Log in

View Full Version : Project Hasp4 memo1 replacementwith Microcontroller


John
January 24th, 2001, 18:39
Hello ,
I have start a project on hasp4 memo1
Hasp4 is replace by a scenix microcontroller +
93C46 Eeprom .
I will try to do my best to explain structure of
communication between Lpt and dongle .
(my english is not to good)
this project is new and in development.

I'm not a master in programmation ,I'm still learning

if someone is interest please visit at :

http://john_scotti.tripod.com/index.htm

Antipodean
January 25th, 2001, 08:10
The site has already been taken down.

john
January 25th, 2001, 15:09
Hello ,
I have update files on the web site and had a little
Crash.
The site is now functionnal.

Sorry for the problem.

http://john_scotti.tripod.com/

john

CrackZ
January 25th, 2001, 17:23
Hiya john btw ;-).

Just a quick greet in public ;-).

Regards

CrackZ.

Czajnick
January 25th, 2001, 18:47
Is it all based on your own reversing work ?

I was reversing DLL <-> VxD communication some time ago (before I've found sources for some simulator), but It gave me headache

Can U point me on some web resources about HASP reversing (not Zencrack nor Fravia's - I know them well ) ?

John
January 26th, 2001, 18:45
All my research on the web on hasp dongle has always
found the same web sites. Fravia web site and
4 or 5 sites with always the same pages.
there was 3 projects on this dongle and has stop after
in 1998.

I'm currently working on the dark side of the
hasp to find an easy solution to this virus that infect
a lot of softwares (the hasp4 dongle nightmare !)
I'm using a microcontroller that is easy to program
(cheap hardware programmer) so everybody can easily
make it's own !
no crack , no patch.
I will try to do my best to explain with digital capture
the communications with the dongle.
I will also put [*.LA] files for people that want to study more the captures files.

thanks !

John

Quote:
Czajnick (01-25-2001 07:47):
Is it all based on your own reversing work ?

I was reversing DLL <-> VxD communication some time ago (before I've found sources for some simulator), but It gave me headache

Can U point me on some web resources about HASP reversing (not Zencrack nor Fravia's - I know them well ) ?

Czajnick
January 27th, 2001, 06:34
Heh, using some CPLD (Xilinx ? Lattice ?) should be also nice idea, but probably more expensive.

Personaly I think emulating of VxD is better way, than emulating the hardware...

TonyLee
September 28th, 2001, 21:02
Dear Jonn or any friend

how an mail the microcontroller to Emulator HASP4 for me

Thank You.

goatass
October 1st, 2001, 08:10
Hey John, this is a good project and I will try to help as much as I can. I suggest also working on figuring out the new haspcode() used in the Encrypt/Decrypt functions.

btw, your web page still doesn't work.

goatass

SyNTaXer
April 14th, 2004, 17:44
is there any new in this project ?

bye SyNTaXer

cah
June 29th, 2004, 13:07
How to edit/change Hasp id of hasp4 lock for known pass1 & pass2?
we can edit its memory by haspedit.exe. Is any tool avail like haspgrab.exe for hasp4 dumper/writer?
Please help me in this regard
CaH

SyNTaXer
June 30th, 2004, 02:22
hi cha !

i've a question to you, how it is possible to get the pass1 and pass2 of an hasp device ?
bye SyNTaXer

Xak
June 30th, 2004, 17:01
Hasp4 code recovered year ago, we can produce HASP4 M1/M4 USB dongle with your own pwd1/pwd2, secret table, encryption key, ID. No problems to copy HASP4 dongles, cloned dongles 100% same as original. If anybody interested we ready to sale this project (hasp4 programmer, schematics, sources) - leave a PM.


Quote:
[Originally Posted by SyNTaXer]is there any new in this project ?

bye SyNTaXer

SyNTaXer
July 1st, 2004, 01:14
sorry xak, but black magic should be for free or done byself, never pay for it. bye SyNTaXer

cah
July 4th, 2004, 05:26
Dear XaK

Is these hasp4 clones without external power supply?
Give me your email id
CaH
cahthere@hotmail.com

tgodd
July 5th, 2004, 06:42
Quote:
[Originally Posted by Xak]Hasp4 code recovered year ago, we can produce HASP4 M1/M4 USB dongle with your own pwd1/pwd2, secret table, encryption key, ID. No problems to copy HASP4 dongles, cloned dongles 100% same as original. If anybody interested we ready to sale this project (hasp4 programmer, schematics, sources) - leave a PM.


Recovered the code?!?

The hasp4 is not a processor, it is an asic.
How does one recover the "CODE" from an asic?!?

tgodd

neviens
July 9th, 2004, 12:39
>...The hasp4 is not a processor, it is an asic.
>

Nope, those days are gone!
CY7C63001A (Cypress micro) + AT25020 (Atmel SPI serial eeprom) + 6MHz
resonator combination is in use in USB HASPs.
Neviens.

HarmEr
July 16th, 2004, 12:21
Quote:
[Originally Posted by Xak]Hasp4 code recovered year ago, we can produce HASP4 M1/M4 USB dongle with your own pwd1/pwd2, secret table, encryption key, ID. No problems to copy HASP4 dongles, cloned dongles 100% same as original. If anybody interested we ready to sale this project (hasp4 programmer, schematics, sources) - leave a PM.


2003 year, Jul.
before Glasha take result of our research....
I and Nikita reverse hardlock.sys and find next code:

Code:

VOID Transform( PULONG Data, PKEY_STRUCT Key )
{
ULONG i,index,bit;

InitDongle( 2, Key );

for( i = 1, index = 0; i <= 39; ++i )
{
bit = Transform2( ((PUCHAR)(*Data))[index], Key );

index = (( (*Data) & 0x01) << 1) | bit;

if( ( (*Data) & 0x01) == bit )
*Data = (*Data) >> 1;
else
*Data = ( (*Data) >> 1) ^ 0x80500062;
}
}


after it we make direct Hasp4 hardware access and build tables for analise.
3 days later i keep full Hasp4 encryption algo, and for reproducte it need only 37bit.

But atm i have one question.
Hardware contain algorith for convert pass->SecretTabel (for hasp v1.1) or pass->MagicWord (encryption key)?

Xak... do u answer on this question?