Safedisk 2.80.010

DevTech2000 · #1 19-09-2002, 21:16

New version of SD on Divine Divinity 1.31 patch. Kudos to the person who breaks it.

Monty Burns · #2 20-09-2002, 01:42

That's what I call good news!
A new sd2 version, Monty is not amused.

crispy · #3 20-09-2002, 02:35

It is highly likely that it has already been cracked.

Just that you'll not see a public release of any cracking app. Unless of course Bools Eye stays up all night!

Hint...hint!!

Dr Apocalypse · #4 20-09-2002, 03:40

I think I now see one reason why r!sc decided to pack it in, too many people on his case asking for the latest unwrapper

Poor old bools

Give it up while you've still got your sanity

DrA.

bOOls eYe · #5 20-09-2002, 04:03

LOL

i'll never give up cracking that thing... i just need some more debugging experience & stuff...

anyway, you can expect something in the near future !

Dr Apocalypse · #6 20-09-2002, 12:39

Dedicated to the cause!

hope you don't lose too much sleep then

btw, is it possible to 'dump' an exe using your NoCD Loader and 'rebuild' it using Revirgin? I've not tried this as I get a bit lost reading the revirgin docs, but wondered if it was possible.

DrA.

bOOls eYe · #7 21-09-2002, 00:38

afaik, Revirgin is a tool to rebuild the import functions of a SD protected file. but that's not the real problem in versions 2.60 and 2.70 (and 2.80 ?). cirkutz is right: the biggest problem there is the encryption of some small pieces of code (btw, that's why that vxd is installed !!).
and then there's another new feature: some "call" functions are encrypted (not the same as introduced in Safedisc 1.40.04 "R3", there the "call dword ptr" functions are messed up).
my source is reliable too

Dr Apocalypse · #8 21-09-2002, 03:27

Thought it sounded a bit too easy

It's just that I noticed in a few Revirgin tuts Safedisc mentioned and some Fixed EXE's that are Safedisc protected contain new sections in the file called 'newidata', I assume a new rebuilt Import Table, but obviously they been manually traced, decrypted, dumped and merged back, kinda complicated for newbies

Thanks for explaining the reasons why it can't be done CirKutz, bOOls.

DrA.

themis_t · #9 24-09-2002, 12:55

if this can't be done then how has this been done?

bOOls eYe · #10 25-09-2002, 01:41

Quote:

Originally posted by themis_t
if this can't be done then how has this been done?

what can't be done ?

crispy · #11 25-09-2002, 02:16

Revirgin (and less so imprec) are more designed to rebuild mangled/screwed IAT of packed/compressed PE files which have been infected with things like ASProtect etc. Earler SD2 versions could be rebuilt but like it's been said above, the redirected calls (like Securom's latest versions) call for a lot more debuggging and code replacement.
In the end it will always be possible to rebuild these protection mechs as it MUST be decrpyted in memory to run. Even SMC routines can be rebuilt. It's just a matter of time to step thru all the crap (and obfuscation used by macrovision to slow debugging down) and do a little cut and pasting.
Apps like revirgin will help, but developers are gettting wise to these rebuilders and add fake API calls (just look at the multiple "double-dipping" of the latest ASProtect) to mess up automation.

My patience these days ain't what it used to be so maybe Macrovision has beaten me!

Dr Apocalypse · #12 25-09-2002, 04:23

I do remember +tshep or was it Kayaker? saying 'Never Ever give up' or words to that effect

And ArthaXerXes saying 'imhotep' (ALL YOUR OBFUSCATION ARE BELONG TO US) when Safedisc was mentioned

DrA.

themis_t · #13 26-09-2002, 12:34

i think that microvision will give it up some day cause she can see that we are all beating her sooner or later....

gh0sth@cker · #14 26-09-2002, 14:14

nah, they're making too much money. Even though their profits fell recently, they're still making very nice profits.

Dr Apocalypse · #15 26-09-2002, 14:26

You mean as long as there are dumb software companies to sell their crap to

DrA.