As a first-time unpacking effort, I thought I'd take a SafeDisc game and put my teeth into it..

Just to make it a bit challenging, I'm not using any anti-si tools (am using WinXP, so Frogsice etc don't work anyway).

I've been able to pass all debugger checks, but I think I missed something somewhere because if I run the target under SI, it crashes after showing the SD splash screen.


So I was wondering if somebody could shed some light onto this.

(additional question.. probably is something for ToT forum, but here goes... is there a 'good' tool to cut/paste parts of a file .. ie. SD has sections that are scrambled, so I dump the descrambled part but then want to paste it into my file that I run through IDA.. any pointers?!)

For that last part... WinHEX seems to do what I want..

Wheee... no more crashing... found another trick to detect SoftICE.. thank you Macrovision :-)

Whippee.. found OEP and IAT so now all that rests, is to resolve the import table... time to download ReVirgin (or ImpRec.. we'll see which one is better) and study how to do that crap.

will u do a tut about all of that ??? and share with us all u lerned ?

Euhm.. wasn't planning on doing that, no. But I'm willing to help those who have questions about it.

Hell if a newbie like me can do this, then it probably isn't very hard

create a file called ending in .IDC and write something like


#include <idc.idc>

static main(void)
{
auto hFile;

hFile = fopen("mydata.bin", "rb";

if (0 != hFile)
{
loadfile(hFile,0,0x00402317,0x110);
fclose(hFile);
}
}


in it, that'll load in ur data over the top, saves you having to
start ur database(idb) from scratch. you could modify the above
and make a function to take in the file,loc,size :-) oh and its F2
to load the script,

regards,
yates.

Well I just used WinHEX to cut 'n paste the changed bytes into my working file and the select 'Load File->Reload the input file' in IDA.

Works like a charm.. and keeps my database intact too.

The File Compare in WinHEX is pretty nice.. if it would understand the PE format it would be f*cking-A ! :-)


Hmm maybe I should take the time to patchup that CryptDecrypt routine so that it only decrypts.. that way I would only have to dump once.. but then again.. I already have a pretty decent dump

yer, i run all the encrypted blocks first and decrpyt them to a memory image then dump that so i have a fully decrpyted dlls

hey why not ??? it only will take u a lil time ..
plz if u can write a tut for us all ...

there's a french one here if ur interested,
http://www.yates2k.net/cd/TSD27p.txt

Hello LaBBa !

If SiNTAX isn't planing to write a tutorial, you must accept it.

SafeDisc is already some years old and has been discussed many times before.

You're supposed to learn and not to let other people write the solutions for your crack requests.
If you just read a cracking tutorial for every new version comming out, where would the learning effect be?

Pfwew.. was almost starting to feel guilty.... NOT

LaBBa

accept that ppl harot

yAtEs.. interesting site you have there...

h**p://www.yates2k.net/amiga.cracking.txt

Sniff.. now that brings back memories! (aahh where are the days.. MFM, RNC, 4489, 8911, ...)... anyway.. I'm drifting.. no use dwelling on the past..

ok.. ok .... i got it ! don't need to tell me more then

2 times .

i have alredy raed all the tuts about all the old SD tricks...

i hope that i will get it in the end...