This should probably be in the newbies section. This could probably be answered my reading/docs searching. However I can't seem to find a specific answer to my problem.

MOV Solution,"Post here and get flamed"

I'm working on a SafeDisc 2.8 program, which I'll never crack since this is my first cracking project. That said, I am getting somewhere.

I tried using IceExt 0.64 to hide SoftICE from SafeDisc, but no luck. From what I've read, there's other detections in softice that iceext can't stop, but I might be wrong. Anyways, iceext stops a MeltICE attempt, but safedisc tries other protections and detects it. Now my problem... when I turn on IceExt's protections, I get a message "Unable to patch UnhandledExceptionFilter", and I think it's this protection that safedisc is detecting SI on. Why does this occur (XP SP2). Also, does anyone have an English copy of peex's safedisc 2.7 tutorial? Cheers (I wonder how many spelling errors there are).

Maybe you should find and read the threads on the patches for softice running on SP2 and look for discussion of problems caused by SP2 with several of the protectors.

Regards,

Give a man a fish, feed him for a day. Give him a net, feed him for a lifetime. Utterly useless if the man is to stupid to use the net.

I... couldn't find anything... tried all the keywords I could think of... shame

Although I did find a thread on the new DEP protection in sp2, but this only mentions a few packers having troubles, and I'm too stupid to see if it related to unhandled exceptions and the like.

Perhaps you might have tried looking 6 threads down from your own at the one titled:

Updated Support for Visual SoftICE 3.0/3.1 (XP SP2/ W2K3 AMD64)

and its reference to the post on the exetools site.

And if you keep on with the "too stupid" routine, everyone will eventually come to believe it, particularily if you continue to act the part.

Regards,

Ok, I'll cut the stupid routine. I looked at that post on the exetools forum, guess I didn't read it properly. Points taken. Thanks.

Hi SpiderVenom,

Had some troubles with the same thing myself. this is what pushed me in the right direction. It's from the IceExt release notes:



That is probably the problem. Different kernel.dll's might have different UnhandledExceptionFilter functions.

In softice do
d UnhandledExceptionFilter
And change the first byte to 68.


Hope this helps.

Cheers,

MarQueze

You should just E UnhandledExceptionFilter 90 in sice .This is just the same effect as iceext does.

But I think there is need to do that in xp system. I don't think it is the protection that safedisc is detecting SI on

uhh, that's assuming the first instruction of that API is a coded on 1-byte.
a much better solution is to first check what that byte really was and then fix it.

An even better solution is to fix IceExt itself, if needed. I posted something very similar on exetools, but whoever asked the question (few weeks ago) never tried what I suggested. probably padding post count ;-)