[to be completed] How to clone a HASP HL dongle
As first, let me underline that cloning your own dongle is not illegal. It can be useful in case you lose it, you damage it or someone steals it.
Find some of the tools here
Toro Monitor
Plug the dongle in and use the software. As first you need to use a tool called toro monitor. Toro will tell you what is the password to use with the next tool. If Toro is compatible with your dongle, it will also tell you what information the dongle is exchanging with the software (i.e. DTable ETable).
Now run a tool called h5dmp.exe. You need to pass the password just found with toro. Run it as follows:
h5dmp.exe 0x2745 0x3F89
If everything is ok h5dmp will generate two files in the same folder hasp.dmp hhl_mem.dmp.
UnidumptoReg or Unidmp2reg
Now open the tool called Unidumptoreg. This tool will translate the dump took with h5dmp to a registry file. Once the tool opens and once you have installed the missing dll into system32 folder (win xp) open the hasp.dmp file and save it using the "chingchguk based hasp hl" option.
Multikey
Now you need something that takes in input the reg file and makes Windows think that instead that is a dongle. The tool that does this is called multikey. The english version of the manual is located here
Open your reg file, modify the key path, add the dword and save and exit. Double click on the reg file. Run multikey. Open your software.
Create DTable/ETable
Easy? Not really. In my case the clone did not work. I should add the Questions and Answers logged by toro but toro did not properly interpreted them.
From this link I understood that:
7. And now the most important thing. Hasp HL uses enveloping technology with 128-bit AES symmetric encryption engine on key.
In TORO log we will find pairs. They can be found in the pairs window too.
Instructions can look like this one:
(I remove part of code)
So what we will do with it? We will do Q/A table. This is Questions and Answers table in reg file. I added it on the end of file.
Data or question of IN – write in Qtable
Response or answer or OUT – write in Atable
Data shoul be write in pairs like these: 4284 ... ... ... 84ADA4 should be write: 42,84, ... ... ... 84,AD,A4
The end of regfile shoul look:
Your program can use only one Q/A or too many. You must add them all. Then you can save your regfile.
However I could see only HaspDecrypt and not HaspHLDecrypt. So, from this link I understood that there was a problem with the monitoring (logger) software
ur security is not hasphl 2.16 so toro monitor is not show table.
Monitor and log using other tools
Finally, from this link I understood what alternatives to use:
Toro 4 is here
The work is still on progress.. I havent tried yet this last attempt with toro 4
Find some of the tools here
Toro Monitor
Plug the dongle in and use the software. As first you need to use a tool called toro monitor. Toro will tell you what is the password to use with the next tool. If Toro is compatible with your dongle, it will also tell you what information the dongle is exchanging with the software (i.e. DTable ETable).
Pw(HEX) 27453F89
h5dmp.exeNow run a tool called h5dmp.exe. You need to pass the password just found with toro. Run it as follows:
h5dmp.exe 0x2745 0x3F89
If everything is ok h5dmp will generate two files in the same folder hasp.dmp hhl_mem.dmp.
UnidumptoReg or Unidmp2reg
Now open the tool called Unidumptoreg. This tool will translate the dump took with h5dmp to a registry file. Once the tool opens and once you have installed the missing dll into system32 folder (win xp) open the hasp.dmp file and save it using the "chingchguk based hasp hl" option.
Multikey
Now you need something that takes in input the reg file and makes Windows think that instead that is a dongle. The tool that does this is called multikey. The english version of the manual is located here
Open your reg file, modify the key path, add the dword and save and exit. Double click on the reg file. Run multikey. Open your software.
Create DTable/ETable
Easy? Not really. In my case the clone did not work. I should add the Questions and Answers logged by toro but toro did not properly interpreted them.
From this link I understood that:
7. And now the most important thing. Hasp HL uses enveloping technology with 128-bit AES symmetric encryption engine on key.
In TORO log we will find pairs. They can be found in the pairs window too.
Instructions can look like this one:
Code:
HaspHL In:> Hasphl_decrypt, Length=32
Data:
4284 ... ... ... 84ADA4 – It is a question for hash key
HaspHL Out:> Hasphl_decrypt Status=0 (0x0)
Response:
8222 ... ... ... 84ADA4 – And the key respond – it is his answer
So what we will do with it? We will do Q/A table. This is Questions and Answers table in reg file. I added it on the end of file.
Data or question of IN – write in Qtable
Response or answer or OUT – write in Atable
Data shoul be write in pairs like these: 4284 ... ... ... 84ADA4 should be write: 42,84, ... ... ... 84,AD,A4
The end of regfile shoul look:
Code:
... regfile
"QTable"=hex:\
42,84,... 84,AD,A4,\
"ATable"=hex:\
82,22,C2 ... 84,AD,A4,\
However I could see only HaspDecrypt and not HaspHLDecrypt. So, from this link I understood that there was a problem with the monitoring (logger) software
as your example, this will give you an idea: Hasp In:> HaspDecrypt Length=8 Data: 0x 0x xx xx xx xx xx xx Hasp Out:> HaspDecrypt Status=0 (0x0) Response: 0x 0x xx xx xx xx xx xx So it doesnt say HaspHL as is your example, dont know if it matters |
Monitor and log using other tools
Finally, from this link I understood what alternatives to use:
02-09-2011, 11:15 AM
use hasploger
TORO
02-10-2011, 04:06 AM
use latest version of my public logger , TORO.HASP.LOGGER.v4.0.public , its for usb hasp4/hl/srm and hardlock, just google it , you will find
Toro 4 is here
The work is still on progress.. I havent tried yet this last attempt with toro 4