HARDLOCK emulator

[toro]

hi nikita@work

very tanks for your helpfull info. i have seen your id in brain studio emulator so you must be an expert in hardlock and hasp (posibly sentinel, tanks for your first reply to me about sentinel).
i see ealaddin site. there is a hl_api installation file that can be download. its time is 11/2002 . i download it last mount. there is no new version. after installing it, i foun a hl_demo project. so i compiled it with msvc and worked with it. in hl_struct+0xba i see 1. also i test some program that envelpoed with hardlock and see version 1. in which program you see version 2 and p-code?

tanks

toro

Originally Posted by toro

in which program you see version 2 and p-code?

As I told before it was latest hardlock.sys =)
(from hinstall.exe v4.95)

[toro]

hi nikita@work

my level 1 & level 2 enc/dec routin compeleted. in level 1 there are 37 fields that encoded and decoded but your hl_struct has 26 member. this means that other members is not used?

you say the hardlock.sys that installed with hinstall version 4.95 has a different enc\dec algo in p-code, are you see any hardlock protected program that making use of this hardlock.sys?

toro.

Originally Posted by toro

my level 1 & level 2 enc/dec routin compeleted. in level 1 there are 37 fields that encoded and decoded but your hl_struct has 26 member. this means that other members is not used?

Reserved area contain fileds like PortFlags that used only by driver.
But it seems some of them used in HL RUS API.

Originally Posted by toro

you say the hardlock.sys that installed with hinstall version 4.95 has a different enc\dec algo in p-code, are you see any hardlock protected program that making use of this hardlock.sys?

At this moment - no =)

[toro]

hi nikita

as i say before currently i found 2 version of hardlock.sys. one version has no enc\dec algo and one version has. can you tell me about version 0, is it the same as uncrypted version?
however my problem is to distinguish between crypted an uncrypted packets in runtime. my approach is to test the seed, if it is 0 then packet is not crypted and if is not 0 then packet crypted in 2 level is it true?

toro

Originally Posted by toro

as i say before currently i found 2 version of hardlock.sys. one version has no enc\dec algo and one version has. can you tell me about version 0, is it the same as uncrypted version?

Right. Simply check +0xBA field and if it's zero skip decrypt.

Originally Posted by toro

however my problem is to distinguish between crypted an uncrypted packets in runtime. my approach is to test the seed, if it is 0 then packet is not crypted and if is not 0 then packet crypted in 2 level is it true?

If +0xBA field not zero then decrypt first layer (common for both version) and then decrypt each field.

Hello Nikita .
Can you send hl_struct structure to me too?
Thanks in advance!