Ilok -> Pace-> A solution ;-)

[dyn!o]

Hi,

My comments:

1. Pace isn't hard to break. The hardest part in Pace is anti-debug driver, only the driver. The rest of protection doesn't contain anything strong, new or incovex.

2. Some versions indeed search for ntice and reg keys but that doesn't matter - you can still run Pace protected software without the need to hide these data. Of course the problem begin when you turn on SICE.

Anyway, Pace seems to be out of the game nowadays. There have been some titles protected with it, some even known (e.g. BodyStudio) but most commonly it is/was used in audio software. There are two unpackers.


Regards.

[taos]

Hi

I am totally in agreement with you except in a thing, the antidebug-driver do not detect ring 3 debuggers (Olly) and if you want to unpack manually it's very hard.
Unpack a file (DLL) with Pace for me and with the last version it's no possible...

I don't understand you when you say:"you can still run Pace protected software without the need to hide these data"- How???

Actually it's used in audio programs, but it's very agressive with the SO and many companys refuse to buy it (Inaccessable floppy drives. This could also apply to any other device using IRQ 6.,BSOD on shutdown or startup with "DRIVER_POWER_STATE_ERROR",Spontaneous reboots,corrupt registry entries (could be related to spontaneous reboots if Windows is writing to the registry when this occurs.) missing (not zero-byte, but none) paging file (swapfile.) ,etc...)
And of course it's very expensive

Use ADS in folder systems, create ghost cookies files... it's very stupid but how pack the files Ipace, it's not stupid.

are the 2 unpackers older?
where are the unpackers?
I've found 1 from TNT but it's for a old version.
If you can,please send me a link for this unpackers.
Regards

[dyn!o]

"It searchs the file NTICE.SYS and the registry key of Numega". So, I understood you suggest that SICE can't be even installed. I had in mind that SICE can be installed but not RUNNING. I didn't tried it with user level debuggers like Ollydbg since I'm not using Olly at all. I use Olly to discover software compatibility malfunctions, not for cracking.

"you can still run Pace protected software without need to hide these data"
I mean with installed (but not running) SICE.

About incompatibility. As I said in "StarForce going down?" thread: in my humble opinion it's not wise to use drivers to protect any software. As life shows, it usually ends with USB/FDD/HDD problems. Can anyone pay such a high price? Ask XtremeProtector, StarForce and PACE developers... do they have new customers?

Mentioned unpackers were build for v4 and v5 and stay pretty private (I don't have them too). In my opinion all powerful unpackers should stay private, at least not accessible to the developer who made the defeated protection. It's endless job and if someone want to learn then he/she has a lot tutorials including XtremeProtector (Ukraininan) and Armadillo.

Everything is unpackable... it's always matter of time only.

Regards.