PDA

View Full Version : Unpacking HASP HL.


gotofbi
September 11th, 2006, 21:40
Hello. Im trying to unpack HASP HL.
This is dongle protection.
But it is pretty much same as HASP SL which works with software.
I tried to find some tuts about it but I only found one about HASP SL written from ARTeam.

In that tut, it was easy to reach OEP because there was a nag.
But my program does not have a nag.
How do I reach to OEP if there is no nag??

Someone please share the information about HASP HL

I also read some article related with this dongle in woodmann.
But I figured that it is impossible to emulate HASP HL dongle 100%

Anyway, Thanks alot!

JMI
September 11th, 2006, 23:00
The FIRST thing you need to do is learn how to search for information.

If you put "unpack HASP HL" in your favorite search engine (without the quotes) you can find a wealth of information. Not just one tut. I got 740 hits in various languages. When I used "unpacking HASP HL" I got 476 hits. Using "HASP HL tuts" I got 425 hits in various languages.

There is also some information on the CRACKZ site, linked at the bottom of the Forums which should be helpful.

This is NOT a place where you are permitted to ask: "Teach me how to find the OEP of HASP HL if the program doesn't have a nag."

YOU are supposted to do MOST of the work and show US what YOU have done and THEN ask for a little help to continue in the right direction.

Regards,

gotofbi
September 12th, 2006, 02:16
Quote:
[Originally Posted by JMI]
If you put "unpack HASP HL" in your favorite search engine (without the quotes) you can find a wealth of information. Not just one tut. I got 740 hits in various languages. When I used "unpacking HASP HL" I got 476 hits. Using "HASP HL tuts" I got 425 hits in various languages.


Ok I also used my favorite search engine starts with g
When I put "unpack HASP HL" in that engine, I got 743 result
which were NOT USEFUL or NOT RELATED

Also I used "HASP HL tuts" and got 195 result.
Still all of them were NOT USEFUL or NOT RELATED

I know that I have to search before I post.
But if I not mentioned that I searched before I post,
It does not mean that I never searched.

I also searched in this forum and still dont get the solution.

HASP and HASP HL are different protection. Please consern that too JMI

Quote:
[Originally Posted by JMI]This is NOT a place where you are permitted to ask: "Teach me how to find the OEP of HASP HL if the program doesn't have a nag."


I didnt know that I sould not ask how to reach OEP. Im very very sorry about that.

Im not sure that JMI thinks I just posted this thread without any of work.
I tried everything and still have no luck with this protection.

Thats why I posted in woodmann.

I tried with EXEtools but I have no permission
I searched in ARTEAM and also posted one article about HASP HL
I read CrackZ and it was only about emulation not UNPACK
Further more, CrackZ only HASP and HASP 4 which were old information to me
(HASP HL also same as HASP 5)

I didnt checked other web when I post very first post about HASP HL
I will search more and than will reply the result.

JMI
September 12th, 2006, 03:39
Point 1:

If you do NOT mention that you have searched, it means someone will wonder whether you have searched. Part of my job is to confirm that Poster's follow our Rules which require that you do search, First.

I do understand that HASP and HASP HL are different protection schemes. That's WHY the search criteria I suggested was for "HASP HL" and not "HASP."

Point 2:

The FAQ clearly states: "Do not ask for help without showing you made an effort." Since you did not show what "effort" you had made, again my job is to confirm that you follow the Rules.

Point 3:

YOU read your first Post and pretend you didn't write it. What would YOU be able to tell the Poster had done before asking someone else to "show him the way to the OEP" besides "ask to be given the answer"?

Point 4:

Again I repeat, that this is not a place to ask someone to take you by the hand and walk you through the process of doing what you want to do with your project. SHOW US YOUR EFFORT to learn about how HASP HL and/or HASP SL work. For example have you attempted to obtain documentation from the maker on how they work? Have you attempted to locate SDK's for them to look at. OR do you generally just follow someone else's TUT by doing SETP 1, then STEP 2, then STEP 3 without any real understanding of what you are actually doing or why? How would we know what you might know or have done?

You are, of course free to proceed generally in life as you wish. Here, however, we do have Rules and you are expected to follow them. This means you need to do more than say you "want" something and "someone" should give you what you "want."

Your question is the equilivant of asking:

I have a program protected by HASP HL and it's packed. I have no idea how to unpack it. Can someone please tell me how to do that?

This is EXACTLY the kind of question the FAQ says one should NOT ask here. It's part of my job here to inform you of these requirements and Rules.

Regards,

nikan
September 12th, 2006, 03:47
hi
if you have original dongle, you can find its oep easily w/o any bp. just run it over olly, and press f9 or even run program and then atatch olly to it, then go to code or text section and righ -click and select all then copy to a file. if your target is compiled with vc, you can search one of function names or constant which must be called near of oep, for exmaple "initterm", you will find oep. for borland compiled targets you can do the same.

Quote:
But I figured that it is impossible to emulate HASP HL dongle 100%

hasp hl emulation is possible via a table baesd emulator. i did it many times. and i heared that its firmware extarcted now, so its algo will break too.

TORO

fritzFS
September 12th, 2006, 06:19
try to read/translate this, maybe it'll help:

http://www.dongle.ru/hasp_envelope.html

Apakekdah
September 12th, 2006, 08:29
@nikan
so... sir by the way it's need the original dongle right to unpack-it... ?
-
how if i dont have the original dongle, can i still unpack-it... ?
-
please tellme i need this not for crack, just for protection my progys...
so i must learn how to crack to protect it...
thx anyway...

@JMI
please don't delete my posting...
i need this info just protect my program...
so... i learn how to crack...
just want to know where the weekest of my progys...
-
i search in google to, just like » gotofbi « no related articel

@gotofbi
yeah...
JMI's right, were we stay we MUST respect the guard (i mean mods or admins)

sorry with my english

gotofbi
September 12th, 2006, 21:39
@nikan, Thank you very much for that information!

@Apakekdah, you always need dongle to unpack the target.
It always encypted and in order to decypted, you need dongle.

Apakekdah
November 30th, 2006, 09:06
never seen tuts about unpacking HASP HL...
after i try, dump this app is very easy (maybe) but rebuid IAT is very HARD...
where is everybody that have experience about unpacker.. ?

h27
December 1st, 2006, 09:03
Hi
I have a program that packed with "sentinel super pro" (SSP) and I have not dongle.
But, I could unpack it.
first I found unpack algorithm of SSP (in crackz and other tutorials)
then I processed algorithm and found that we need a key but we can unpack it without a key.
it is easy, just I compared first bytes of packed program with demo version of it (it isn't packed).
so I could unpack it.
it is really easy because I think one compiler generate same starting code in all programs hat written in it. (Is it true?)
But I have another problem in it. resource in program is encrypt. it means that each dialog of program has a resource and it is known by such as 169. for loading dialog in regular programs first programs push this code and then load it's resource for example:
PUSH 0A9 --> 169 that can be seen in reshacker as resource of dialog
MOV DWORD PTR SS:[ESP+C],ESI
CALL 004E7B2C

but in this program, 169 is encrypted. (for example 0x426)

so, code in encrypted program is:
PUSH 426
call 004E7598
MOV DWORD PTR SS:[ESP+C],ESI
CALL 004E7B2C

is it routine in SSP?
if answer is yes how I can remove this encription?
regards