View Full Version : Help reqd: Unpack for HASP HL 2.17
03-24-2011, 05:27 PM
I have a program & the original HASP dongle. Since my dog decided to use it as a chew toy, its been reduced to a fragile state. It still works, but I wanted to get a replacement just in case. The vendor requires me to pay for a *new* license to get it. Obviously, I dont want to do that. I have checked the emulated key option, but I figured it would be better to have the HASP check removed altogether. I believe the first step is to unpack the code.
I ran protectorID and it gives me this,
Scanning -> C:\Program Files\****\***.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 6938624 (069E000h) Byte(s)
[File Heuristics] -> Flag : 00000000000000000100000000100011 (0x00004023)
[!] DONGLE - HASP HL Envelope detected !
[CompilerDetect] -> Visual C++ 6.0
- Scan Took : 0.349 Second(s)
PEID does not seem to detect any packing (Its says 'Nothing found *')
I have tried to go through previous posts with respect to HASP-HL unpack, but could not get any ideas on how to proceed.
I have done some successful hacks on un-encrypted code, but the HASP-HL envelope seems to be outside my reach. I would appreciate any pointers.
03-25-2011, 02:17 PM
I think that is easier to emulate dongle.
1.Download HaspLoger or Toro loger for hasp
3.Dump your dongle with h5dmp.exe
4.Make reg file with unidump2reg.exe for multikey18.*.*
5.Add reg in registry and install multikey
If you hawe problem to find this tools contact me I will send to you (all tools you can find heare)
If you still wish to unpack i hawe tut for hasp hl but like i write it is easier emulate
03-25-2011, 05:26 PM
Thanks for the response.
Since I had hit a dead-end with unpacking, I was investigating the emulation angle today.
I ran the 'Toro Dongle Monitor' and figured out the PW1/PW2. Also, I captured the log of transactions (log.txt) between the dongle and the protected program. Then I ran h5dmp and managed to generate the 'hasp.dmp' & 'hhl_mem.dmp' files.
Now some questions,
1. Shouldn't 'hhl_mem.dmp' file be much bigger than 'hasp.dmp'? In my case both of are approx the same size (~1K). Looks like I can't make any attachments in the forum yet. So let me know, I will cut'n'paste them in the body of the post if you want to see it.
2. In the steps you have mentioned, isn't there a need to construct and add a 'Question' & 'Answer' table into the registry to be used by the emulator?
3. I see in my transaction log file (log.txt) that both HASPHL encrypt & decrypt calls are being made. The info I have seen in internet seem to suggest that none of the free emulators contain the 'full' implementation of all the required calls and consequently fail when used. Is this correct?
I apologize if these questions have been answered before. Its just that I havent been able to find a coherent response to these questions in my googling today.
In any case, I would appreciate if you could send me/point me to the latest version of tools you have mentioned along with any tutorials on unpacking.
03-25-2011, 06:54 PM
1. I think that your files ok - now use unidump to reg to convert dump to reg file
2.Maeby your hasp hl dongle dont hawe q/a pairs if hawe then you must add them
3.Your question nr. 3 hawe answer to seccond question-your dongle hawe q/a pairs. It depends how much q/a pairs hawe dongle. maeby djust few or like one mine - 1500 q/a pairs. You must figurit out on wich way dongle change answers- my dongle change q/a ewery time when starts software , my seccond dongle change q/a pairs on button click or menu load so you must run your software many times to read with loger and toro monitor all q/a pairs.
Heare are tools and ohne tut with extracting all q/a table froam dumped section.
03-26-2011, 08:35 AM
Thx for the link and the info.
My primary system is Vista 64-bit, could you point me to where I can find Multi-key for x64?
03-27-2011, 04:57 PM
Yes on the forum. Heare you hawe all for emulating Hasp HL. If you cannot find mk 64 contact me i will help you
03-28-2011, 07:31 AM
EMULATION WORKS! :-)
Many thanks to narciszu & G3n1us for the wonderful help!
Just for my own knowledge, could someone point me to any material on unpacking the HASP-HL envelope? (if it is at all possible)
03-29-2011, 05:07 PM
Search for Hasp HL 2.16 unpackigin , Hasp SRM unpackigin .... if you cannot find contact me i will send you (i think that you hawe this on tuts4you or arteam forum)
03-31-2011, 05:20 AM
I have sent you a PM.
vBulletin® v3.6.4, Copyright ©2000-2013, Jelsoft Enterprises Ltd.