|
#1
|
|||
|
|||
HARDLOCK emulator
hi all
i decide to write a hardlock emulator. previously i was write a sentinel filter driver that work properly (see rce messageboard, i posted my progress with name nikan). after some study on data transfer between hardlock protected program and driver i found that all of data transfer is performed via deviceiocontrol. there are 2 level of encryption on hl_api packet. i gess first level enc is function specefic. second level is done. have anyone any idea about first level encryption algo? toro. |
#2
|
|||
|
|||
Quote:
Good luck. |
#3
|
|||
|
|||
hi nikita@work
i tested many programs that protected with hardlock. i can devide those programs in 2 category. in category 1 there is no encryption on hl_api packet (possiblly drivers before 2.85) and in category 2 (drivers after 2.85) i have found one kind of encryption but in 2 level. the level 2 of encryption is very easy to emulate. it use a seed that stored in offset (hl_api+0xBC). but in level 1 the packet is partially encrypted. are you see this thing too? however are you have any info on hl_api structure, i was studied it but not completly. toro. |
#4
|
|||
|
|||
Quote:
Quote:
Quote:
Last edited by nikita@work; 09-05-2004 at 01:57. Reason: mistyping |
#5
|
|||
|
|||
hi nikita@work
can you explain p-code? i see all encryption routin in native. i saw that level 2 is performed on some portion of begining of hl_api. (first 64 byte) is it true? however i need some info about sequence of data transfer between driver and program when program call hl_code function. i see that when program call this function some call to deviceiocontrol with different buffersize is happen. and another question: some call to deviceiocontrol with buffersize=4 and 6 is happen why? toro. |
#6
|
|||
|
|||
Quote:
Quote:
Try to see how packet forms while HL_INIT/HL_READ/HL_CODE. It's enough. |
#7
|
||||
|
||||
Hello Nikita .
Can you send hl_struct structure to me too? Thanks. |
#8
|
|||
|
|||
Hello Nikita .
Can you send hl_struct structure to me too? orshare it here Thanks. |
#9
|
|||
|
|||
to papi and minawahib1
you can see include files of hasp or hardlock apis for complete details of hl_struct . |
#10
|
|||
|
|||
yes.. i found it on SDK(starter Kit)
thanks alot |
Thread Tools | |
Display Modes | |
|
|