hexalock

the error i encounter say's string error...sumthing 44???
this is the version\
HCPS Loader
2.0.1.4632

I think you are right. Something is wrong with the program itself. I created it very sloppily as it was just an idea.
Or maybe it is the Hexalock protection getting smart. I am uploading a file that will read the first few bytes of the file and tell me what is says, if possible upload a screen shot of the program.


You may need to rename AcroRD32.exe to Acrobat.exe.

Thanks. I did that. The program give this back as below:

%PDF-1.4
%忏嫌
91 0 obj
<<
/Linearized 1
/O 96
/H [ 2018 307 ]
/L 190792
/E 112663
/N 6
/T 188854
>>
endobj
xref
91 58
0000000016 00000 n
0000001525 00000 n
0000001673 00000 n
0000001823 00000 n
0000001971 00000 n
0000002325 00000 n
0000002585 00000 n
0000002637 00000 n
0000002814 00000 n
0000002986 00000 n
0000003163 00000 n
0000003341 00000 n
0000003581 00000 n
0000003622 00000 n

This is screen shot.

HCPS Loader
2.01.04538

hir is my result
]¤žƒG:ÓÉG¸¼k7¼¢1å~ç=£ïDÕGatĪÆ袺êXžîÓjÈÓ3ïaÁþ8š!0¶‚ ùÁz›*øgè5‚‰IW|Pp(òÂ(~p¼­wyD,p«:ôç¨û®Ú­Ø@¯Îáñ¶^¾Âm9t� �ñíú"BqüÑá9ƒO/)À\öPµÁùåJˆE'ˆ#‚–üôº;¯ns%ÚžL0
;weGëv›
Ùþì(õŽ5ƒrcŸù¨áÏô®+FÜ<Š^/ÌÐŒx€ÛÞ¥
ŽÖÁ_ï–ŸÚɪžÎŒqP:_®1™úBƒ]`K€)­ú ÛY]Bbli7H+Ô$êÆåÐ蚸³æ‰ƒó×L|ÁŠÕ÷ŒõäE™@Z¶ŒÜ$°nõvØ\›„� �¨4nÒežnžv¿"B@U®õ±„‹\2—óË7ÀÔû>(¸&¶hTvv/&Ášx÷#ÁiÜ€]Ù,ª”1Ûaרò#eøÎä
Ɂxs‰ ¹*%¥+çÁ©ËL™¦ˆ’·ñ™‚BÖÿ)L‚e_zÓn§"i&_íQàö
Þ#²ÓÛ“19åúq9Ü¢
!âÛsŒnW Ü\Ð
IZÊ\ã-ê\èŸi>‡ü»“‚Œ¨}“;”äð©!¡TÑ‹Lî݉…>‘F;šÉ•”a×
Mœèw6Ñ]g™‹žOœÆŒà†'áñ’ÿ×¼ibm.&†”,ÖÐ2;ßÐau÷𨉗ëÊ‚ò Îìê–b“ &
Úö
«ü
;ãÏA´$½¡tŠuèÿ
ˆ\ô¿ì(vC•X÷͈ËkÁ¾ÅW#šÀÀ(쾫eËKœÒI|'ú&4ÈFÄGE¾õýÅ™Á„‡ÎQ'(‹� ��±:
Ī^네ñ\+Qƒ”QN¨ÄXγʔ›WýWœIÅõŠÇ˜X
ìô½,ªl».¦v¶Ž]^ý ÊoÑêSÁ¬™,Fg¦Ìòåª$t
+ 5ÈîÚ·–Žõóõ’~F1ÞÐß—É÷fL$àÙäD<:ð^à”Ï;2<R5c”l®ª·i Ó•÷j[$,àˆžP㛎èˆÉݬ&™<*ÑÌ´w<ª4Hoá2\wEèì=Z!?eúZ%Ä“ERm˜P‹×ý0Šg JªÝìoÑ"k°mâ±S®”€J´äSÁ™5JíëÕËÎ¥¿¯ZÊÌô…,ãvt=÷üd¢”: Û«SçPž“@—7“GæÀÿ~7 ±» Ô_%ý¨û"ó÷-\ÓHzN9Ò·+û]_?Ö†²ÿ÷leçt¬+cü|?+õ´„È'0£óúàlŽß2A)¬sDÈûÍ…›fï°o

Leorn: I believe you are having problems because the Hexalock protection is not loaded. You said earlier when you opened the "StartHere.exe" program you received an error message. Try taking the disk out and re-inserting it and open the program until you don't see the message and you can open the disk with normal adobe acrobat reader.

luanyiking: Everything looks like a go from the screen shot I am seeing. I am stumped as to why the pdf files do not open as they should. Give me a few days to come up with a more stable program and I'll upload it here by wednesday. Can you upload a PDF file my proof of concept program has created? That would help me a lot.

Thanks a lot. I am pretty confused too, since I have no idea about the content of PDF files. Here I uploaded my PDF files. It should be Ok, but unfortunately, it is blank. I will be waiting for your good news.


http://rapidshare.com/files/75401644/upload.rar

Want to say a big THANKS to goldstar, your program worked perfectly.

I was twarted at first by not having the winsock, I got it... installed it and pulled off the needed data from a "hexalocked" CD.

I'm sure others will have issues ,BUT many,many people out there are looking for this solution.

Can I post your program , on other boards, if you get credit?????

Sorry for the delay, I know I promised an upgraded solution last wednesday, but reversing is no longer my job, nor was it ever. Please post the proof of concept wherever you feel it will be helpful; I'd like to see somebody turn this idea into an more specific application.

for anyone finding this....

these steps worked perfectly for many hexalocked CDs containing large pdf manuals.

1. load the disc,in XP disable auto run. Explore the disc & launch the HCPS loader ,likely "hcps.exe". Minimize this window. Open the folder that contains the unlocker,or create a desk top short cut, minimize. Reopen the CD.

2. Rt click a file off the CD, open with Acrobat.

3. Allow Acrobat to load the file.

4 IF the file displays correctly,close Acrobat .Open "unlocker" and click on the "acrobat" file inside.

5. TWO new windows should appear,one is simply a title for part 2.

6. Pick a file to "unlock", select a folder to output. Click the "load file "
button. NOTE the size of the file , WAIT for any disc activity to take place. The file size will be displayed and they should match. If they do not or you get a "0" file size you have issues with your end not the unlocker.

7 . You could get an error message that you need ms winsock (mswinsck.exe) Google it, you'll find downloads and the needed registry tweeks.

8. IF none of the above is an issue, you should see in your new folder a copy of the "unlocked" file. File size must match the original. if not RETRY.
I have had a few that seemed to go smooth, yet yielded a "0" sized file. On retry they worked fine.

9. You should have a second pdf reader, I use Foxit Reader, this will not open scrambled or corrupted pdfs. If you launch acrobat, the hexalocked file could be read, and you may think you got a successful copy. I know that my copy is successful if Foxit opens and displays the file correctly.

10. You may STILL have a password protected pdf, functions in Acrobat can be locked or disabled in the original document, hexalock just passes these on.

I cannot offer anymore help/advise than this.

Goodluck

---

Last edited by b1gR3d; 29-12-2007 at 17:46. Reason: clarity

I Have A Set Of Instructional Cd That I Would Like To Backup With Alcohol But I Keep Getting An Error Message Every Time I Try To Use The Backup. I Keep Getting An Error Message That Says Please Insert Original Disk And At The Top Of The Window The Heading 'hsps Loader' Appears. Can Anyone Help Me With This. Thanks In Advance.

This is definatly HexaLock, provided you are seeing HCPS Loader and not HSPS Loader. Download my "proof of concept.zip" and follow through the previous posts and see if those instructions work for you.

To make everyone happy...

I have some info from inside Hexalock. Hexalock is dead for about two years. Personal matters between owners doomed the company.

Regarding HCPS...

They had to obey very strict rules:
1. Not to run any ring0 code.
2. Work under Guest/Limited credentials.
3. Not to use assembler whenever possible to make MenInBlack happy.
4. Not to run any code if no HCPS CD recognized.
5. Not to connect any IP outside.
6. Not to use any anti-SoftIce tricks.

A pity You had to use so much time to crack this code. For cool hackers I have another task: try to bit2bit copy any Hexalock protected disk. Go!

P.S. Hexalock proved a possibility to make DVD-R protected a few days before dissolving.

Thank you for the info :P If I get any spare time I will definately take the challenge to figure out what I can, especially now with the clues. I suppose you had some sort of say in the project and I must say congrats to what you and your teammates have accomplished.

So Hexalock was just begging to be cracked? I suppose it was never widespread enough to gain momentum of being disassembled

Sometimes You must obey not Your business routines but political ones.
It was once an Israeli company. Any Israeli company in that market (info protection) has to make happy a lot of "services".

I saw parts of Start_here.exe, where antidebugging elements where conditionally compiled. Rather non-compiled. I honestly don't know why they did it, as anyway the whole sources where sent to appropriate services.

Regarding b2b copy I don't know how they protected their disks, only that they were especially proud of.

And one more thing.
The HCPS and session protection (against b2b) have little in common. 99.9% separated projects.

I myself accomplished very little. Made some suggestons which wern't used AFAIK. They said a lot of improvements may be done, but not nessesary before b2b cracked.
Now You can make it sport. Let me know You succeeded and I'll inform the friend of friend...

I've got an idea on seeing the hidden session at the beginning of the disk. It is to put in a fully burned disk, and hot swap the disk, then you've got full access to the disk but only as it as burned (no TOC or any files will show up. I've done this for xbox disks using the hotswap similar method

Just to let you know, I don't have any disks with Hexalock on them. The only one I had is now broken. It was starting to crack from the inside out and was causing errors, thus my motivation to initially crack, or hack up what I could to get the file back in a viewing fashion. Anything further would be an investment that I may or may not make.

hello CrapWriter,
i haven't been able to find anything regarding Hexalock "dissolving" or being "doomed" or "dead".
are you saying they're going out of business? can you elaborate, or maybe post a link to something that i can read about it?
thanks,
mac

Eh? So who wrote the (non working) 'Vista compatability update' on the Hexalock website - new owners I guess...?

Either way, the 'proof of concept' author is a don - thanks dude! Just unlocked all my classic car service manuals (from 1983... for gods sakes, as if they REALLY needed to protect their revenue that desperately in 2008!) for the small privilidge of actually reading them on a Vista machine.

p.s Fancy a laugh - scroll down halfway - BUSTED!!

http://www.cdroms.com.au/hexalock/index.html

GoldStar611 youuuuuuuuuuuuuuuuu roooooooooooooooooooooooooock


you are da maaaaaaaaaaaan


i was trying to save to a subfolder on my hard disk and i got a runtime error 52

saving to the root solved this error for me

Want to Buy: Any HexaLock CD. PM for details.

So I've hit 166 downloads, who's using this, who does it work for and who does it not work for?? Any leads or ideas here or does it do what it needs to do?

My inspiration from a private message
UnHexalock Revision 1 is out
Supports files over a few megabytes without a problem now.

http://fdghdfgh.netfirms.com/cgi-bin/dltr/down.pl?ID=1

---

Last edited by GoldStar611; 14-03-2008 at 08:23. Reason: Added Info