View Full Version : securom new
Timbo
June 8th, 2003, 15:44
i'm playing with hitman2 securom2 new v4.83.11.0014 and i have removed crc check and time check but if i try tu rebuild the api's it end in nothing . i can't find any more check so if anybody could help me please. i'm not interested in any crack, i only have to know how to defeat this tricky thing. if anyone have done it please let me know
thanks
evlncrn8
June 8th, 2003, 17:50
hitman2 had triggers.. good luck cos even after u get a good dump u still gotta fix them.. theres also multiple timer checks on the api handler, and other nasties
also its just 4.83.11 i have no idea why other ppl comment with the extra number, if you actually look its 00 terminated after the .11
Timbo
June 9th, 2003, 14:00
o.k it checks the differnt parts
i'm able to rebuid all except 2 (4182ed/5e5e1a) API imports
it's playing with QueryPerformanceQaunter&PostMessageA)
and second with SetEvent.
does nobody have a tip for me ???
evlncrn8
June 9th, 2003, 16:30
a tip eh.. okie api handler 80387 code
trace it
Kilby
June 10th, 2003, 05:57
Just to please you folks.
There was a pretty major update in securom a couple of weeks ago.
Much of the 'loader' has been rewritten, and the api redirection is fairly different too.
In addition certain api's are nolonger in the import table, and are resolved via getprocaddress.
Have fun.
evlncrn8
June 10th, 2003, 12:24
im well aware of that kilby.. the 'metamorphosis' and crap.. boring aint it

Timbo
June 10th, 2003, 14:22
o.k it's possible to make all imports (even those are marked with 01 in a special table) but game would not start because
'inside' the game itself (not the cms sections !!) there must be a check(s?) that i could not find and voila game itself loops !!!
if (in this case) i rebuild all imports except 9 special Api Calls
(RegisterClassExA,QueryPerformanceCounter, SetEvent) and let protection alive everything is fine. in those special cases the code of securom makes a jump to a code sequence that looks to me
normal (any tip ???) and then jumps to the real api.
could it be that securom now compiled
with main exe (watermark or ???)
well after about 10 hours of playing with this
s*ny protection i won't give up.
any tips or hints are welcome
thanks
evlncrn8
June 10th, 2003, 14:59
i told you already.. triggers
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.