View Full Version : Xtreme-Protector
gorge
March 20th, 2003, 17:00
is Xtreme-Protector truely uncrackable?

nikolatesla20
March 20th, 2003, 17:35
hehe, well to be cracked, a program first has to run. Programs with Xtreme protector have a hard time doing that
-nt20
squidge
March 20th, 2003, 17:50
Yes, it's virtually uncrackable, as, like nikolatesla20 says, the protected programs don't even run most of the time ! How do you crack something that doesn't work in the first place ?

Gaia
March 20th, 2003, 18:41
Hello Gorge
If you could execute a program you can break it, Xtreme-Protector also.
But with my experience(5years) on cracking I think that XProtector and
StarForce are the best protections that I have never seen. Both uses ring0
on NT systems. I think is the future...experience says that every ring3
protector will be cracked in few days
Of course, is MY OPINION
Gaia
separator
March 20th, 2003, 19:44
Hello Gaia,
are you joking? Compare X-Treme shit with StarForce? There is nothing for compare. I never had problems with StarForce protected application. I had many problems with X-Treme protector. My Outlook crash everytime after some minutes. When I removed X-Treme shit's driver, everything works correctly.
Btw: You can't compare X-Treme shit with StarForce because X-Treme protector uses only shitty SMC, but StarForce uses another method. I don't know name for it. They use their own language and then thier interpreter run it. Something like VB P-Code and I think this is future and not stupid ring0 tricks in X-Treme shit.
Gaia
March 21st, 2003, 04:53
As I has say is MY OPINION
Yes Separator, I know a lot StarForce VM(Virtual Machine). I have not compared these two protection in technique but in effectiveness against reversers
I cracked Safedisc, Securom, LaserLock, Vob, CopyLok and I cannot compare any with StarForce, can you?
I cracked AsProtect, tElock, Svkp, Pelock....and I cannot compare any with Xtreme-Protector, can you?
I don't defend xtreme, but I am boring fucking ring3 protectors
Gaia
Kilby
March 21st, 2003, 06:00
Gaia,
I don't think it was really an attack against you, more one against the reliability of xtreme protector
I havn't seen anything protected with starforce yet (I'm sure that I will though).
Most of us have got bored with the manual unpacking of such items.
Eventually you will decide to write an unwrapper or dumper and discover a truely harsh world
I would suggest posting an essay regarding svkp as I certainly havn't seen a essay on it and my quick look at it suggested that it was quite interesting.
Regards,
Kilby...
Gaia
March 22nd, 2003, 14:23
Hi Kilby
the only thing complicated cracking Svkp is rebuild all encrypted blocks in .text section. Find the oep and rebuild imports is very easy
regards,
Gaia
separator
March 25th, 2003, 23:40
Gaia:
What version of SVKP did you crack? Because I bought this protection and two days ago I received new version. It is 1.30 beta and it has some interesting new features.
It uses move code from entry point. It isn't interesting because something like it uses ASProtect and some other protections too, but it obfuscates this code. It obfuscates this code very well, if it stoles 10bytes then obfuscates it to more than 100 bytes. I found this code in code but it isn't possible set it back to entry. I can't deobfuscate it, because it is very hard. Did you find something like it before?
I wrote to AntiCracking what they planned in future. They planned use this obfuscation method for selected blocks of code. If someone uses it to interesting code, then this code looks like StarForce code. It is very hard to understand what this code does. I think this is future and not X-Treme. I think anti-debug tricks are good, but sometimes unstable and very soon breaked.
Btw: New version of SVKP uses compression of file too. I waited for it, because previous versions only protect files. They inproved DLL protection too, it works now very well.
Gaia
March 26th, 2003, 06:01
separator:
It uses move code from entry point. It isn't interesting because something like it uses ASProtect and some other protections too, but it obfuscates this code. It obfuscates this code very well, if it stoles 10bytes then obfuscates it to more than 100 bytes. I found this code in code but it isn't possible set it back to entry. I can't deobfuscate it, because it is very hard. Did you find something like it before?
I hear that Pelock do the same, and according to Xtreme-Protector wizard they do the same
I wrote to AntiCracking what they planned in future. They planned use this obfuscation method for selected blocks of code. If someone uses it to interesting code, then this code looks like StarForce code.[B]
I can talk about SVKP 1.30 because I don't see yet, but lastest demo is very very far of StarForce
[B]It is very hard to understand what this code does. I think this is future and not X-Treme. I think anti-debug tricks are good, but sometimes unstable and very soon breaked.
Antidebugs are as good as protector can hide them. I don't know will be the future but I think this is not SVKP unless Pavol makes some optimizations. It takes 50seconds in my 500Mhz to launch protected DreamweaverMX
Regards,
Gaia
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.