hacking games with starforce

[Morglum007]

Well, that "Active protection functions" are too easy to find in SecuROM. It is just API call. SF works in another way.

Good luck!

[TippeX]

Originally Posted by Morglum007

Well, that "Active protection functions" are too easy to find in SecuROM. It is just API call. SF works in another way.

Good luck!

thats called 'triggers'

sf3 works in many ways, api rerouting, api hooking, virtual file system and p-code procs, oh and the sf3 api system doesnt work in another way, look deeper and think a little

[Morglum007]

Well, what i mean to say is that SF is not based on that "active functions" that are know as triggers. The difficulty of SF resides in its p-code fixing. In SecuROM it's quity easy to find such triggers, cause once dumped, iAT fixed and OEP found (with crc fixing of course), there is just to nop or jnz to jz some call to cercain API and done. Anyway, not every SecuROM released game have triggers on it, and just only a few titles have it ( commandos 3, vietcong...)
Thats like the "silent alarm" "technology" of newest safedisc, and both of them copied the Codemasters/Sta clara Fade scripting system to do that.

Anyway, SF is strong for its p-code table, not for its API system. (besides relationated, i think not mixable)

Good luck!

[Tootzie.]

Heres the crack, in the thread theres a post that this crack should work on each starforce protected game which is on CD for the PC. I tried to use it for Kill.Switch (Which has been brought to the pc from a console), but that didnt work.. So I guess its only for games which arent brought to the pc from a console or are on DVD.

http://fileforums.com/archive/index.php/t-63374.html

[guod]

@Tootzie.:

first of all, it's not a crack.

Second, the file you are refering to will only work for Soldiers heroes of wwii. A new one has to be created for each game and it doesn't seem to be possible on DVD games.

[Morglum007]

Well, ummm, sorry for the late, but i'm at holydays, so cannot reply as soon as other.

Well, respecting that russian SF tool, it is just a dumper and do not include pcodes catching. It does the "easy" thing, reconstruct OEP and IT, with some CRC fixing.

Respecting VOB, well we haven't studied such prot, so cannot say anything about.

About p-code catching, we have pointed the routine that calls such pcodes, and there is just about 500 p-codes, so no 500 mB logger needed. It is pretty similar to SecuROM API routione with minimal variants, just changing some instructions to fool novice crackers. As said for other user, here or in another forum, p-codes are different from game to game and are increasing in number to make it "impossible" to trace all. Thats why there isn't a standart tool for SF dumping.

I know both that russian tool and others, but nothing to do with p-codes right now. As told in my web page, we are a very interesting researching group and have a lot of progress in every SF way.
We are so close to make a valid SF key from an original one, but we are reversing the whole thing too.
Respecting p-codes, most are just jmp to main x86 code into main .exe, but some are into VM, and that x86 code generation is the problem.

The way SF is muting is the way crackers are doing too, and crackers are muting fast, so SF will be "solved" soon, in every aspect.

As said Kosmonaut too ( from cdfreaks and "member" of our little group), SF is something made from expert crackers, and do not know a lot about copy-protection. It is just a CD cops check with a very impressive guarding code.
Our latest research thinks SF have not a very smart cd checking, and maybe could be duplicated with a "twinpeak" method soon. It seems SF checks for the "asymetric" and EXTERNAL data spiral. Because burned CD are asymetric in the inner zone ( p-cav, cav) and "symetric" in the outer one (clv), that can make SF to distinguish between copy and original.

There is a lot of more interesting things about SF, but thats all for now.

Good luck eveybody.

TIP: I do not like another type of emulation ( like RAM one) cause thats can be always blacklisted by making spin command test on every drive.Well, time will say.

[ava978]

Morglum007 you are saying that sooner or later your group will slash this EVIL SF thing?! Very very good! Those evil, money sucking corp criminals must be put down for good. NOBODY can mess with the gamers. We hope that SF will be the last PATHETHIC attempt to disrupt reality.