Ok i have some problems cracking a game that is protected with ProtectCD---'MILLIARDENQUIZ' german game like WWTBAMillionaire(Using ClonyXL it tells me VOB ProtectCD). I read r!sc's tut about cracking Protect CD but I think i do something wrong. R!sc's tutorial was the only tut i found explaining VOBProtectCD unwrapping and rebuilding. Someone know where to find another tut ? Maybe in german ?

General: If I open the *.exe file with a disassembler, there are no commands at all, its blank. I thought maybe it's encrypted and tried ProcDump.....no chance.

Then I tried to do it like it was written in the tut.

1st problem: How to patch SoftIce in memory ? I tried to patch it like it was written in r!sc's tutorial but still: °DEBUGGER DETECTED°
(I've the FrogsIce LogFile if someone want to take a look I'll send it or post it)

2nd. With ProcDump looking for the *.vob files, I can't find any ! (PE Editor--Sections) Only .code/.rsrc/.idata/.data Sections !
Is the file encrypted ? If yes how ? Isnt it ProtectCD ?

Finally: How to use IceDump at all ? Anyone know a good tut ? or can tell me ?

Aight a lot of questions, I really hope someone is able to help me. I'm bored of cracking games with unsafedisc and checking 4 getdrivetype messagebox and all that . I want to get a little deeper in reverse engineering.

ThAnKs To Everyone who might spend his time to help me !!

D°N $iMoN

ADD ON: File Analyzing

insPEctor XL tells: NFO 1.0(Heuristics 5,56%).

I've tried UnNFO 1.0 but it says: File is not protected with NFO 1.0

What the hell is that ?

try another anlyzer
with that anlyzer if u get a low Heuristic, and it didnt work then its not the right one, i would suggest u try PE iDentifier 0.7 Betain my experance the to together usuly are right on the money

I tried PEiDentifier v0.7B------''nothing detected, sorry mate''

but thanks

any other ideas ?

(FrogsIce Logfiles)

=> Dmq
** SOFTICE DETECTION ** code 07, at 0177:009D87F7
Interrupt:68h >eax=00004300h ebx=BFF70000h ecx=009D852Ch
edx=00A04812h esi=00A048AAh edi=00000000h ebp=005BAE44h

=> Dmq
** SOFTICE DETECTION ** code 0B, at cs:10101CAE
Attempting to load: SICE (string ref at cs:00C3FD90)

=> Dmq
** SOFTICE DETECTION ** code 0B, at cs:101022E8
Attempting to load: SIWVID (string ref at cs:00C3FD90)

=> Dmq
** SOFTICE DETECTION ** code 0B, at cs:10102921
Attempting to load: NTICE (string ref at cs:00C3FD90)

FIRST THAT----SOFTICE AND FROGSICE


THEN FROGSICE WITHOUT SOFTICE:
=> Dmq
** SOFTICE DETECTION ** code 0B, at cs:10101CAE
Attempting to load: SICE (string ref at cs:00C3E620)

=> Dmq
** SOFTICE DETECTION ** code 0B, at cs:101022E8
Attempting to load: SIWVID (string ref at cs:00C3E620)

=> Dmq
** SOFTICE DETECTION ** code 0B, at cs:10102921
Attempting to load: NTICE (string ref at cs:00C3E620)

=> Dmq
** SOFTICE DETECTION ** code 01, at 0177:10109F14
Interrupt:03h >eax=00000004h ebx=101340BCh ecx=009D3C75h
edx=00000000h esi=BFF7771Ah edi=101340B0h >ebp=4243484Bh

SEH proc address at cs:1011C944



WHAT SHALL I PATCH TO HIDE SOFTICE ?

I think IceDump ( http://icedump.tsx.org/ ) also has some neat things to bypass Anti-SoftIce tricks!
Try it!

And have you checked R!SC's tutorial on Settlers3, where it teaches how to defeat the VOB protection?
You can get some hints from there!
I've sent you the file as an attachment!

Or try this nice tutorial about removing the VOB protection from "America - no peace beyond the lines":
* http://espejo.hypermart.net/tutes/VOB3x.htm
It's in spanish though...

I hope I've helped!

XICO2KX:

Thank you first for the links. The r!sc tut (i said it above) do i already have. But it is different from the ProtectCd Version that i have. The spanish tut you linked, seem to be exactly the explanation i need. But my problem is: I do not speak a word spanish !

Is anywhere a translation of this tut available ? Any other tuts in ENG/GER ?

Oh... Yeah! Sorry!
I was in a rush when I first read your message and I didn't pay attention to the part where you said you had already read R!SC's tutorial!
Sorry!

Anyway, here's a rough translation of that page using Altavista's "Babel Fish Translator" ( http://world.altavista.com/ ):
* http://world.altavista.com/urltrurl?url=http%3A%2F%2Fespejo.hypermart.net%2Ftutes%2FVOB3x.htm&lp=es_en&tt=url&urltext=&doit=done
I hope it helps!

But the translation engine is not perfect, so if you still don't anything important, just let me know and I'll translate that part for you!
I'm actually portuguese, but the spanish language is similar to the portuguese one, so I understand it rather well!