!Crack Hasp Envelope without dongle!

Hi,
1.Situation
Now, I have the data of a TimeHasp4 dongle which is dumped by
BrainStudio HaspDumper 1.07. I think this data is brought by hasp
Service 0x3Ch. I trace the routine and I got the data which is decoded
by hasp Service 0x3Dh. I have recoded all dongle exchng data in my
packed progs. Then I made a patch routine for emulating hasp services.
I use Hasp Emul PrePro 2.07 captures some date to my system registry.
Some days ago, I lost my dongle.
Some days ago, the the upgraded prog is used the newest hasp
envelop packing progs.

2. Result.
Hasp Emul PrePro 2.07 can't hold hasp service 3ch and 3dh.
I use Hasp Emul Pro 2.33 a002, but I do not have "dmp to reg" registry.
I found after three time 3D service request for new hasp envelope, a
messagebox popup, and tell me hasp has something wrong. Before this,
I found HaspEmulPro has passed Service(02/3c/02/02) check routine. This
means haspEmulPro has hold the seeds and return codes used by Hasp
Envelope.

3. Thinking
I think I have mastered all necessary data for manual unpacking hasp envelope without the original(Lost) dongle.
But I'm not smart on tracing and unpacking.
Anybody there can help me?