hacking games with starforce

[michse]

morglum i have a question...

Is it possible to get 2 tools done that do the follwoing

1st one is a dumper/logger that returns some offsets or so that explain the point where it goes into protection checking and the offset where its passed with result CD is Ok?

2nd one is a loader that bypass the protection check and jumps to the point in mainexe memory where the protection check has returned result ok

it was already used for some VOB 5 games like Port Royal 1 as u might know

[guod]

But then, the next question will be, who's going to have the guts to read through 500+ MB of logs to figure it out?

The cd-check appears to be quick because star-force is running at an absolutely high priority level... ever tried moving the mouse while the cd-check is running.. slow eh ;p It would probably take a few days (non-stop, and at a good speed) just to trace through the cd-check once.

[michse]

well if it would be easy we would see such tools already spreaded and have for sure new updated SF already from the russian freaks.

But coding a dumper that hooks every pcoded function no matter if recent for protection or not is also a hard job.

Such a tool might be coded for already cracked sf3 games and then we could learn from the logfile what we have to seach. There are some of them already and it doesnt matter if it has pcode or not with such a loader and as you dont patch the main files it gives you the chance that hidden checks or something like this can be stoped. A NoCD might be difficult then when addional simple cdchecks are in the game but who cares if you can run from a mounted image from original CD. HDDs are big and so a image can be stored and the orig cd can be placed save into the box again. I hate it when CDs go bad like my Soldiers and Toca 2 and companys doesnt do a **** to give you a new one when you ask, they simply say you buy again. grrr

[ash2dust2]

Thanx for the info. One of the more intelligent threads. Maybe worth a stickey so we can point all the monkeys requesting SF3 cracks to this.

[ava978]

I always purchase my games! My friends too, but we had to get THOCA and Soldiers-Heroes of WW2 two times before they worked.The way i see it (and my friends agree) SF3 is created only to suck more MONEY from us! This, and i hope U feel me is NOT good at all!

[Tootzie.]

Heres the crack, in the thread theres a post that this crack should work on each starforce protected game which is on CD for the PC. I tried to use it for Kill.Switch (Which has been brought to the pc from a console), but that didnt work.. So I guess its only for games which arent brought to the pc from a console or are on DVD.

http://fileforums.com/archive/index.php/t-63374.html

[guod]

@Tootzie.:

first of all, it's not a crack.

Second, the file you are refering to will only work for Soldiers heroes of wwii. A new one has to be created for each game and it doesn't seem to be possible on DVD games.

[Morglum007]

Well, ummm, sorry for the late, but i'm at holydays, so cannot reply as soon as other.

Well, respecting that russian SF tool, it is just a dumper and do not include pcodes catching. It does the "easy" thing, reconstruct OEP and IT, with some CRC fixing.

Respecting VOB, well we haven't studied such prot, so cannot say anything about.

About p-code catching, we have pointed the routine that calls such pcodes, and there is just about 500 p-codes, so no 500 mB logger needed. It is pretty similar to SecuROM API routione with minimal variants, just changing some instructions to fool novice crackers. As said for other user, here or in another forum, p-codes are different from game to game and are increasing in number to make it "impossible" to trace all. Thats why there isn't a standart tool for SF dumping.

I know both that russian tool and others, but nothing to do with p-codes right now. As told in my web page, we are a very interesting researching group and have a lot of progress in every SF way.
We are so close to make a valid SF key from an original one, but we are reversing the whole thing too.
Respecting p-codes, most are just jmp to main x86 code into main .exe, but some are into VM, and that x86 code generation is the problem.

The way SF is muting is the way crackers are doing too, and crackers are muting fast, so SF will be "solved" soon, in every aspect.

As said Kosmonaut too ( from cdfreaks and "member" of our little group), SF is something made from expert crackers, and do not know a lot about copy-protection. It is just a CD cops check with a very impressive guarding code.
Our latest research thinks SF have not a very smart cd checking, and maybe could be duplicated with a "twinpeak" method soon. It seems SF checks for the "asymetric" and EXTERNAL data spiral. Because burned CD are asymetric in the inner zone ( p-cav, cav) and "symetric" in the outer one (clv), that can make SF to distinguish between copy and original.

There is a lot of more interesting things about SF, but thats all for now.

Good luck eveybody.

TIP: I do not like another type of emulation ( like RAM one) cause thats can be always blacklisted by making spin command test on every drive.Well, time will say.

[ava978]

Morglum007 you are saying that sooner or later your group will slash this EVIL SF thing?! Very very good! Those evil, money sucking corp criminals must be put down for good. NOBODY can mess with the gamers. We hope that SF will be the last PATHETHIC attempt to disrupt reality.

[zir_zolan]

This may sound stupid, but could you (Morglum007) please translate your homepage into english. I'm very interested in the progress of the sf cracking, and would like to understand your page.

BTW.. Cool design!

[crnelyone]

pero los parches solo para las versionas espanoles - or something like that
there's nothing about the progress on their website i think they will tell us

WHEN IT'S DONE

[Morglum007]

Originally Posted by crnelyone

pero los parches solo para las versionas espanoles - or something like that
there's nothing about the progress on their website i think they will tell us

WHEN IT'S DONE

Well, besides we are a spanish web site, we have russian, and british members in our team. Everybody share what they have. Some have the first VM defeated, others have p-code loggers, another have key generation system, and others knows a lot about physical check. Since now we are in summer, i ( who normally actualize that web site) am little far from my original location. On September we will post more results, but now we make it through PM (for evident reasons).

Another teams are in a permanent hurry with SF, we prefer to be slowly and in a deeper knowledge. You can also try another locations, but i doubt u could get a better place to get info about.

Respecting web translation, well, we are not enough (about 500 visits per day) so that will be delayed some time.

Good luck!

[crnelyone]

well if a n00b can help u somehow just call me and i'll be there ;-)

[Baron]

Hi, I know this is an old thread and all, but one of the replies stated that "It will probably take a week to crack SOWW2 - Its been over a year, and only just came out (Courtesy of Reloaded)...