Starforce is defeated
Page 2 of 9 Goto page Previous  1, 2, 3, 4, 5, 6, 7, 8, 9  Next
Freakshow




Posts: 410

PostPosted: Sun, 24th Jul 2005 18:57    Post subject:
jaapie18 wrote:
Quote:
Its very old already 6 months maybe Smile
there are several betas in the beta tasting progress
3.50, 3.52, 3.57, 4.00
since 3.52 all sf3 alcohol mounts with a 100% quality mds work proper without any troubles.


strange that those betas didn't leak. Then we could play Splintercell:CT on time


You could. Game you want to play deserves buy!!
Back to top
tim73




Posts: 31

PostPosted: Tue, 26th Jul 2005 13:08    Post subject:
These tools still aren't available. I'm only interested in the here and now. I'll believe these tools when I see them.
Back to top
Selt




Posts: 1493

PostPosted: Tue, 26th Jul 2005 13:26    Post subject:
tim73 wrote:
These tools still aren't available. I'm only interested in the here and now. I'll believe these tools when I see them.


... someone said these tools are available?
Back to top
bigboy177




Posts: 430

PostPosted: Tue, 26th Jul 2005 14:02    Post subject:
tim73 wrote:
These tools still aren't available. I'm only interested in the here and now. I'll believe these tools when I see them.


They will never be released to the public... At least I hope so...
Back to top
halfluke




Posts: 52

PostPosted: Tue, 26th Jul 2005 14:19    Post subject:
CdS Team : El momento ha llegado.....
Enviado por Morglum007 el 26/7/2005 13:55:33 (3 Lecturas)
Muy buenas a todos de nuevo.

Me es un tremendo placer anunciaros que después de deliveraciones con todo el equipo, vamos a publicar un tutorial paso a paso para que todo el mundo tenga disponible el método.

Perdonad que la web esté un poco desatendida ultimamente pero estamos decidiendo y probando cosas que luego puede que acarreen grandes beneficios para todos.

Seguid atentos............

CdSTeam

CdS Team: The moment has arrived..... Envoy by Morglum007 the 26/7/2005 13:55:33 (3 Readings) Very good ones to all again. He is to me a tremendous one to please anunciaros that after deliveraciones yet the equipment, we are going to publish a tutorial step by step so that everybody has available the method. You pardon that the Web he is a little neglected last but we are deciding and proving things that soon can that carries great benefits for all. You follow kind............ CdSTeam
Back to top
veseo




Posts: 250

PostPosted: Tue, 26th Jul 2005 15:16    Post subject:
so, they're publishing the tool or?
Back to top
highstuff




Posts: 1976
Location: Netherlands
PostPosted: Tue, 26th Jul 2005 15:23    Post subject:
well its not an automatic tool but yes i think they are releasing an tool so you can insert special sectors into an sf3 image so disc check is 1:1 phooled .
but still its some work to find the correct locations .probably its such an method like the cdfreaks Tages 1:1 clone trick .
Back to top
Lutzifer
Modzilla



Posts: 12740
Location: ____________________ **** vegan zombie **** GRRAAIIINNSS _______
PostPosted: Tue, 26th Jul 2005 15:26    Post subject:
judging from the translation i d rather venture the guess that they will post the essential code-bits needed to write a tool...
Back to top
halfluke




Posts: 52

PostPosted: Tue, 26th Jul 2005 16:54    Post subject:
For what I know, it should be like highstuff says: they will provide a detailed tutorial and a tool in cdfreaks/tages style.
The whole matter will require some work by "the final user", and there will be a different patching at least for each media brand which you're going to burn on. So we won't have a generally shareable patched image of the game.
However, the big advantage is that you can run it from everywhere (and not from an usb 2.0 drive only).
Still not sure if you can also mount the image in a virtual drive.
Back to top
CableMunkeh




Posts: 198

PostPosted: Tue, 26th Jul 2005 19:19    Post subject:
Double post.


Last edited by CableMunkeh on Tue, 26th Jul 2005 19:23; edited 1 time in total
Back to top
CableMunkeh




Posts: 198

PostPosted: Tue, 26th Jul 2005 19:22    Post subject:
halfluke wrote:

The whole matter will require some work by "the final user", and there will be a different patching at least for each media brand which you're going to burn on.


Umm isn't the whole point of cloning to be to present an easily burnable version of a game which is burnable on any media and any drive so long as they are of sufficient quality to accurately replicate the original? Or are they talking a bit of BS and require emulation as well as disk copying?

Sorry but between their confused at best rhetoric regarding pseudocode and how they have completely decompiled it (from a group with no cracked SF releases nor apparently a complete understanding of the SF virtual machine) and this I'm a bit lost as to what they are saying. The only releases to show an understanding of SF virtual machine to date are the Ultima ones, all the other releases are done the hard way which doesn't need you to understand wtf is going on just to have the time to replicate it with IA-32 opcodes.

Might just be bad translation, but strikes me as BS at the moment, especially the pcodes stuff, having spoken to someone who has done far more to decompile the SF virtual machines than me he's as confused on this as I am, there's a hell of a lot more to the SF virtual machine than these guys seem to think. There's far too much of an obsession with how many pseudocodes are being used, but SF is not a 1:1 relationship between opcodes and pseudocode representations being executed in the SF virtual machine, then there's variations in the way the opcodes are being executed in the VM, which is why Trackmania is untouched even though it has no more pseudocodes incorporated in the protect.dll than some cracked releases, the VM itself is more resilient than previous releases.

Anyway I'll leave them to hype themselves to death, hell I could be completely wrong, we'll see, personally I certainly wouldn't publicly release SF3 disassembly or decompilation tools Smile


Last edited by CableMunkeh on Tue, 26th Jul 2005 19:22; edited 1 time in total
Back to top
Lutzifer
Modzilla



Posts: 12740
Location: ____________________ **** vegan zombie **** GRRAAIIINNSS _______
PostPosted: Tue, 26th Jul 2005 19:22    Post subject:
CableMunkeh wrote:
halfluke wrote:

The whole matter will require some work by "the final user", and there will be a different patching at least for each media brand which you're going to burn on.


Umm isn't the whole point of cloning to be to present an easily burnable version of a game which is burnable on any media and any drive so long as they are of sufficient quality to accurately replicate the original?


No, the whole point of cloning is having an identical version. Since the used protection and the available hardware contraints the easy copying into clones like with say clone-cd, its not trivial. But if you have to use different means for different systems and come to the same ends, its still a clone. Ask my sheep dolly, she knows all about it Very Happy
Back to top
CableMunkeh




Posts: 198

PostPosted: Tue, 26th Jul 2005 19:24    Post subject:
Lutzifer wrote:
CableMunkeh wrote:
halfluke wrote:

The whole matter will require some work by "the final user", and there will be a different patching at least for each media brand which you're going to burn on.


Umm isn't the whole point of cloning to be to present an easily burnable version of a game which is burnable on any media and any drive so long as they are of sufficient quality to accurately replicate the original?


No, the whole point of cloning is having an identical version. Since the used protection and the available hardware contraints the easy copying into clones like with say clone-cd, its not trivial. But if you have to use different means for different systems and come to the same ends, its still a clone. Ask my sheep dolly, she knows all about it Very Happy


Educate me, how exactly are you to produce a 1:1 copy if you are a) patching and b) patching differently depending on the media being used? Makes no sense to me, should be no patching at all in a 1:1 copy surely?

Don't remember clones using the twin peaks method having different clones depending on the burner in question, while they used a bug they were functionally the same whatever they were burned on and if your burner couldn't burn them with enough precision tough luck?
Back to top
Lutzifer
Modzilla



Posts: 12740
Location: ____________________ **** vegan zombie **** GRRAAIIINNSS _______
PostPosted: Tue, 26th Jul 2005 19:28    Post subject:
as i m not familiar with the peculiarities of the protection and the method to fuck it up, i m as stumped as you are for an answer. Still, if the copyprotection handles different brands of media and burners differently, or is able to get information on the fakeness of the copy from clues gathered by either from the burning process or from the used media, as they seem to claim it does, you have to defeat those techniques somehow, so why not with different algorythms based on the system. Cloning only refers to the outcome. Remember the problems with early clonecd versions that only could do 1:1 copies on certain burners? Its kinda the same, just the other way around i guess
Back to top
highstuff




Posts: 1976
Location: Netherlands
PostPosted: Tue, 26th Jul 2005 19:45    Post subject:
the problem is that the protection simple not possible to create an real 1:1 clone that works on all dvdburners,dvdroms cause the disc timing check it to accurate.(dvd burners then need new technique to burn the disc)
but Memorex media should work almost all the time.
but anyway theire are new emulating tools coming so that solves the problem .
Back to top
halfluke




Posts: 52

PostPosted: Tue, 26th Jul 2005 21:12    Post subject:
@cablemunkeh

I always read your posts very carefully, because you seem to me to know very well what you are usually talking about, but I never liked your way to criticize everything and everybody.
Moreover, this time you accuse of bullshit in an unpleasant way:
they wrote they have fully understood how pcodes work and so on, but they never claimed they will release cracks.
They said they will release a method to clone, that's something rather different from cracking techniques.
I can't understand if you are, generally speaking, only pessimistic, or, far worse, a protections supporter.
I read a lot and write very little, and I have no reason to doubt of Morglum's seriousness.
Period.
Back to top
CableMunkeh




Posts: 198

PostPosted: Tue, 26th Jul 2005 21:31    Post subject:
Apologies sir, my only issues are that I'm dubious if they know how pcodes work as they've grossly simplified (perhaps just for the benefit of the audience), and it's impossible to fully decompile the VM without having the whole thing in front of you.

Will see how things run, I might be totally wrong. I'm accusing them of BS because I've a few queries with what they are saying, if I'm wrong I apologise in advance.

I've seen one reliable method to break SF that shows a real understanding of it, not the 'brute force' type technique that involves spending days working through the program converting the VM'd routines back to IA-32. Am far from convinced that these guys know it, but we'll see!

Will have to change my nickname soon anyway as I'm leaving the cable company Very Happy
Back to top
halfluke




Posts: 52

PostPosted: Tue, 26th Jul 2005 22:13    Post subject:
Well, I appreciate your last post.
I just can't answer on the technical part, 'cause i'm not a technician, only a philosopher interested in this battlefield because i think it can have consequences on the way we imagine how a civil society should be.
exceptionally, i will post here the official reply by Morglum.

He stresses the fact cdsteam is not a scene group, and then:
"1.- we havent got a lot of visits ever, so we didnt care about, we have always very few visits, but those which are important to us.
2.- maybe he know what the hell about cd2dvd conversion
cdsteam was the first ( and personally me) to show general public how to do so. Ask anybody from where they obtained info about orca, advanced i6comp using, little scripts unpacking and so on
before cdsteam, there was no info about such programs
we have the older non microsoft related orca specs for games ever ( see cdsteam forums, toca1, a few years ago) when no one knew anything about
2.- he may have doubts about vm, but we have teached a lot of people about vm working, and we speak so clear cause most users could comprehend it
3.- a
we have been working on twin method long ago and i was the first to say twinpeaks method will copy sf, just look at cdfreaks post, look for morglum and sf related post
it is more a year of oldness
when we say 1:1 copy, we say older 1:1 copy, installs and play from EVERYWHERE
and finally he can ask about me on cdfreaks, and search related post, they will see we are not dumb, we know more than he expect
doubts are allowed, but not his way of doubting
we have info and cracks about themida/xprotector
reloaded knows us, and we know them, and exchange info"

I hope Morglum will be able to register on nforce forum, to continue the discussion if he feels like to.
Back to top
highstuff




Posts: 1976
Location: Netherlands
PostPosted: Wed, 27th Jul 2005 04:10    Post subject:
cdsteam probably the only one advanced cracking group left. its just very cool they working on tools to crack protections thats the smartest way with cracking especialy now .
Back to top
Freakshow




Posts: 410

PostPosted: Wed, 27th Jul 2005 10:31    Post subject:
CableMunkeh wrote:

Umm isn't the whole point of cloning to be to present an easily burnable version of a game which is burnable on any media and any drive so long as they are of sufficient quality to accurately replicate the original? Or are they talking a bit of BS and require emulation as well as disk copying?


Your right with that but cdsteam was never a research group that wanted to develop a tool or tools that create such stuff. The neduser always have to fix some stuff for his localiced hardware. It saves CDSteam also from the point there tools can be used for the cloning groups in scene what in my eyes is the biggest bullshit ever. CLONE = want to play with all patches but not waiting for Cracks - in my eyes thats the point the company deserves you go buy the Game!!

CableMunkeh wrote:

Sorry but between their confused at best rhetoric regarding pseudocode and how they have completely decompiled it (from a group with no cracked SF releases nor apparently a complete understanding of the SF virtual machine) and this I'm a bit lost as to what they are saying. The only releases to show an understanding of SF virtual machine to date are the Ultima ones, all the other releases are done the hard way which doesn't need you to understand wtf is going on just to have the time to replicate it with IA-32 opcodes.


Your wrong about that. Some -if not even all - from cdsteam are former crackers of the scene (DEViANCE, FAIRLIGHT, IMMERSION, RAZOR, SOULDRINKER) who showed enough times they can crack proper. They are in some cases much better skilled then the ones that crack protections today (RLD, HLM - they all cooperate with one or more of the cdsteam members to learn from them).

But scene went to a direction these ppl and alot of others dont want to be a part of this "scene" as there are a big amount of asses - esp in movie, clone groups, xxx - that sell their brains (slots, dvds, ...) to others for big money. And since profit came into games scene too (FAIRLIGHT, HOODLUM/MYTH busts wich are proofen by FBI were money related busts) they left but that doesnt mean they dont want to research protections. They do but they just dont go public with every small success happend.

So long.
Back to top
Freakshow




Posts: 410

PostPosted: Wed, 27th Jul 2005 10:48    Post subject:
CableMunkeh wrote:
Apologies sir, my only issues are that I'm dubious if they know how pcodes work as they've grossly simplified (perhaps just for the benefit of the audience), and it's impossible to fully decompile the VM without having the whole thing in front of you.


Your a bit wrong about that Smile
You only need the protect.dll and some tricks (developed by asians) that allow you to emulate the cdcheck of sf3.

f.e.:
Panzers Phase 2:
protect.dll - size: 7.353.245 Bytes
version: 3.4.77.00
VM version: 2.7**** Smile
size VM: 7.658.572 Bytes
decrypted VM: 16.642.076 Bytes (no need for orig game todoso)
analyced VM: 4 opcodes are protected with VM (no need for orig game)
rebuilding these opcodes in a exe : not possible without the game running yet
cracking the dll: not possible without the game do to crc checks debugging
keygen an image from dll to bypass sf3 check: easy doable with decrypted dll VM for a generated bin/cue
Back to top
CableMunkeh




Posts: 198

PostPosted: Wed, 27th Jul 2005 12:10    Post subject:
I'm aware of some of this dude and thanks for clearing it up, if these guys know ways that I am not aware of all respect to them. Thanks also for the bit regarding learning enough to emulate CD checks, rather than completely understand the VM, that's what I was interested in, knowing enough to break it and claiming to be able to decompile the whole thing are somewhat different things.

Soooo are they going to be asking for you to 'insert any CD' (where have we seen that before) while the emulation fools the protection? Wink Isn't this going to be vulnerable also to blacklisting, SF drivers are going to be wanting to see a CD / DVD if all they are doing is emulating the stream coming from the CD/DVD?

Are we going to have RLD accusing them of using loaders? Smile
Back to top
highstuff




Posts: 1976
Location: Netherlands
PostPosted: Wed, 27th Jul 2005 12:49    Post subject:
there sf3 cracking tools arent done yet , the clone tutorial they will release is for copying CD protected sf3 games.depends on media ,the patched clone should work almost every drive .
theire sf3nocdcrack tools will ofcourse never go public cause that ain't smart .
theire sf3 cracking technique will create real nocdcracks not "insert any cd" kinda method ,but an powerfull nocdcrack with also only one main cracked game executable so no hundreds of patched files like previous FLT,IMS,Rld sf3 cracks .and rld is learning from them so i don't think rld will acuse them for anything cause that is not in theire interest . Smile
Back to top
Freakshow




Posts: 410

PostPosted: Wed, 27th Jul 2005 13:54    Post subject:
highstuff wrote:

but an powerfull nocdcrack with also only one main cracked game executable so no hundreds of patched files like previous FLT,IMS,Rld sf3 cracks .and rld is learning from them so i don't think rld will acuse them for anything cause that is not in theire interest . Smile


sorry thats not possible with a exe crack as sfe sometimes (always when you see more then 1 protected executeable or dll protected you will have to crack more files AND if game data is protected you cant catch the data from memory with a patched exe you always need either a patched/cracked dll the way ultima doing it or dumped data from memory like RLD/IMS did. Only an exe can never be if it comes to protected datafiles!

About blacklisting it is not possible as the clone tool goes the way backwards how sf3 protects discs. Your "copy" is somehow a 1:1 mastered CD after patching the image so that it is working with the original sf3 given serial which includes DPM data, CD name and other stuff.

Cracking tools will of course never go public as if you know how they crack you can update your protection to stop that. Same is happen with protect.dlll cracks. Mainly a "simple" drivers update can stop it Smile so you always need to remove drivers and then run the game so that you use the drivers used to decrypt/patch the dll.

CableMunkeh wrote:

I'm aware of some of this dude and thanks for clearing it up, if these guys know ways that I am not aware of all respect to them. Thanks also for the bit regarding learning enough to emulate CD checks, rather than completely understand the VM, that's what I was interested in, knowing enough to break it and claiming to be able to decompile the whole thing are somewhat different things.


decrypting VM is the "easiest part" and you never need to fully understand the VM, you mainly need to check/trace what it does when exe/dll jumps into it so that you gain f.e. the real opcode instead of the sf3 provided one Smile but thats far far away from understanding Smile.

but atm most cracking grps cant even decrypt the VM and to patch the VM so that you dont need to rebuild fils you need to bypass a lot of vm protected!!! calls that crc the VM in memory. Easiest way is to backup the VM, decrypt only the backup in memory and then patch only a few calls virtually and copy them at the rigfht playce when the function is called.

I guess you understand now where the problem is. Its not the cracking of the dll, its the reinmject code so that you can bypass the crc checks ... otherwise you have sometimes 100s of more protected calls to crack then just rebuilding the exe.

Thats probably somehow the reason why DIE, IMS, RLD rebuild the exe
and ULTIMA does the dll. To crack the dll you need to be "god" Smile
Back to top
highstuff




Posts: 1976
Location: Netherlands
PostPosted: Wed, 27th Jul 2005 14:05    Post subject:
Freakshow wrote:
highstuff wrote:

but an powerfull nocdcrack with also only one main cracked game executable so no hundreds of patched files like previous FLT,IMS,Rld sf3 cracks .and rld is learning from them so i don't think rld will acuse them for anything cause that is not in theire interest . Smile


sorry thats not possible with a exe crack as sfe sometimes (always when you see more then 1 protected executeable or dll protected you will have to crack more files AND if game data is protected you cant catch the data from memory with a patched exe you always need either a patched/cracked dll the way ultima doing it or dumped data from memory like RLD/IMS did. Only an exe can never be if it comes to protected datafiles!


maybe more patched files then the game executable perhaps some dll or data file ..but not hundreds of files like most previous IMS, sf3 cracks this is what Morglum told me .so i think he knows Smile
Back to top
Freakshow




Posts: 410

PostPosted: Wed, 27th Jul 2005 14:11    Post subject:
highstuff wrote:
maybe more patched files then the game executable perhaps some dll or data file ..but not hundreds of files like most previous IMS, sf3 cracks this is what Morglum told me .so i think he knows Smile


wel crypted datafiles you need the dll running otherwise ou dont get them
and the tols i saw from morglum patch the exes and dont actiate the protect.dll anymore. So no way you get protected datafiles then anymore.
But well protected data files are a not often used feature as it slows the game by sometimes 50% and more
Back to top
MartinW




Posts: 100

PostPosted: Wed, 27th Jul 2005 14:15    Post subject:
Freakshow wrote:
Thats probably somehow the reason why DIE, IMS, RLD rebuild the exe and ULTIMA does the dll. To crack the dll you need to be "god"

But what is the problem for other groups to learn the way Ultima goes (dll cracking)? Is not it possible to analyze Ultima cracks and just use their method on all Starforce titles?
Back to top
Freakshow




Posts: 410

PostPosted: Wed, 27th Jul 2005 14:20    Post subject:
MartinW wrote:
Freakshow wrote:
Thats probably somehow the reason why DIE, IMS, RLD rebuild the exe and ULTIMA does the dll. To crack the dll you need to be "god"

But what is the problem for other groups to learn the way Ultima goes (dll cracking)? Is not it possible to analyze Ultima cracks and just use their method on all Starforce titles?


For every VM version it is BUT the next driver update and the "crack" doesnt work anymore. dll cracks are easy to stop working with the next drivers from other game. Main problem is scene want s to provide generic working crack no matter how yolur system looks - thatswhy they crack exes and honestly ULTIMA cracker ASM is his dayly "beer" and "weed" Smile
Back to top
highstuff




Posts: 1976
Location: Netherlands
PostPosted: Wed, 27th Jul 2005 14:32    Post subject:
bad side about Ultima cracks r that ugly sf drivers still active in youre system..
Back to top
TheDuck




Posts: 148
Location: Australia
PostPosted: Wed, 27th Jul 2005 15:20    Post subject:
Freakshow wrote:

Thats probably somehow the reason why DIE, IMS, RLD rebuild the exe
and ULTIMA does the dll. To crack the dll you need to be "god" Smile


Thats not true, to create fully decrypted exe/dll/datafiles you need to understand the VM _FULLY_ not just some crc opcodes and rerouting some ops to "hooked" ones just to bypass cdcheck, Ultima way is easiest way possible for sf cracking. To make a full crack you need a logger, so log everything, means bypass all crc-checks, under ring3 and ring0, solve many maaany tricks used in the vm and so on, then analyse the logs, get the original code, rewrite the stolen opcodes into the exe/dlls, play the game entirely to get all protected data files - so please dont tell me which way requires a "god" Wink
Back to top
Page 2 of 9 All times are GMT + 1 Hour
NFOHump.com Forum Index - Protection Bitch'n Goto page Previous  1, 2, 3, 4, 5, 6, 7, 8, 9  Next
Signature/Avatar nuking: none (can be changed in your profile)  


Display posts from previous:   

Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB 2.0.8 © 2001, 2002 phpBB Group