Emulating Hasp HL Pro (purple)

[Freeware]

I have this exact model (purple).http://www.aladdin.com/hasp/srm-models/hasp-hl-pro.aspx

Lets clear some things out:

1. This is NOT HASP Hardlock;
2. It doesn't have any MODAD;
3. Passwords are like this eg. 1FB4-3DC9 so the dump file looks like: 1FB43DC9.dmp
3. The dump file has random size with HASPHL2007 (maybe its not a good dump).
4. The hasp driver used is: Aladdin Hasp HL Driver v5.20.130.1
5. Windows XP SP2 detects my dongle as: HASP HL v2.16

Now The real thing:

1. With h5dmp.exe v1.40 public edition (nodongle.biz) it generated hasp.dmp (719 bytes) and hhl_mem (128 bytes).
2. Then with UniDumpToReg.exe by sataron! ver. 1.1b5 PB I create 1FB43DC9.reg for vUSB Hasp HL (not Hasp4 nor HardLock) and I add the reg. file to Registry.
3. After that (with my dongle unplugged) I install vUSBbus.inf, vUSBbus.cat and vUSBbus.sys (Chingachguk & Denger2k (HL mod + )
v0.15.1.4). Windows finds my Aladdin dongle and installs it without problem.
4. Now if I run my application it gives me the: 1031 envelope error.

As I read every topic on this forum and finally get the point I need to add the QTable and ATable.

5. I uninstall vusb for now.
6. I install USB Filters, plug in my dongle and start Toro Aladdin Monitor.
7. I start my application and after 1 second, in the Toro Monitor windows I see the HASP HL pairs and down in the log file I have a lot of

HaspHL In:> Hasphl_decrypt, Length=16
Data:
BA20531A207014EC38C390AF99D608ED
HaspHL Out:> Hasphl_decrypt Status=0 (0x0)
Response:
4C28C8E5B87602EE49140C0BB46E3E37

I need to specify that I have only the Hasphl_decrypt function and the lenght varies Length=16, Length=32 and Length=48. It generates exactly 59 pairs.
But everytime I close and start agian my application it generates completly other 59 pairs.

So here I am with the questions:

1. If I run my application lets say 1000 times so I will have 59pairs x 1000 = 59000 pairs and put this info in the reg file, will my application work ?
2. Is there a limit with this randomness of pairs ? Are they really different questions and answers EVERYTIME ?
3. If I only have Hasphl_decrypt .. do I need QEncTable and AEncTable or if my application does not need these 2 tables ?
4. Beside application cracking, is there a solution for this somewhere with or without money ?


Thank you all from this forum for having the patience explaining to us newbies how to make things work. This is THE best forum ever regarding Hasp Emulation. God bless you people.
PS. even if the tools found here does not work with my dongle, I want to say that cEnginEEr is one hell of a genius. We hope to see HASLHL2008 asap ;)

[Git]

> 3. The dump file has random size with HASPHL2007

That is because HASPHL2007 does not support Hasp HL correctly. The HL stands for Hardlock. If you had searched the forum before asking you would know that from the many many times it has been told. See why people get annoyed now?

Every question you ask in this message is answered in the forum. Get off your arse and search.

SEARCH FIRST. ASK AS A LAST RESORT.

Git

[souze_villy]

I have this exact model (purple).http://www.aladdin.com/hasp/srm-models/hasp-hl-pro.aspx

Lets clear some things out:

1. This is NOT HASP Hardlock;
2. It doesn't have any MODAD;
3. Passwords are like this eg. 1FB4-3DC9 so the dump file looks like: 1FB43DC9.dmp
3. The dump file has random size with HASPHL2007 (maybe its not a good dump).
4. The hasp driver used is: Aladdin Hasp HL Driver v5.20.130.1
5. Windows XP SP2 detects my dongle as: HASP HL v2.16

Now The real thing:

1. With h5dmp.exe v1.40 public edition (nodongle.biz) it generated hasp.dmp (719 bytes) and hhl_mem (128 bytes).
2. Then with UniDumpToReg.exe by sataron! ver. 1.1b5 PB I create 1FB43DC9.reg for vUSB Hasp HL (not Hasp4 nor HardLock) and I add the reg. file to Registry.
3. After that (with my dongle unplugged) I install vUSBbus.inf, vUSBbus.cat and vUSBbus.sys (Chingachguk & Denger2k (HL mod + )
v0.15.1.4). Windows finds my Aladdin dongle and installs it without problem.
4. Now if I run my application it gives me the: 1031 envelope error.

As I read every topic on this forum and finally get the point I need to add the QTable and ATable.

5. I uninstall vusb for now.
6. I install USB Filters, plug in my dongle and start Toro Aladdin Monitor.
7. I start my application and after 1 second, in the Toro Monitor windows I see the HASP HL pairs and down in the log file I have a lot of

HaspHL In:> Hasphl_decrypt, Length=16
Data:
BA20531A207014EC38C390AF99D608ED
HaspHL Out:> Hasphl_decrypt Status=0 (0x0)
Response:
4C28C8E5B87602EE49140C0BB46E3E37

I need to specify that I have only the Hasphl_decrypt function and the lenght varies Length=16, Length=32 and Length=48. It generates exactly 59 pairs.
But everytime I close and start agian my application it generates completly other 59 pairs.

So here I am with the questions:

1. If I run my application lets say 1000 times so I will have 59pairs x 1000 = 59000 pairs and put this info in the reg file, will my application work ?
2. Is there a limit with this randomness of pairs ? Are they really different questions and answers EVERYTIME ?
3. If I only have Hasphl_decrypt .. do I need QEncTable and AEncTable or if my application does not need these 2 tables ?
4. Beside application cracking, is there a solution for this somewhere with or without money ?


Thank you all from this forum for having the patience explaining to us newbies how to make things work. This is THE best forum ever regarding Hasp Emulation. God bless you people.
PS. even if the tools found here does not work with my dongle, I want to say that cEnginEEr is one hell of a genius. We hope to see HASLHL2008 asap ;)
Visit this page may be this page your help (http://www.reteam.org/board/showthread.php?t=644&highlight=fejkus)

[Freeware]

But I did read everything on this forum really now. Maybe the answers for my questions where too diferent from what I expected.

A lot of users from this forum don't know english enought to make themselves clear. I'm really into it, I saw others problems and solutions. Direct answers for my questions may help others in the future. Exact answers.

People mess up the posts, in some threads people argue, in others people make requests for emulators or dng files etc.
Extreamly confusing. The answers I ask for ARE NOT URGENT, take the time to create a clear answer.

Hope noone is upset. I'll real again the thread about hl max but there is no conclusion to make form there.

Thanks again.

[unforgiven]

There is 3 way to bypassing Envelope:
1:Full emulation mode (Its Very Private)
2:Cracking way (Unpacking Enveloped file (reaching to OEP and Fixing Redirected API and Dumping File)).
3:In HL pro and MAX with Random Pairs and Envelope You Can Extract Master Pair Table (Its used for Generating Random Pair) you must at least Use Favorite Debugger and data ripper for Extracting Data by Hand and Some times its take 2-3 H.

[Freeware]

10x d00d. So the answer is that there is a very private emulator that really works for my solution.

Well at least I know now.

Really really thank you unforgiven.
Solution 2 and 3 are out of discussion for me. Solution 3 need experience with it and its clear I can't do it. Same with solution 2.

I only hope somehow I can get help with the full emulator. Nice...

Some questions are still unanswered :)

[souze_villy]

There is 3 way to bypassing Envelope:
1:Full emulation mode (Its Very Private)
2:Cracking way (Unpacking Enveloped file (reaching to OEP and Fixing Redirected API and Dumping File)).
3:In HL pro and MAX with Random Pairs and Envelope You Can Extract Master Pair Table (Its used for Generating Random Pair) you must at least Use Favorite Debugger and data ripper for Extracting Data by Hand and Some times its take 2-3 H.
I don't look any envelop he have 2 pair to above give me 1031 error. but I have demo if hasphl software he give me 5 time this error. I tell about (bounce). I have wilcom and he is very great protected for hasphl, I make it by hand, and I make 11 envelopes and every one I no look 2 pairs to above 1031 error on it.

[unforgiven]

and I make 11 envelopes and every one I no look 2 pairs to above 1031 error on it.

11 Envelope Error?!!!
In maximum We have 5 Table......

I only hope somehow I can get help with the full emulator
Forget About it In Public Dood :D
Ask This from Sporaw Or John Smith

[souze_villy]

11 Envelope Error?!!!
In maximum We have 5 Table......


Forget About it In Public Dood :D
Ask This from Sporaw Or John Smith
hello!
wilcom software is hasphl protected and he time, and not give the error of 1031 understand, ask with toro, Only toro make the solution of it, because he use the usbfilter, I also make it, with USB based, Vusbbus is get too much to run the software because wilcom have 52 envelope protected software. However, you are not understand this because your experience is small then Other seniors. Also I tell u no body have SRM solution because no one make his logger for the SRM, and Hasploger 1.7 is not support the SRM too, even toro filter is not working with SRM dongle.

[unforgiven]

wilcom have 52 envelope protected software
Ahaaaaaaaaah
In hl pro Dongle Maximum 39 applications is enabled per key and
all 39 applications have use 5 master table for Generating random pair. I repeat again We have 5 table at Maximum.
Error 1031 is also for Envelope Error.

[Freeware]

I just love you guys ... and I'm straight ... omg

[souze_villy]

Ahaaaaaaaaah
In hl pro Dongle Maximum 39 applications is enabled per key and
all 39 applications have use 5 master table for Generating random pair. I repeat again We have 5 table at Maximum.
Error 1031 is also for Envelope Error.
39 application have use 2 master table max, I don't look still any HaspHL protected which use in the 5 master table.

[souze_villy]

39 application have use 2 master table max, I don't look still any HaspHL protected which use in the 5 master table.
Check this little 2.16 protected software he is not working without emulator and give u error 1031, and also look in he have max 2 Master Pair. Not have 5. After emulator install he working perfect. and also u run the hasploger.exe he show his Q/A in hasploger.exe.

http://rapidshare.de/files/40035526/Purrec-HaspHL_Emulator___Software.rar.html (http://rapidshare.de/files/40035526/Purrec-HaspHL_Emulator___Software.rar.html)

[unforgiven]

BAHHHHHHHAAH
Again I repeat 5 table at MAXIMUM (Its mean it can be 1-5 Table).

[souze_villy]

BAHHHHHHHAAH
Again I repeat 5 table at MAXIMUM (Its mean it can be 1-5 Table).
yes I wrote above and this is possible I have demo of bounce he have 5 maximum pairs. but I many hasphl software maked still, not look any exe or dll that give me 2 master pair to more ask Question?

However, I put here little software how much he have 1-2 or more Pair? Also explain me. Install the emulator he is working or not check and tell me.

[souze_villy]

yes I wrote above and this is possible I have demo of bounce he have 5 maximum pairs. but I many hasphl software maked still, not look any exe or dll that give me 2 master pair to more ask Question?

However, I put here little software how much he have 1-2 or more Pair? Also explain me. Install the emulator he is working or not check and tell me.
(unforgiven) I wait ur answer?

[souze_villy]

BAHHHHHHHAAH
Again I repeat 5 table at MAXIMUM (Its mean it can be 1-5 Table).
I also tell u 1 or 2 or 5 pair max I can do it, which software not give any asnwer I also can me it with (loader.exe) and (dbg) to make solution. I also make the 5 pair of max Demo Software. Check it also.:)
http://rapidshare.de/files/40035781/Bounce-HaspHL_Emulator___Software.rar.html (http://rapidshare.de/files/40035781/Bounce-HaspHL_Emulator___Software.rar.html)

[unforgiven]

You Can Do it Or You Need Help To do this?!!:D

[souze_villy]

You Can Do it Or You Need Help To do this?!!:D
what
I make the solution for (HaspHL)

[unforgiven]

Check this little 2.16 protected software he is not working without emulator and give u error 1031, and also look in he have max 2 Master Pair. Not have 5. After emulator install he working perfect. and also u run the hasploger.exe he show his Q/A in hasploger.exe.

http://rapidshare.de/files/40035526/Purrec-HaspHL_Emulator___Software.rar.html (http://rapidshare.de/files/40035526/Purrec-HaspHL_Emulator___Software.rar.html)

Hmmm
Very BAD Solution.
I have better:
Its Have 2 Table
Check this Smaller reg file :D

57

[souze_villy]

Hmmm
Very BAD Solution.
I have better:
Its Have 2 Table
Check this Smaller reg file :D

57
your log is short but memory dmp is is same, what other different? tell me

[unforgiven]

Go and ask from your senior who make that log for you :d

[justine]

question for unforgiven

what you mean when you say
"1:Full emulation mode (Its Very Private)"

2. and 3. way are very clear but what you mean when you say full emulation

can you explain this

[souze_villy]

Go and ask from your senior who make that log for you :d
I check why your reg is small and why my is big, on thinking here is clear that we need only 32 and 48 pair with log, I also use log of 16 pair so we not need it, because I already use the 16x256=4096 pairs. So your reg file is short then me. but this is not create the problem of software start and close.

[souze_villy]

question for unforgiven

what you mean when you say
"1:Full emulation mode (Its Very Private)"

2. and 3. way are very clear but what you mean when you say full emulation

can you explain this
Some time ago I ask with sataron about this that why need the dmp of memory with envelope then he tell me, my logconvertor no need the dmp memory, he have universal solution, aslo u want look this is then contact with (www.software-key.org (http://www.software-key.org)) his hasphl is universal.

[unforgiven]

question for unforgiven

what you mean when you say
"1:Full emulation mode (Its Very Private)"

2. and 3. way are very clear but what you mean when you say full emulation

can you explain this
Full emulation Have Complete Algo and only need Dongle Dump.
THere is no need Log or Extracting Pair Table.
When you use table based emu its work on which version (Enveloped) file you have extracted Pair table and ......

[Freeware]

unforgiven, now I understand and it is true.

Thanks for your help. Now I know all the answers I needed.

[souze_villy]

Full emulation Have Complete Algo and only need Dongle Dump.
THere is no need Log or Extracting Pair Table.
When you use table based emu its work on which version (Enveloped) file you have extracted Pair table and ......
Here is I clear u, which person have universal solution of hasphl, he also need log, no body I look here he make the solution with dmp only. If u have knowledge then tell me who is create the hasphl solution get with only dmp file.

If any one have universal solution same like (www.software-key.org (http://www.software-key.org)), he also get log first then he convert it to make universal solution, without log file solution making is impossible.

[TORO]

3:In HL pro and MAX with Random Pairs and Envelope You Can Extract Master Pair Table (Its used for Generating Random Pair) you must at least Use Favorite Debugger and data ripper for Extracting Data by Hand and Some times its take 2-3 H.
its not true completely, it can be done in some seconds;)

In maximum We have 5 Table......
it is true

wilcom software is hasphl protected and he time, and not give the error of 1031 understand, ask with toro, Only toro make the solution of it, because he use the usbfilter, I also make it, with USB based, Vusbbus is get too much to run the software because wilcom have 52 envelope protected software. However, you are not understand this because your experience is small then Other seniors. Also I tell u no body have SRM solution because no one make his logger for the SRM, and Hasploger 1.7 is not support the SRM too, even toro filter is not working with SRM dongle.
i think you dont know you are talking about what, i am sure you havnt done wilcom with vusbbus, problem is not relate to hasp hl envelopes (which are about 50 there). problem is how to emulate custom protection which is done by wilcom developer/protector, he is done his job very better than hasp envelope, there are about 4000 table for random query check and so many other things.

In hl pro Dongle Maximum 39 applications is enabled per key and
all 39 applications have use 5 master table for Generating random pair. I repeat again We have 5 table at Maximum.
this is not true completely, i think you are talking about license slots, but souze_... talking about count of enveloped files.

Full emulation Have Complete Algo and only need Dongle Dump.
which kind of dump you are talking about? algo of hasp hl is known for long time, as i know, its same as what implemented in haspsl, 10 round AES. problem is to find AES key based on some query/answer to dongle.

[souze_villy]

its not true completely, it can be done in some seconds;)


it is true


i think you dont know you are talking about what, i am sure you havnt done wilcom with vusbbus, problem is not relate to hasp hl envelopes (which are about 50 there). problem is how to emulate custom protection which is done by wilcom developer/protector, he is done his job very better than hasp envelope, there are about 4000 table for random query check and so many other things.


this is not true completely, i think you are talking about license slots, but souze_... talking about count of enveloped files.


which kind of dump you are talking about? algo of hasp hl is known for long time, as i know, its same as what implemented in haspsl, 10 round AES. problem is to find AES key based on some query/answer to dongle.

I done the wilcom with vusbbus.sys and he get too much time to starting with vusbbus.sys, against your usbfillter, when he start but some tools I use and I don't know when I click on open option he give me (acception error), software working is too much slow. If you want to check then I send u PM.

[souze_villy]

In maximum We have 5 Table......

It is true

I also put here 5 table maximum Master pair of demo bounce software I also agree with it.

[kiki]

its not true completely, it can be done in some seconds;)


hi TORO,
could you give us a hint, how to find and extract master pair table?, i don't i have hasphl dongle, but we can play with the sample that souze upload for us (thanks souze)

[Freeware]

please......

[souze_villy]

please......
Only Get the knowledge with toro, his knowledge is too good. But no one give the Private soluton. Only used your mind.

[kiki]

thanks to this board finally i manage to get the master pair table after long time debugging :)

[Freeware]

Oka, i think I found my master pair Q/A tables ... but now my application doesn't start normally.

The exe loads into memory and thes closes without warning or any other message, it simply closes.

Is someone familiar with this ? Was someone in this same situation and found a solution ?

What do you think kiki ?

[benito]

just use monitor to see what happend or debug your application

[Freeware]

just use monitor to see what happend or debug your application

maybe I didn't extract exactly what it needs.

I checked the log and there is no error it simply closes when loading.

I have my .protect dump file, is there someone that can help ? kiki :D

[Freeware]

so how exactly do I know where to find all the master pair tables ?

[zphdt]

i want know how to get the masker pairs ,because the Q/A table always random,
who can help me ?

[Git]

I have posted the full procedure here. Use the search.

Git

[pfonseca]

It is possible.... my Hasp HL key dosent work.
I am a week to trying to get this to work and nothing.

1 - Toro save, payrs, log and info.
2 - H5dmp.exe to make my *.dmp
3 - UniDump2Reg VusbKey HASP HL and I get my *.reg.
4 - Edit *.Reg

REGEDIT4
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\NEWHAS P\Services\Emulator\HASP\Dump\AABBCCDD]
"Name"=""
"Copyright"="Copyright (C) 2009"
"Created"="01/12/2009 00:58:18"
"SN"=dword:4xxxxxxF2
"Type"=dword:000000DA
"Memory"=dword:00000001
"SecTable"=hex:00,00,00,00,00,00,00,00
"NetMemory"=hex:03,00,0F,D0,02,00,00,00,FF,FF,FE,FF
"Option"=hex:00,01,02,4A,1F,01,01,0B,09,01,00,3B,31,00
"Data"=hex:\
FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,\
FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,\
FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,\
FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,\
FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,00,00,FF,FF,\
00,00,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,\
FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,\
57,42,50,54,02,00,00,00,10,00,00,00,00,00,D8,BE,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"ColumnMask"=dword:000000FF
"CryptInitVect"=dword:0000003F
"QTable"=hex:\
3C,B5,32,4E,AF,E7,3A,2B,0F,7A,4F,4D,76,6F,B4,CE,29 ,C0,3B,0F,53,6D,70,24,E8,38,F8,44,4C,DB,92,8A,\
"ATable"=hex:\
03,AF,E6,31,F8,9F,F6,7B,BD,AA,62,5E,57,C7,39,D7,29 ,C0,3B,0F,53,6D,70,24,E8,38,F8,44,4C,DB,92,8A,\

5 - Import to Regedit. In Regedit I can see the ATable an Qtable, and i think it is all ok.
6 - Install Vusbbus 0.15.4 and apear in the Pc system
7 - When I run the program give me 2 error's, ":1031 envelope error" and ":25 Clock as no power" and the program dont work

Someone who has had the same problem to help me?

Regards
Pfonseca

[alpertheidiot]

Git, I appreciate what you are saying, you certainly dont want anybody to ask questions without even bothering to do a search. And I can see that you repeat this wherever necessary.
Believe or not, Ive been searching on the forum but I couldnt find your procedure, as I have one of those purple (hasp hl pro) usb.

Please can you kindly let us know your procedure title at least, if not the link.

Thank you for your understanding and help.

[foffa]

for all 1 posts useres , please don make forum full of rubbish posts

that is not insult at alll , please uderstand me , and JUST do a search ,
EXTRACTING MASTER PAIRS , read read read read , try ty try try

we alll have mind did not we but ,who can make it work correctly

[SonofabiT]

@ All - I am extracting master pair(s) table from .protect section. Here is the problem : http://reteam.org/board/showpost.php?p=17199&postcount=26

The target, haspHL dump and other necesary file available in this post :
http://reteam.org/board/showpost.php?p=17062&postcount=19

Except two exe files, there are three Enveloped-dll files that identified by Toro's PELoader. I could extract all master pair(s) Table (haspHL) by dump these exe and dll when an "Error 1031:Enveloped Unknown" occured.

I had checked all exe and dll to see if there is an "Error 1031" and i conclude that all "Error 1031:Enveloped Unknown" have been overcomed.

I have used multikey emulator and start the s/w. In emulating mode, i load these 3 dll with Toro's PELoader. I found that one of the three enveloped-dll (hardwareID.dll ) could not be overcomed because when i have loaded the hardwareID.dll , i have got the following error MsgBox :
Unable to access HASPSRM Run-time Environment (H0333)

I could not get log in Toro's haspmon32 when this SRM error displayed. Even i have loaded hardwareID.dll into ollydbg and monitor it with Xyrurg&Sataron haspLoger 1.71 but i could not get the log.

Notes :
1. Driver Used : HaspHL Device Driver v 5.22.
2. Adding the very last Q-R or all Q-R when the error occured could not solve the problem. :(
3. Upgrading the haspHL driver to HaspSRM run-time driver could not solve the problem. :(
4. Contacting profesional dongle emulating service COULD SOLVE the problem. ;) Unfortunately money is the BIG problem for me. :D

I wonder the hardwareID.dll used SRM functions. Please, direct me how to solve this kind of problem and let this forum work as usual.

[Git]

I will give this some more thought, but the immediate thing that comes to mind is that you are using the Hasp HL procedure on SRM so I wouldn't expect it to work. Didn't Tyrus just post something about SRM envelope or was that only concerned with .NET exe's ?. Search on app.rar.

Git

[SonofabiT]

It seems the emulator on the app.rar is not Table base. If i am not wrong Tyrus usualy use Aeskey entrie in the .sys file. :confused:

i still try to follow the useful post here :
http://reteam.org/board/showpost.php?p=16136&postcount=11

The dongle is haspHL time ( "Type"=dword:000000DA) instead of SRM.

In the case of this hasp type, Does it mean that one of enveloped-dll is haspSRM instead of haspHL ? :confused:
Is multikey 0.18.2.0 able to emualate haspHL dongle that have SRM-enveloped ? :confused: