Emulating Hasp HL max

[mum_96]

Originally Posted by foffa

I Have Seen Full solutions

HERE IS TABLE BASED EMULATOR WITH THE SAMPLE REG FILE
suitable with what fejkus said

Toro, foffa attached the one vusbbus emulator for hasphl, and tyrus says this things (HASP HL have 2 AES funcz - AES Encode & AES Decode [0x013F/0x0140] but its emulator supports only one function), what comments about it?

[fejkus]

Originally Posted by TORO

you must extract pair tables from .protect section of envelope, envelope use these tables to make randome query check.
there are 5 tables at max, each contain 256 pair, then add those pairs with pairs from log file and then construct hasp hl emulator, it will work

can you tell us, what method can we use to extract pair tables from .protect section?

and any example?

Thank you TORO.

[foffa]

Originally Posted by mum_96

Toro, foffa attached the one vusbbus emulator for hasphl, and tyrus says this things (HASP HL have 2 AES funcz - AES Encode & AES Decode [0x013F/0x0140] but its emulator supports only one function), what comments about it?

there is tiny small trick in the emulator which enables the mixing of reg files

[justine]

@foffa

so does this mean that we can use the pairs from toro's monitor directly in QTable/ATable
for example
first pair from toro's monitor = aaaaaaaaaa,bbbbbbbbbb
second = ccccccccc,ddddddddd

QTable:\
bb,bb,bb,bb,bb,bb,bb,\
dd,dd,dd,dd,dd,dd,dd,

ATable:\
aa,aa,aa,aa,aa,aa,aa,\
cc,cc,cc,cc,cc,cc,cc,

i mean is this enought
or we need to extract from protect section also

regards

[foffa]

Originally Posted by TORO

you must extract pair tables from .protect section of envelope, envelope use these tables to make randome query check.

toro was clear in that
you need that when envelope use random check

right toro ??

[souze_villy]

I think tyrus mean this is missing on reg files?
REGEDIT4
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\NEWHAS P\Services\Emulator\HASP\Dump\57FD245C]
"Name"=""
"Copyright"=""
"Created"=""
"Type"=dword:00000000
"Memory"=dword:00000000
"SN"=dword:00000000
"Data"=hex:AA,BB,CC....
"Option"=hex:AA,BB,CC....
"SecTable"=hex:AA,BB,CC....
"QTable"=hex:AA,BB,CC....
"ATable"=hex:AA,BB,CC....
"NetMemory"=hex:AA,BB,CC....
"ColumnMask"=dword:00000000
"CryptInitVect"=dword:00000000
"TimeShift"=hex:00,00,00,00,00,00,00,00
"HaspTimeMemory"=hex:00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 ,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF

[ngoksun]

Originally Posted by souze_villy

I think tyrus mean this is missing on reg files?

Tyrus was real HASPHL expert, don't doubt whether he clear know what's the simply usage. He just mean the publiced emulator only support one of AES Encode/Decode [0x013F/0x0140] function so it's only work with part of HASPHL protected software.

[souze_villy]

Originally Posted by ngoksun

Tyrus was real HASPHL expert, don't doubt whether he clear know what's the simply usage. He just mean the publiced emulator only support one of AES Encode/Decode [0x013F/0x0140] function so it's only work with part of HASPHL protected software.

humm!
its mean our discussion about the hasphl for (Chingachkug) emulator is tottally wronge, Its mean chingachkug emulator is tottaly fake.

[ngoksun]

Originally Posted by souze_villy

humm!
its mean our discussion about the hasphl for (Chingachkug) emulator is tottally wronge, Its mean chingachkug emulator is tottaly fake.

No. Chingachkug HASP open source emulator is totally perfect solution for almost all dongles. But the publiced HASPHL emulator just can solve less than 50% of your requirement. It's not mean it's wrong, just mean it's not full.

[souze_villy]

Originally Posted by ngoksun

No. Chingachkug HASP open source emulator is totally perfect solution for almost all dongles. But the publiced HASPHL emulator just can solve less than 50% of your requirement. It's not mean it's wrong, just mean it's not full.

Ok, Tyrus can you tell us details about the hasphl dongle (AES) Functions?