PDA

View Full Version : Hasp hl or srm please hel?


iksi
09-04-2015, 12:47 PM
Hello.
I wont emulated dongle of one croatian text to speech voice.
I think that dongle is hasp srm, any solution?, in archive is setup file and dump.
https://yadi.sk/d/15BEAcVOisdUR
Thanks for any responce.

sverox
09-04-2015, 01:22 PM
100% SRM, new envelope API.
Key is basic HASP so i think only envelope used (also consider by file sizes).
Only few people can emulate this.

iksi
09-04-2015, 03:13 PM
Ok, thanks i whaiting for solutions

Prenumele Numele
09-05-2015, 02:17 AM
http://www21.zippyshare.com/v/A4eh0mbj/file.html

http://lostdongle.com/?page_id=104

also you can make dump with http://ge.tt/api/1/files/8qvT5eg/0/blob?download

http://mediafire.com/download/c0b121h4bgfqpud/DumperGUI.vmp.exe

hmmm ... I found in hasp_windows.dll only vendor id

how you use croatian voices ? with any tts reader ?

WinTalkerVoice.dll has last envelope with sections AKS1,2,3

anyway try to make usbtrace txt log

Prenumele Numele
09-05-2015, 06:12 AM
if you untick hasp hardlock at instalationwill obtain a loadable dll
in ollydbg

use ollydbg and this tts reader to debug http://www.sphenet.com/Files/TTSReader_Package.zip

when try to speech a text it says about license activation audio

nodongle
09-08-2015, 08:07 AM
@iksi
There is no public solutions for .AKS envelope.
usbtrace logs is required also.

appcrox
09-17-2015, 05:41 AM
There is also an activation version of WinTalker Voice, and I was patching the previous version WTV 2.0.
There was the registry value "ActNum" under the HKEY_Local_Machine\Software\RosaSoft\WinTalker Voice, but I cannot find that string in this version.
If you scroll a littlebit down under the ActNum string, you will see that WinTalker Voice calls the RegQueryValue from advapi32, and then closes the key by calling RegCloseKey.
Then, follows the routine for comparing the ActNum value with the regular activation number, and there are two jumps.
Jump condition under the Cmp EAX,1 it need to be noped, and jump under the Test Eax,Eax line it need to be unconditional JMP instead the JE jump, and it's jump to Windows API function DisableThreadLibraryCalls.
But, in this version I cannot find these jumps, DisableThread exists, but program never jumps on that call.

Can anyone help us to find these jumps, or "ActNum" string?
The whole WTV installation is here:
WinTalker Voice without a hasp protection:
https://onedrive.live.com/download?resid=E3A14B5DBABB760A!1344&authkey=!ANO8X_CiI-Jllos&ithint=file%2czip

user1
09-23-2015, 12:50 PM
Is 2.0 dll enveloped or not?
In this version dll is enveloped with .AKS envelope. You need usbtrace log and hl & srm dump. Don't think other option possible.

appcrox
09-28-2015, 02:54 PM
Not if you uncheck the USB Hardlock checkbox during the installation. If you uncheck it, the Activation Version will be installed instead the USB Hardlock version.

Best regards.