Log in

View Full Version : Help on HASP service 3Dh (service 61)


edge
February 11th, 2001, 22:35
Is there any way to emulate this service? Is the encryption algorithm the same on all hasp rev3 dongles? Does anyone know what each return code means?

I'm trying to emulate a dos based program, at startup the program checks for the hasp 1,5,32h services (which i have successfully emulated), and during the program execution, it checks for the service 3Dh to load some pcx encrypted files, is there any way to emulate the encryption algorithm to decrypt those files at runtime?


Greetings,

Edge

CrackZ
February 12th, 2001, 19:26
Hiya,

Service 0x3D is HaspDecodeData(), new to HASP 4 (I think HASP3 was just a trading name and if it calls this service the internals probably got upgraded). Parameters appear to be :-

EAX -> bytes to encrypt
ESI = number of bytes

Return parameters appear to be :-

EAX -> decrypted bytes.
ECX = 0 (status for the operation).

Interestingly, EDX appears to be returned as some sort of 'key', it changes depending on the data, not sure why, but EncodeData & DecodeData both work on 8 byte blocks.

Regards

CrackZ.

PS - I think I replied to your e-mail already ;-).

--
March 1st, 2001, 19:11
Hello Edge ,

Don't tell me that your are working
on the soft FotoPlay 2001 !
For the moment nobody does i think the serv 61

edge
March 6th, 2001, 22:07
Quote:
-- (03-01-2001 16:11):
Hello Edge ,

Don't tell me that your are working
on the soft FotoPlay 2001 !
For the moment nobody does i think the serv 61


Hello, yes i'm actually working in the fotoplay 2001, and this year the target seems to be a hasp4 dongle, the same dongle for the 42 games which it is. All the games uses the services 1,5,32 at startup, but there r 9 of those games that uses the service 3D to decrypt some relevant pcx that makes the game unplayable. Any help in this service i would apreciate too much (thank u CrackZ), or better, help in the decryption algorithm, because after 3 weeks working on this service i think that i'm wasting my time, and i feeling a bit alone on this.

SyNTaXer
April 2nd, 2004, 03:11
2 edge :

years later ....
... you feel a bit alone on this, but you are'nt.


STX

dELTA
April 2nd, 2004, 08:01
Oh, for the love of god...

tgodd
April 2nd, 2004, 14:08
There are emulators available for the hasp4 on the market.

You ought to try those for insperation.

SyNTaXer
April 4th, 2004, 08:43
i know the availability of those emus but most of them work in win9x only.
and the application uses real dos. hmm, there is maybe a chance to get it work in windows.

naides
April 4th, 2004, 11:58
Quote:
[Originally Posted by SyNTaXer]i know the availability of those emus but most of them work in win9x only.
and the application uses real dos. hmm, there is maybe a chance to get it work in windows.


I think Tgodd suggestion was more on the lines of :

Get one of the Emulators, Reverse Engineer it, and learn how they do it, then write your own for whatever OS you wish to use.

SyNTaXer
July 4th, 2004, 15:23
anything new in this ?

it is possible to emulate the 3c or 3d funktions by hw or sw in dos ?

bye SyNTaXer

MeteO
July 18th, 2004, 13:59
Quote:
[Originally Posted by SyNTaXer]
it is possible to emulate the 3c or 3d funktions by hw or sw in dos ?


Under NT-based operating system (NT/2000/XP) all DOS programs send all data to haspdos. The chain is haspdos.sys->haspvdd.dll->haspnt.sys. In latest hasp drivers(greater then 4.85) all calls from haspnt are redirected to hardlock.sys.

By hooking Read/DeviceIoControl/InternalDeviceControl of hardlock.sys possible to emulate this dongle(also fn HaspEncode/HaspDecode