Help reqd: Unpack for HASP HL 2.17

[merags]

Hi,
I have a program & the original HASP dongle. Since my dog decided to use it as a chew toy, its been reduced to a fragile state. It still works, but I wanted to get a replacement just in case. The vendor requires me to pay for a *new* license to get it. Obviously, I dont want to do that. I have checked the emulated key option, but I figured it would be better to have the HASP check removed altogether. I believe the first step is to unpack the code.

I ran protectorID and it gives me this,
Scanning -> C:\Program Files\****\***.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 6938624 (069E000h) Byte(s)
[File Heuristics] -> Flag : 00000000000000000100000000100011 (0x00004023)
[!] DONGLE - HASP HL Envelope detected !
[CompilerDetect] -> Visual C++ 6.0
- Scan Took : 0.349 Second(s)

PEID does not seem to detect any packing (Its says 'Nothing found *')

I have tried to go through previous posts with respect to HASP-HL unpack, but could not get any ideas on how to proceed.

I have done some successful hacks on un-encrypted code, but the HASP-HL envelope seems to be outside my reach. I would appreciate any pointers.

Regards
VJ

[G3n1us]

I think that is easier to emulate dongle.
Procedure:
1.Download HaspLoger or Toro loger for hasp
2.Capture paswords
3.Dump your dongle with h5dmp.exe
4.Make reg file with unidump2reg.exe for multikey18.*.*
5.Add reg in registry and install multikey
If you hawe problem to find this tools contact me I will send to you (all tools you can find heare)
If you still wish to unpack i hawe tut for hasp hl but like i write it is easier emulate

[merags]

Hi G3n1us,
Thanks for the response.

Since I had hit a dead-end with unpacking, I was investigating the emulation angle today.

I ran the 'Toro Dongle Monitor' and figured out the PW1/PW2. Also, I captured the log of transactions (log.txt) between the dongle and the protected program. Then I ran h5dmp and managed to generate the 'hasp.dmp' & 'hhl_mem.dmp' files.

Now some questions,
1. Shouldn't 'hhl_mem.dmp' file be much bigger than 'hasp.dmp'? In my case both of are approx the same size (~1K). Looks like I can't make any attachments in the forum yet. So let me know, I will cut'n'paste them in the body of the post if you want to see it.

2. In the steps you have mentioned, isn't there a need to construct and add a 'Question' & 'Answer' table into the registry to be used by the emulator?

3. I see in my transaction log file (log.txt) that both HASPHL encrypt & decrypt calls are being made. The info I have seen in internet seem to suggest that none of the free emulators contain the 'full' implementation of all the required calls and consequently fail when used. Is this correct?

I apologize if these questions have been answered before. Its just that I havent been able to find a coherent response to these questions in my googling today.

In any case, I would appreciate if you could send me/point me to the latest version of tools you have mentioned along with any tutorials on unpacking.

Thanks
VJ

[G3n1us]

1. I think that your files ok - now use unidump to reg to convert dump to reg file
2.Maeby your hasp hl dongle dont hawe q/a pairs if hawe then you must add them
3.Your question nr. 3 hawe answer to seccond question-your dongle hawe q/a pairs. It depends how much q/a pairs hawe dongle. maeby djust few or like one mine - 1500 q/a pairs. You must figurit out on wich way dongle change answers- my dongle change q/a ewery time when starts software , my seccond dongle change q/a pairs on button click or menu load so you must run your software many times to read with loger and toro monitor all q/a pairs.
Heare are tools and ohne tut with extracting all q/a table froam dumped section.
http://hotfile.com/dl/111858324/b14e7cd/1.rar.html

[merags]

Hi G3n1us,
Thx for the link and the info.

My primary system is Vista 64-bit, could you point me to where I can find Multi-key for x64?

Cheers
Vijay

[G3n1us]

Yes on the forum. Heare you hawe all for emulating Hasp HL. If you cannot find mk 64 contact me i will help you

[merags]

EMULATION WORKS! :-)

Many thanks to narciszu & G3n1us for the wonderful help!

Just for my own knowledge, could someone point me to any material on unpacking the HASP-HL envelope? (if it is at all possible)

[G3n1us]

Search for Hasp HL 2.16 unpackigin , Hasp SRM unpackigin .... if you cannot find contact me i will send you (i think that you hawe this on tuts4you or arteam forum)

[merags]

Hi G3n1us,
I have sent you a PM.

Thanks
VJ