gakman Ringedge hdparm

tinchen3112

sadly this very complicated, much of this i wrote here i read in assemblergames.com in a old thread, which has been partially deleted in the meantime......
But 1st i try to explain the easiest variant, which that are at least some games switchable...
1st you need at least a Keyboard plugged in the ringedge, for that you need a Special (it is no Micro or mini, dont know that Name for it, for luck i had one at home) usb plug to usb hub..
you also need a keychip and the matching ssd for it (it can be any game).
All ring ssd´s are ata password protected with a hex code, you must 1st unlock them before you can do anything....
here is the pw in asci : rBRZºRjZêrbxÊBÚJ*":*
"*jz
\ÎJ
and here in hex: 7242525ABA526A5AEA726278CA42DA4A2A223A2A0A221A2A6A027A0A5CCE4A0A
at best u use linux and remove the pw protect temporary with hdparm, or alternative (but dangerous for the ssd), you boot that ssd in a ringedge, during operation you disconnect the sata cable from the ssd (power cable must stay plugged and ringedge must keep powered on, too) and plug that sata cable to your pc, now you should be able to see the contents 3 NTFS partitions of the ssd. but until there u cant do much...for sure, you could install a new os, run mame or something or make a backup of that ssd.....
the ringedge starts 1st c:\system\execute\mxprestartup.exe, simple rename this file to something other. after that you have to remove the SystemUser Password from the SAM file (you dont want to type the orig Password, believe me :-)) in c:\windows\system32\config, at best Google for that, it is explained on much sites very well....
you also have to patch the System file in there, attach them to your regedit (on your main PC) under hkey_local_machine, you have to Change "\ControlSet001\Services\kbfilter\Parameters\FilterEnable from 1 to 0, now u are also able to use the Keyboard function and Windows keys....
on the ringedge ssd are 7 partitions, partition 4 and 7 are encrypted with truecrypt 4.3a, to open these partitios you have 1st to dump the truecrypt pw which is inside the keychip.
for these put the ssd in the ringedge, where u already have renamed that file and changed the pw from SystemUser.
After booting u will see a windows screen with white background, press ctrl alt del and switch to SystemUser. After that you see a normal windows screen (but no mouse, for this u have to patch the File Mxsegaboot.exe which is inside a other truecrypt protected file, ...but at the end it should be possible to work in windows without mouse...
next step is: disable the ewf writefilter from drive c: with this command: ewfmgr c: -commitanddisable -live
u can now restart or not...
to dump keychip:
1st u have to open a protected File throught command window: TrueCrypt /p segahardpassword /k X:\SystemKeyFile /v C:\System\Execute\System /l S: /w /s /q , this systemkeyfile is needed to open this......(which has the following Content: adsaf21519189aq1g56161asdff19as1f9:PF:CA[][_159191wef)... there is now a new drive S available. in this drive there is a file called mxmaster.exe,
open a window where u see c:\Windows\temp
start the file mxmaster.exe, during booting the ringedge security u can press the windows key, until you see a 16byte long file which begins with: ma and 4 Digits in the temp folder....copy this file to a other Location or usb stick.
now u have finally dumped the keychip.... with this file u can unlock partition 4 (update) and 7 (game). simply type truecrypt in the cmd window......choose the partition u want to unlock and under keyfile give him the path to that keyfile, after that press mount and...voila....u see now the content....switching the game is now still in only some cases possible, cause ringedge security asks for much more (ssd host, ds compute and so on, for this the File mxkeychip, mxsegaboot, game.exe........ has to be patched........but u can Change now to the most already cracked games, which are already available...
mount partition 7, now u see the gamefiles, make a backup of the SB**_Table.dat, you need this file later.
you can now delete the content of that container and put in the content of the cracked game, you have to look for the name of that SB**_Table.dat file, rename your backup .dat file and overwrite that with the file from the cracked game....after this is done dismount the partition in truecrypt...enable the ewf filter, rename the file i told at 1st back to mxprestartup.exe reboot....now you can Play at least 3-4 already released & cracked games....
The other "complete" way with contains kernel debug (ring0) and so on would to explain beyond the scope here i hope these are the informations u are useable for you :-)


http://www.neo-arcadia.com/forum/viewtopic.php?f=14&t=62415&p=1162692#p1162692

_________________
@++
Gakman -> http://gakman.free.fr
avatar
Gakman
Admin

Messages : 383
Date d'inscription : 01/10/2009
Age : 36
Localisation : Nancy (France)

Voir le profil de l'utilisateur  http://gakman.free.fr
Revenir en haut Aller en bas
 Re: RingEdge & RingWide
Message par Gakman Hier à 2:10

for posterity, a cross post from @skate323k137 on Assembler Games from last month has relevance to this topic.
assemblergames.com/threads/rin…yption.58937/#post-980072

"To back up any ring edge game (legitimate back up, for repair use) you have to have the ATA key for the drive, which someone posted here:

neo-arcadia.com/forum/viewtopi…=62415&p=1162692#p1162692

With that, drive can be unlocked using linux tool hdparm, and you can use dd to backup your drive image. This is not to defeat any security, just store backup of your game in raw disk image format. You still need keychip, and the game files themselves are still encrypted within this backup.

To restore the image, if your original GBDISK dies, you still need a GBDISK, or a drive with the same SSD controller chip. The ring edge will not boot from other SSD drives. I have seen many cheap SSD or bootleg games using the same SSD chip controller, but that is beside the point. To fix or work on gbdisk, a "secondary tool" is available which can be used to help do recovery work on GBDISK or other drive like transcend with the same SM2246EN controller chip.

usbdev.ru/files/smi/secondarymp/

Once the drive is repaired you can use hdparm to re-set the same ATA key as needed, and then restore your backup with dd tool in linux."


Finisterre
https://www.arcade-projects.com/forums/index.php?thread/7583-unlocking-ring-drives-with-linux-hdparm-patched-to-read-key-from-a-file/&postID=118732#post118732

_________________
@++
Gakman -> http://gakman.free.fr