Reverse Engineering Team
Unregistered, You must accept the Forum Rules below to be able to use some forum functions.

Read forum rules below...

1. All posts must be written in English.
2. Don't spam/abuse any other member via E-mail or Private Messages.
3. Have phun!

For breaking above rules you may be warned/banned appropriately!

License transfer on dongles

View previous topic View next topic Go down

License transfer on dongles

Post by psgama on Sun Mar 09, 2014 6:17 pm

Hi guys. Having some issues using Multikey with some Sentinel superpro dongles. I've gone and messed up an actual hardware dongle in some way now.
Alright, so here's the story.
I created a a dongle REG file with SSUMD 1.1 and manually edited the Data table where the licence was stored. In the registry it's 0048 Column 01 Data FF
I then did a license transfer to the physical dongle. It gave me an error message. "Error adding license to license key. Access denied"
Low and behold when I refreshed the page 255 licences were on the dongle.
Now when I edit back to 00 and try to transfer back I get the same error and the licenses stay put on the hardware key.
Also, I've tried moving the licenses from hardware key to hardware key, and I get the same error.
Any suggestions?
Iv'e tried making all cell types 00 in my reg file as well to get the keys to transfer off the hardware dongle with no avail.

Code:

Windows Registry Editor Version 5.00



[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\MultiKey\Dumps\0000368C1]

"License"=hex:e2,3a,a0,0d,c3,16,12,36,aa,f9,44,0b,e6,14,cf,d1

"Name"=""

"CopyLeft"="(c)Elite"

"DongleType"=dword:00000003

"Type"=dword:00000001

"Option"=hex:02,00,03,b2,ff,00,00,00

"CellType"=hex:01,01,03,03,03,01,03,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

  00,00,03,03,01,01,01,00,00,00

"sntMemory"=hex:5c,05,8c,36,00,00,00,00,00,00,00,00,00,00,51,00,39,31,35,36,30,\

 
37,37,31,20,20,d6,4d,61,68,42,46,30,31,20,37,53,44,30,38,20,30,20,20,20,20,\

 
29,7b,41,52,20,53,20,20,20,20,20,20,20,20,20,20,29,7b,01,00,00,00,00,00,00,\

 
00,ff,00,00,00,00,00,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,00,\

 
20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,00,20,20,\

 
20,20,20,20,20,20,20,20,20,20,20,20,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,00,20,20,20,20,\

 
20,20,20,20,20,20,20,20,20,20,00,00,00,00,00,00,00,00,00,00,00,00,d6,4d,57,\

 
68,46,03,4f,52,00,00,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,00,\

 
00,00,d6,4d,58,68,46,04,4f,52,00,00,20,20,20,20,20,20,20,20,20,20,20,20,20,\

 
20,20,20,00,00,00,00,d6,4d,62,68,46,01,4f,52,29,7b,42,46,30,31,20,37,53,44,\

 
30,38,20,30,20,20,20,20,00,00,01,00,fa,4f,1f,a0,4c,02,49,4f,29,7b,42,46,30,\

 
31,20,37,53,44,30,38,20,30,20,20,20,20,01,00,00,00,18,53,31,b7,4c,01,49,4f,\

 
29,7b,42,46,30,31,20,37,53,44,30,38,20,30,20,20,20,20,00,00,01,00,18,53,64,\

 
b7,4c,02,49,4f,29,7b,42,46,30,31,20,37,53,44,30,38,20,30,20,20,20,20,01,00,\

 
00,00,18,53,87,b7,4c,01,49,4f,29,7b,42,46,30,31,20,37,53,44,30,38,20,30,20,\

 
20,20,20,00,00,01,00,00,00,00,00,20,00,20,20,00,00,20,20,20,20,20,20,20,20,\

 
20,20,20,20,20,20,20,20,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

  00,00,00,00,00,1d,42,00,00,00,00,00,00,00,00,00


Toro USB log cleared log after loading key, this only shows the attempted license transfer. There is 257 licenses on the key, I attempted to move 255

Code:

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0x01

Out> Status: 00

CellMem: 0x368C



In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0x00

Out> Status: 00

CellMem: 0x055C



In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0x05

Out> Status: 00

CellMem: 0x0000



In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0x07

Out> Status: 00

CellMem: 0x0051



In> Fn00: KEY_FN_GET_KEYINFO

Out> Status: 00

KeyInfo: 0x0002 0xB203 



In> Fn05: KEY_FN_GET_LICENSE

Out> Status: 00

Parameter1: 0x7C07, Parameter2: 0x0400



In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0xF7

Out> Status: 00

CellMem: 0x0000



In> Fn2F: KEY_FN_SET_AES

Parameter1: 0x4200, Parameter2: 0x00

In> Fn2F: KEY_FN_SET_AES

Parameter1: 0x00, Parameter2: 0x00

In> Fn2F: KEY_FN_SET_AES

Parameter1: 0xEF00, Parameter2: 0x00

In> Fn2F: KEY_FN_SET_AES

Parameter1: 0xBE00, Parameter2: 0x00

In> Fn21: KEY_FN_SWO

Parameter1: 0xE00D, Parameter2: 0x9F3C

Out> Status: 00

Parameter1: 0x57D9, Parameter2: 0x9F3C



In> Fn11: KEY_FN_READ

CellNo: 0xF7

Out> Status: 00

CellMem: 0x0000, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x08

Out> Status: 00

CellMem: 0x3139, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x09

Out> Status: 00

CellMem: 0x3635, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x0A

Out> Status: 00

CellMem: 0x3730, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x0B

Out> Status: 00

CellMem: 0x3137, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x0C

Out> Status: 00

CellMem: 0x2020, CellType: 0x0



This is the Reg file of the multikey key I attempted to move the licenses to
Code:

Windows Registry Editor Version 5.00



[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\MultiKey\Dumps\0000368C2]

"License"=hex:e2,3a,a0,0d,c3,16,12,36,aa,f9,44,0b,e6,14,cf,d1

"Name"=""

"CopyLeft"="(c)Elite"

"DongleType"=dword:00000003

"Type"=dword:00000001

"Option"=hex:02,00,03,b2,ff,00,00,00

"CellType"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

  00,00,00,00,00,00,00,00,00,00

"sntMemory"=hex:5b,05,8c,36,00,00,00,00,00,00,00,00,00,00,51,00,39,31,35,36,30,\

 
37,38,31,20,20,d6,4d,61,68,42,46,30,31,20,37,53,44,30,38,20,30,20,20,20,20,\

 
29,7b,41,52,20,53,20,20,20,20,20,20,20,20,20,20,29,7b,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,00,\

 
20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,00,20,20,\

 
20,20,20,20,20,20,20,20,20,20,20,20,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,00,20,20,20,20,\

 
20,20,20,20,20,20,20,20,20,20,00,00,00,00,00,00,00,00,00,00,00,00,d6,4d,57,\

 
68,46,03,4f,52,00,00,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,00,\

 
00,00,d6,4d,58,68,46,04,4f,52,00,00,20,20,20,20,20,20,20,20,20,20,20,20,20,\

 
20,20,20,00,00,00,00,d6,4d,62,68,46,01,4f,52,29,7b,42,46,30,31,20,37,53,44,\

 
30,38,20,30,20,20,20,20,00,00,01,00,fa,4f,1f,a0,4c,02,49,4f,29,7b,42,46,30,\

 
31,20,37,53,44,30,38,20,30,20,20,20,20,01,00,00,00,18,53,31,b7,4c,01,49,4f,\

 
29,7b,42,46,30,31,20,37,53,44,30,38,20,30,20,20,20,20,00,00,01,00,18,53,64,\

 
b7,4c,02,49,4f,29,7b,42,46,30,31,20,37,53,44,30,38,20,30,20,20,20,20,01,00,\

 
00,00,18,53,87,b7,4c,01,49,4f,29,7b,42,46,30,31,20,37,53,44,30,38,20,30,20,\

 
20,20,20,00,00,01,00,00,00,00,00,20,00,20,20,00,00,20,20,20,20,20,20,20,20,\

 
20,20,20,20,20,20,20,20,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

 
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

  00,00,00,00,00,1d,42,00,00,00,00,00,00,00,00,00



Anyone have any suggestions?

psgama

Posts : 15
Points : 27
Reputation : 3
Join date : 2014-03-09

Back to top Go down

Re: License transfer on dongles

Post by psgama on Sun Mar 09, 2014 8:40 pm

It also fails on a hardware key to hardware key transfer. 

Key with indicated 257 Licenses on it. Trying to Move 255
Code:
In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x01
Out> Status: 00
CellMem: 0x368C

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x00
Out> Status: 00
CellMem: 0x055C

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x05
Out> Status: 00
CellMem: 0x0000

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x07
Out> Status: 00
CellMem: 0x0051

In> Fn00: KEY_FN_GET_KEYINFO
Out> Status: 00
KeyInfo: 0x0002 0xB203 

In> Fn05: KEY_FN_GET_LICENSE
Out> Status: 00
Parameter1: 0x7C07, Parameter2: 0x0400

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0000

In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x4200, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x00, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0xEF00, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0xBE00, Parameter2: 0x00
In> Fn21: KEY_FN_SWO
Parameter1: 0x25BB, Parameter2: 0x2F79
Out> Status: 00
Parameter1: 0x5E47, Parameter2: 0x2F79

In> Fn11: KEY_FN_READ
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0000, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0x08
Out> Status: 00
CellMem: 0x3139, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0x09
Out> Status: 00
CellMem: 0x3635, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0x0A
Out> Status: 00
CellMem: 0x3730, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0x0B
Out> Status: 00
CellMem: 0x3137, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0x0C
Out> Status: 00
CellMem: 0x2020, CellType: 0x0





Key with 0 licenses on it
Code:
In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x01

Out> Status: 00

CellMem: 0x368C



In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0x00

Out> Status: 00

CellMem: 0x09BC



In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0x05

Out> Status: 00

CellMem: 0x0000



In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0x07

Out> Status: 00

CellMem: 0x0051



In> Fn00: KEY_FN_GET_KEYINFO

Out> Status: 00

KeyInfo: 0x0002 0xB203 



In> Fn05: KEY_FN_GET_LICENSE

Out> Status: 00

Parameter1: 0x7C07, Parameter2: 0x0400



In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0xF7

Out> Status: 00

CellMem: 0x0000



In> Fn2F: KEY_FN_SET_AES

Parameter1: 0x4200, Parameter2: 0x00

In> Fn2F: KEY_FN_SET_AES

Parameter1: 0x00, Parameter2: 0x00

In> Fn2F: KEY_FN_SET_AES

Parameter1: 0xEF00, Parameter2: 0x00

In> Fn2F: KEY_FN_SET_AES

Parameter1: 0xBE00, Parameter2: 0x00

In> Fn11: KEY_FN_READ

CellNo: 0xF7

Out> Status: 00

CellMem: 0x0000, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x08

Out> Status: 00

CellMem: 0x3139, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x09

Out> Status: 00

CellMem: 0x3635, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x0A

Out> Status: 00

CellMem: 0x3833, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x0B

Out> Status: 00

CellMem: 0x3135, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x0C

Out> Status: 00

CellMem: 0x2020, CellType: 0x0



In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0x01

Out> Status: 00

CellMem: 0x368C



In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0x00

Out> Status: 00

CellMem: 0x09BC



In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0x05

Out> Status: 00

CellMem: 0x0000



In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0x07

Out> Status: 00

CellMem: 0x0051



In> Fn00: KEY_FN_GET_KEYINFO

Out> Status: 00

KeyInfo: 0x0002 0xB203 



In> Fn05: KEY_FN_GET_LICENSE

Out> Status: 00

Parameter1: 0x7C07, Parameter2: 0x0400



In> Fn10: KEY_FN_READ_FOR_FIND_UNIT

CellNo: 0xF7

Out> Status: 00

CellMem: 0x0000



In> Fn2F: KEY_FN_SET_AES

Parameter1: 0x4200, Parameter2: 0x00

In> Fn2F: KEY_FN_SET_AES

Parameter1: 0x00, Parameter2: 0x00

In> Fn2F: KEY_FN_SET_AES

Parameter1: 0xEF00, Parameter2: 0x00

In> Fn2F: KEY_FN_SET_AES

Parameter1: 0xBE00, Parameter2: 0x00

In> Fn21: KEY_FN_SWO

Parameter1: 0x175F, Parameter2: 0x9543

Out> Status: 00

Parameter1: 0x827E, Parameter2: 0x9543



In> Fn11: KEY_FN_READ

CellNo: 0xF7

Out> Status: 00

CellMem: 0x0000, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x08

Out> Status: 00

CellMem: 0x3139, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x09

Out> Status: 00

CellMem: 0x3635, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x0A

Out> Status: 00

CellMem: 0x3833, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x0B

Out> Status: 00

CellMem: 0x3135, CellType: 0x0



In> Fn11: KEY_FN_READ

CellNo: 0x0C

Out> Status: 00

CellMem: 0x2020, CellType: 0x0



In> Fn14: KEY_FN_WRITE_0

CellNo: 0x0D, Data: 0x4DD6, WritePassword: 0xBC8

Out> Status: 01


Last edited by BfoX on Mon Mar 10, 2014 2:52 am; edited 2 times in total (Reason for editing : separation of log files)

psgama

Posts : 15
Points : 27
Reputation : 3
Join date : 2014-03-09

Back to top Go down

Re: License transfer on dongles

Post by BfoX on Mon Mar 10, 2014 2:55 am

you need add WritePassword: 0xBC8 to reg-file.

BfoX

Posts : 929
Points : 1218
Reputation : 229
Join date : 2012-04-18
Location : Earth

Back to top Go down

Re: License transfer on dongles

Post by psgama on Mon Mar 10, 2014 9:48 am

Thanks, I actually took a break from it last night and came back to it and saw that myself. So, my .Reg emulated dongles are both working now. But I did manage to bugger up the hardware dongles, as they have the password counter function and I didn't realize it. Lol. These dongles aren't needed anymore anyway, but has anyone figured out whether a password counter reset is possible once the counter has been expired?

psgama

Posts : 15
Points : 27
Reputation : 3
Join date : 2014-03-09

Back to top Go down

Re: License transfer on dongles

Post by BfoX on Mon Mar 10, 2014 10:32 am

possible by reprogram on the developer side.

BfoX

Posts : 929
Points : 1218
Reputation : 229
Join date : 2012-04-18
Location : Earth

Back to top Go down

Re: License transfer on dongles

Post by psgama on Tue Mar 25, 2014 9:37 pm

Thank you Bfox.

psgama

Posts : 15
Points : 27
Reputation : 3
Join date : 2014-03-09

Back to top Go down

Re: License transfer on dongles

Post by Sponsored content


Sponsored content


Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum