Recent copy protections

[caki]

Gotta agree with Tippex on that one. When I was a noob at RE, I tried to crack safedisc right away, and I didn't even know what a JNZ meant :P. Ahh, well I went and got a safedisc tutorial. Well, I read that tut so many times that in the end a learned a big chunk from it. Thats actually pretty much the only tut I have relied on. I read tuts constantly, to get a feel for new ideas, but the only one I ever followed right down to the letter was that safedisc tutorial. Some people may find this bad, but since that tut wasn't written for noobs, I had to figure out a lot of stuff for myself, and in the end, I learned a shitload.

However, now that I have more experience(I'm still noob, but I do have SOME experience), I find MUCH more pleasure in doing things myself, and I only consult tuts when I am out of ideas (which is pretty much never).

So pretty much: If you have no idea what to do, read a tut and understand it, but don't go around following every tut you can get your hands on down to the letter, because then you won't be able to think independently.

PS

Why would anyone write a tut for FEAR? If your antidebug is nice, and you can use a tracer, its a 2 min. job (Get to OEP, dump, dump other sc memory, append it...). I don't see how anyone could learn anytnhing from that tut, and if you can't learn anything, why would you need it? ... But oh well, I don't like criticising tut writers...

[cdkiller]

I tried to crack safedisc right away

i did this too after i "cracked" the first cd-check in an old game.
just thought i need to change some jmps etc.... this time i hadn´t any knowledge about commercial protections and about how much effort is needed to remove them. thats the reason i´m mad about ppl asking "how to crack securom/safedisc etc."
wich didn´t even know what a debugger is, lol.

back to topic...
perhaps this securom 7 thread gets updated from time to time... but i doubt it.
http://community.reverse-engineering...pic.php?t=5077

i´ve found a tutorial covering maxpayne 2 (sd 2.30) and nfsu2 (sd 3.20), both written in german.
so i wanted to look at an older safedisc version as a starting point... grabed the Hitman Codename 47 cd, installed, dumped the exe (with cd), fixed the ff15 calls, rebuild pe. when done i compared my unwrapped exe with the flt one to see if it was rebuild the proper way

i prefere to use ollydbg (yeah i know ring3...) wich can handle safedisc till v2 afaik. later versions will use stolen bytes wich will be replaced with the correct ones by the safedisc debugger. you can dump at the oep with olly by noping the call wich executes the sd debugger. but this way you won´t be able to restore the stolen bytes. olly can´t do it cos it conflicts with the sd debugger (both ring3).

newer targets don´t use the int3´s anymore they use SDAPI. olly can handle them. but it´s a lot harder than the stolen bytes.

[caki]

I like SDAPI. Allows me to use Olly on safedisc for the first time I don't understand why everyone else hates it . As long as I can use olly... *very happy*

i´ve found a tutorial covering maxpayne 2 (sd 2.30) and nfsu2 (sd 3.20), both written in german.

Can I have `em ?

[caki]

Originally Posted by ThePrince

Can I have `em ?

google

Can u please send me the link. Can´t find it by myself.

[caki]

Tis on google matey. Almost everything is on google

try this combo:

"max payne safedisc 2 manual unpacking tutorial"

I just found it with the above combo, so don't try saying it doesn't work, cuz it does :P