Lord Soth
November 29th, 2000, 18:58
I've read the anti debugging thread that
kayaker started very thoroughly, and it was
interesting i might say.
Anyway, I've recently encountered a good CD
protection. What do I mean by good ?
Well, aside from the obvious digital signiature that is used to decrypt the file,
this protection makes use of SMC extensively
and when I say extensively I mean you can
hardly figure anything out untill it happens!
BTW, the protection is one of the latest
TTR DiscGuards. I've been fiddling with it
a bit (time constraints) but I wasn't able
to overcome the anti debugging stuff.
There are several simple anti debugging stuff going on,
like trying to load siwvid (i hope i spelled
that right hehe) and an int 68h and a meltice..
However, there is one other thing that also
affects TRW2K. The program will not complain
about a debugger present, but will just
rather crash itself. Now this doesn't happen
when you don't have a debugger running, so
I assume there is some anti-D check I'm not
aware, one that Frogsice might possibly missed (I dread the thought... heh).
Now, due to the nature of the SMC in the program,
it's very very hard to actually trace through
code, hence making the use of clever BPs
a necessity. I'll figure it out eventually,
hopefully, unless my brain overloads and fries first
OK, enough rambling, go back to doing whatever
you were doing heh
LS
PS.
How do you guys put those symbols in the body
of the post as well ? I know it's dumb, but
that's the way I am after all :-)
(don't nobody dare quote me on this one hehe)
Cyas
kayaker started very thoroughly, and it was
interesting i might say.
Anyway, I've recently encountered a good CD
protection. What do I mean by good ?
Well, aside from the obvious digital signiature that is used to decrypt the file,
this protection makes use of SMC extensively
and when I say extensively I mean you can
hardly figure anything out untill it happens!
BTW, the protection is one of the latest
TTR DiscGuards. I've been fiddling with it
a bit (time constraints) but I wasn't able
to overcome the anti debugging stuff.
There are several simple anti debugging stuff going on,
like trying to load siwvid (i hope i spelled
that right hehe) and an int 68h and a meltice..
However, there is one other thing that also
affects TRW2K. The program will not complain
about a debugger present, but will just
rather crash itself. Now this doesn't happen
when you don't have a debugger running, so
I assume there is some anti-D check I'm not
aware, one that Frogsice might possibly missed (I dread the thought... heh).
Now, due to the nature of the SMC in the program,
it's very very hard to actually trace through
code, hence making the use of clever BPs
a necessity. I'll figure it out eventually,
hopefully, unless my brain overloads and fries first

OK, enough rambling, go back to doing whatever
you were doing heh
LS
PS.
How do you guys put those symbols in the body
of the post as well ? I know it's dumb, but
that's the way I am after all :-)
(don't nobody dare quote me on this one hehe)
Cyas