Protection by Emulation

You are right, Star Force 3 does use its own Pcode.

Originally Posted by SiNTAX

If I'm not mistaken, Starforce3 uses emulation (interpreter).. but then.. having never had a starforce3 exe in my hands, I can't be certain.

[peleon]

Hi H3Xenoic,

My scarce intelligent tells me that you are a ASProtected developer??? Maybe everybody here knows that but me

If yes, any public version or keep it only for customers?

Thanks.

[dyn!o]

Hello folks,

Please think twice before posting "impossible". Star Force uses own VM too (I have been playing with it several times) and is each time cracked. What would I do if AsProtect would use VM? Simply, I would spend 3-5 days to write IDA plugin which would be the PCode emulation of new AsProtect. I really don't understand why someone believe that using VM makes impossible to patch/reverse the application. I would be more than happy if AsProtect author would set an serious reward for cracking its VM and gives me some money for furthcomming vacations

Again, with all respect to your knowledge, please think twice before posting.

Greetings,
dyn!o

[dedificator]

This same "impossiblity" level, that, says, JAVA, VB or FOXPRO p-codes ... . Every of them simply takes some worktime to understand bytecode structure.
Of course, high level languages are much better documented, as protectors.
One good method - create simple code, compile it to needed p-code (or, in our case, protect it) and examine result. After some similar cycles you will see, how this VM works and how commands are translated to p-code.

[peleon]

hello dyn!o,

Looks very interesting your reply. I *must* learn IDA pluggins cos they look very powerful what you can do with them

Btw, do you also know how to crack the SF3 VM? I tried long time ago but not success...I also remember long posts talking about Starforce but with no success in the end It would be perfect if you could direct some of us a bit of how to attack that monster

thanks

[dyn!o]

Well, there are two known private decompilers but I don't own them. Also I'm not authorized to say who made them

Good luck,
dyn!o

Yes I can share, here is lastest info I have :-

NOTE: Due to a DDoS attack we've moved our site to new internet hosting and our activation system has changed its URL, so you need to use external
activator (http://www.aspack.com/files/user/registration.exe) or activate your version using this beta version (use About - Activation menu item).
Sorry for the inconvenience.

Thanks for you help!

ASPack Software.

http://www.aspack.com/files/user/aspr131b0427.zip

Version 2.0 will be more interesting