sta clara Fade scripting system to do that.

Anyway, SF is strong for its p-code table, not for its API system. (besides relationated, i think not mixable)

Good luck!

[Tootzie.]

Heres the crack, in the thread theres a post that this crack should work on each starforce protected game which is on CD for the PC. I tried to use it for Kill.Switch (Which has been brought to the pc from a console), but that didnt work.. So I guess its only for games which arent brought to the pc from a console or are on DVD.

http://fileforums.com/archive/index.php/t-63374.html