Hasp 4 Emulation

Hi Friends,

TL;DR - Yes I added this after I realised my post getting a bit long . I need help in Hasp 4 soft to find Hasp functions to read.

I hope to be able to ask some knowledge on software which I had request on in 2016 and uses Hasp 4 (yes I know , I am slow learner ). But I still like figure things out. 
So short story, back then I was kindly assisted by someone, to make it run under Ovis's excellent work of Mkbus emulation. Which then worked for my needs.
However, it was (at the time required) not fully activated with this, and there is also some additional features which can be activated in software, which is my purpose for coming back to wards it, some keygenning/serial phishing funzies. Unfortunately however, original helper packed solution with VMProtect to avoid my prying eyes but also prevents me from adding more features and phish me a serial for additional things.

Now, I've been on forum long enough to know things, that dongle knowledge in general is frowned upon sharing, but I figure Hasp 4 and this soft is pretty old, ok to ask to learn a bit.

So here is current situation, running soft with Mkbus and old keys in reg. for the curious the dongle pw's are 7EB5 , 1BA8.
Dongle login functions, found at 006987EC, no problem sofar.



then going through, I know it detects the Mkbus key, because we get to Check Codelock Type, which it gets as 3? ok... and port C9 => 201, so it picks it up as usb. Great.



breakpointing all 10 places where it passes the pw's to (what I believe is the dongle API call) to function => 006975BC, I can get where hasp call 1 and 5 are being made, and with some off code , call 70, which according to the docs is Set Hasp Time.
And then the wheels come off, because of obfuscation (I think), I cannot work out in the other BP's what service calls are being made

Why i need this you ask, well.... I know first real call to dongle after type is to check a value, possibly vendor Id to key, to correctly identify mkbus key, and would have to do some patching to make it pass. But cannot see where its doing Service calls 3 , 60/61, 75,77, what I do see is a call to service 2 , which I dont think exists.

And quelle surprise, leads to the obvious:



Less obvious is the : Socket Error # 11001 - Host not found error right after it. Because why? did it not find the host to get dongle type from?

So I seek help in understanding, could someone highlight to me where it is doing the Read Bytes/Words/.. from dongle to check a value (i am hoping is hard coded vendor ID i can patch), which would hopefully read some units from the dongle, and get me in to play with the more fun stuff, like trying to figure out how to add the 4 other kinds of units (currently I get 2), and play with the activate feature in the menu. All which cannot be done, without it reading from dongle.

Some closing questions,
a) is it okay to ask this kind of help for old hasp 4 stuff ? I am genuinly trying to learn. I mean I like a quick fix like anyone else, but learning is nicer.
b) is it okay to share the previous reg keys if someone asks? they dont contain personals info, as I never had the real dongle to begin with, they would never sell to me for my research.

many thanks for your time if you read to here.