The_hacker_club - Protection of CSC:DV-2

 GAME PROTECTION CSC:DV=2      
                                         
(C) 2000 TicklisH Jim                    
-------------------------------------------------------
 In general, nothing particularly innovative
I didn't contribute to this matter. It all started a long time ago
until the end of work on the game itself.
About two years (!!!) before this sign-
body event. All sorts of
perversions with loading, formatting,
normal coding.  Still somewhere
there is a rather simple one lying around (at present)
by any standards;) xorka. Dick take off her STS-
ohm, SHADOW Monitor or Magic - her and
It's quite difficult to put. But finishing
working on the game, I'm more and more
I was convinced that all this was “vanity”, in the sense
- similar protection. There were more and more
more sophisticated "protection systems"
both software and hardware
levels. And literally right away they were “made”
in full: I “did it” myself - I know;)
                                         
   Who has achieved the greatest success in defending
those of your programs? That's right, either the one
who did nothing, or Slava Copper-
gov.  If we put aside universal respect for
Fame, largely thanks to which he is in
got enough of my timea lot of money
for your software, let's see what kind of protection it is.
Physical damage to the disk. Yes, it's already
the talk of the town. But it is clear that this
clearly not enough (yes, if on Speccy
learned to copy #F5, #F6, #F7 - sec-
torus, which was considered impossible in principle
nom!!!).  All that was left was to close the program
frame part of the protection. It is clear that perverted
tion in the spirit of RST7 (a la CBS protection
system v2.xx in Mortal Kombat) is inappropriate in
such a monster as ChV. Need something to steal
tray.  And Slava became perverted - self-coded -
changing xorks, control of changes in
program by calculating the KS (without the possibility
ability to fake the latter;) and rape
the drive, if suddenly something goes wrong. All
made more complicated by the fact that the entire program was written
on PC, works in the screen area, under-
All 128k and climb it with STS up to
quite inconvenient, not to mention checking
my guesses - I don’t have a cache ;-))).    
                                         
   Everything is fine, quite effective...
At first. The main disadvantage is that
the one that immediately caught my eye was
that the defense immediately reveals itself.
Like shouting: “Here I am, you saw that I
I know if you're trying to touch my under-
protective?!!!" No matter how hidden it is,
and knowing what to look for, the only thing left is
technology, i.e. for your qualifications as
"burglar"  Still almost 7 years
experience is not for nothingpass.                 
                                         
   In general, I wanted to do something similar
shield, but more effective. I think I
it was a success. Another thing is that on corporate
on this disk I left a couple of huge “holes”,
but I hope they were not noticed. ("Leave it on-"
hope...";).                             
                                         
   I also divided my defense into two
parts - physical and software. Physi-
cheskaya performed two functions: the first and
minor - prevent copying the "disk"
v-disk";  the second and main one is to distract and
convince the hacker that the author is a megaloch and
complete lamer.                            
                                         
   Another important point - in the game code
several erroneous values have been hard-coded
tions, the correctness of which has NOT BEEN CHECKED anywhere.
RUMORS.  And most importantly, of course,
was in the software part. She doesn't
loaded from bad sectors. Partially
it is located in the main code of the game with sa-
I started, but in the form of rubbish. Pra-
That's right, it's encoded, because... is
subroutine is quite large in volume
mine.  And it starts and works as follows:
in the following manner: as you progress through the game
in the area of variables very large
a lazy program that decodes and
starts the main protection processing software.Just? Wrong word. Try it, track it
this decoder, especially since it was created
given in no particular order. The only
his new weak point is that there is
shipping block. There's no need to explain anything
before? True, this is only a weakness of programs, in
which are intended for shipment. But about
I have to.  Near the end of the game, the decoder
finally created and launches PPP (protection).
What is she doing? First of all it erases
from memory the decoder makes a copy of itself in
temporary buffer, re-encodes its co-
pyu (i.e. the result was a copy of the PPZ in the original
initial form, before the decoder works) and
moves to the main phase.               
                                         
What does a hacker do when he sees my physical
what kind of "protection"? Removes her and her challenges. All
right.  What does the PPP do? She thinks cop
physical protection unit (note that on
each branded disc is crippled differently
sector/track to which it is “attached”
protection installer) and the CS of the block, where
The challenge to the Federal Law is just around the corner. Moreover, the CS is calculated
it turns out that “the rearrangement weakens
the amount discussed is CHANGING." Next... Semi-
Valued values have absolutely nothing to do with it
They check - what happened is what we have.
Then, for example, these KS are added up
(calculation, etc.) with those erroneous data about
which I spoke above. New values
are introduced to replace the erroneous ones. And all this
withoutchecks for correctness. If prog-
the frame did not change in key places, then
instead of incorrect values, those will be entered
what is required. Otherwise, instead of incorrect
the wrong ones will be substituted and the game will be as it was
impassable from the very beginning, and remains so -
sya. And finally, the PPZ takes its encoding
bathroom copy and puts it on himself as he leaves
to the main program via PUSH HL:JP
13251 (for example). The operating time of the PPZ is very
short - you don’t notice anything. But in pa-
It seems like nothing has changed,
Moreover, the temporary buffer is already completely occupied
based on other data. So it turns out
what can you inquire about the result of her work?
guess only by whether you were able to complete the game
ru or not. Therefore, all those who cannot
using a hammer to break a block of ice have in their
in possession of an incorrectly hacked version
this game.  And don't swear at me for
excessive meanness. I'm sick of these "dro-
voseki" (in English - "Hacker"). Break-
those, but correctly. Amen.                 
                                         
   Well, what do you say, Max? Benefits
of this protection are obvious. You can twist it
but in such a way that it will be more expensive to remove the protection,
than to purchase a licensed copy. I'm using
I used a simplified version. Although poten-
The cial was huge. There are, however, some missing
tatok.  Incorrectly removed protection is easy
pass it off as “completely” removed. Because check -means to complete the game to the end.      
                                         
                 -----                   
                                         
   R.S. Yes, I almost forgot. All about that one
same games. As has been said more than once, I
walked all along and across for more than a hundred
not (!) times. And, in principle, there would be no problems -
lo (all found glitches are either deleted or
more described). But here's the thing. How-
then I purchased a copy of Imperio/PHG from
Brest.  Couldn't start because
the program was reset - it worked
Check for disk damage. I replaced the disk. Ta
same topic.  He (Imperio) removed the check for
scratches and started playing. About the fact that
he wouldn't have been able to fight anyway, I
I'm not saying.  The problem is that the game
it failed in one place, then in another. For-
hung or dropped.  And he has
128k Spectrum only. I thought it was
in the IM2 driver (or in the turbo driver, so
Moreover, Paul spoke about problems with
entry points into TR-DOS). However, everything about
believing, I never found any errors.
Those. everything works for me and my friends
rectly.  Both in 128k and 25bk modes. Voz-
possible, problems due to non-standard pro-
DOS patches, but it's hard to deal with.
15635 I cannot use due to lack of
actionsfree memory. So I'm asking
from the pages of the magazine, who has any problems
arose with loading to disk, loading
texts and graphics in 128k mode?I post-
I'm trying to fix everything. You just need to know
what exactly (specific situations).        
                                         
   And one last thing.  At the beginning of this text I
mentioned the supposedly author's freecopy version
our game. I received news about her
temporarily from two sources - from a letter
Quasar to Slider and from a conversation with one
a man from Gomel.  The situation is approximately
the next one was sent by e-mail from Barnaul
whether the "author's" freecopy version of "Santa
Klaus", but there is a "glitch" in it - impossible
but use a hammer to break a block of ice. I'll try
strength to send me this very version
games.  In the meantime, keep in mind that copyright
freecopy version  FIRST appears in the magazine
nale"Black Crow #5"!!! And nowhere before
she could not appear due to absence
such action!                           
                                         
   That's all for sure now, all the best!  
                                       TJ

Share your thoughts about the article