Reverse Engineering Team
Unregistered, You must accept the Forum Rules below to be able to use some forum functions.

Read forum rules below...

1. All posts must be written in English.
2. Don't spam/abuse any other member via E-mail or Private Messages.
3. Have phun!

For breaking above rules you may be warned/banned appropriately!

UltraPro Secure Tunnel

View previous topic View next topic Go down

UltraPro Secure Tunnel

Post by psgama on Wed Aug 30, 2017 8:22 pm

Hi Guys,

I have had some experience with Sentinel SuperPro, but not much Ultrapro,

I Have dump file that partially works but times out a lot, and must be re-scan every few seconds from software. I believe AES encryption is being used and I need to create Query Response table but have never done it before.

Please see my Monitor File,

How do I build the query response lines into the REG file. The Instruction on testprotect is not so easy to understand.


Code:

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x01
Out> Status: 00
CellMem: 0xD0F7

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x00
Out> Status: 00
CellMem: 0x608E

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x05
Out> Status: 00
CellMem: 0x0000

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x07
Out> Status: 00
CellMem: 0x0251

In> Fn00: KEY_FN_GET_KEYINFO
Out> Status: 00
KeyInfo: 0x0002 0xB203 

In> Fn05: KEY_FN_GET_LICENSE
Out> Status: 00
Parameter1: 0x7C07, Parameter2: 0x0400

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001

In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x8C00, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0xE500, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x2100, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x5B00, Parameter2: 0x00
In> Fn11: KEY_FN_READ
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001, CellType: 0x1

In> Fn11: KEY_FN_READ
CellNo: 0xF1
Out> Status: 00
CellMem: 0x0101, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0xF0 --> DesignID
Out> Status: 00
CellMem: 0x7D3A, CellType: 0x0

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x01
Out> Status: 00
CellMem: 0xD0F7

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x00
Out> Status: 00
CellMem: 0x608E

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x05
Out> Status: 00
CellMem: 0x0000

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x07
Out> Status: 00
CellMem: 0x0251

In> Fn00: KEY_FN_GET_KEYINFO
Out> Status: 00
KeyInfo: 0x0002 0xB203 

In> Fn05: KEY_FN_GET_LICENSE
Out> Status: 00
Parameter1: 0x7C07, Parameter2: 0x0400

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001

In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x8C00, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0xE500, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x2100, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x5B00, Parameter2: 0x00
In> Fn11: KEY_FN_READ
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001, CellType: 0x1

In> Fn11: KEY_FN_READ
CellNo: 0xF1
Out> Status: 00
CellMem: 0x0101, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0xF0 --> DesignID
Out> Status: 00
CellMem: 0x7D3A, CellType: 0x0

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x01
Out> Status: 00
CellMem: 0xD0F7

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x00
Out> Status: 00
CellMem: 0x608E

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x05
Out> Status: 00
CellMem: 0x0000

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x07
Out> Status: 00
CellMem: 0x0251

In> Fn00: KEY_FN_GET_KEYINFO
Out> Status: 00
KeyInfo: 0x0002 0xB203 

In> Fn05: KEY_FN_GET_LICENSE
Out> Status: 00
Parameter1: 0x7C07, Parameter2: 0x0400

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001

In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x8C00, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0xE500, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x2100, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x5B00, Parameter2: 0x00
In> Fn20: Unknown
20 00 98 67 A0 C1 
Out> Status: 00
7E 00 7D F3 06 08 

In> Fn11: KEY_FN_READ
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001, CellType: 0x1

In> Fn11: KEY_FN_READ
CellNo: 0xF1
Out> Status: 00
CellMem: 0x0101, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0xF0 --> DesignID
Out> Status: 00
CellMem: 0x7D3A, CellType: 0x0

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x01
Out> Status: 00
CellMem: 0xD0F7

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x00
Out> Status: 00
CellMem: 0x608E

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x05
Out> Status: 00
CellMem: 0x0000

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x07
Out> Status: 00
CellMem: 0x0251

In> Fn00: KEY_FN_GET_KEYINFO
Out> Status: 00
KeyInfo: 0x0002 0xB203 

In> Fn05: KEY_FN_GET_LICENSE
Out> Status: 00
Parameter1: 0x7C07, Parameter2: 0x0400

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001

In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x8C00, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0xE500, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x2100, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x5B00, Parameter2: 0x00
In> Fn11: KEY_FN_READ
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001, CellType: 0x1

In> Fn11: KEY_FN_READ
CellNo: 0xF1
Out> Status: 00
CellMem: 0x0101, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0xF0 --> DesignID
Out> Status: 00
CellMem: 0x7D3A, CellType: 0x0

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x01
Out> Status: 00
CellMem: 0xD0F7

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x00
Out> Status: 00
CellMem: 0x608E

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x05
Out> Status: 00
CellMem: 0x0000

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x07
Out> Status: 00
CellMem: 0x0251

In> Fn00: KEY_FN_GET_KEYINFO
Out> Status: 00
KeyInfo: 0x0002 0xB203 

In> Fn05: KEY_FN_GET_LICENSE
Out> Status: 00
Parameter1: 0x7C07, Parameter2: 0x0400

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001

In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x8C00, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0xE500, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x2100, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x5B00, Parameter2: 0x00
In> Fn20: Unknown
20 00 60 59 B0 B9 
Out> Status: 00
06 00 8D 2C 85 C8 

In> Fn11: KEY_FN_READ
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001, CellType: 0x1

In> Fn11: KEY_FN_READ
CellNo: 0xF1
Out> Status: 00
CellMem: 0x0101, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0xF0 --> DesignID
Out> Status: 00
CellMem: 0x7D3A, CellType: 0x0

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x01
Out> Status: 00
CellMem: 0xD0F7

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x00
Out> Status: 00
CellMem: 0x608E

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x05
Out> Status: 00
CellMem: 0x0000

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x07
Out> Status: 00
CellMem: 0x0251

In> Fn00: KEY_FN_GET_KEYINFO
Out> Status: 00
KeyInfo: 0x0002 0xB203 

In> Fn05: KEY_FN_GET_LICENSE
Out> Status: 00
Parameter1: 0x7C07, Parameter2: 0x0400

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001

In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x8C00, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0xE500, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x2100, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x5B00, Parameter2: 0x00
In> Fn20: Unknown
20 00 5C C1 50 C9 
Out> Status: 00
EC 00 4A D4 86 48 

In> Fn11: KEY_FN_READ
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001, CellType: 0x1

In> Fn11: KEY_FN_READ
CellNo: 0xF1
Out> Status: 00
CellMem: 0x0101, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0xF0 --> DesignID
Out> Status: 00
CellMem: 0x7D3A, CellType: 0x0

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x01
Out> Status: 00
CellMem: 0xD0F7

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x00
Out> Status: 00
CellMem: 0x608E

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x05
Out> Status: 00
CellMem: 0x0000

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x07
Out> Status: 00
CellMem: 0x0251

In> Fn00: KEY_FN_GET_KEYINFO
Out> Status: 00
KeyInfo: 0x0002 0xB203 

In> Fn05: KEY_FN_GET_LICENSE
Out> Status: 00
Parameter1: 0x7C07, Parameter2: 0x0400

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001

In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x8C00, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0xE500, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x2100, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x5B00, Parameter2: 0x00
In> Fn11: KEY_FN_READ
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001, CellType: 0x1

In> Fn11: KEY_FN_READ
CellNo: 0xF1
Out> Status: 00
CellMem: 0x0101, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0xF0 --> DesignID
Out> Status: 00
CellMem: 0x7D3A, CellType: 0x0

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x01
Out> Status: 00
CellMem: 0xD0F7

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x00
Out> Status: 00
CellMem: 0x608E

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x05
Out> Status: 00
CellMem: 0x0000

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x07
Out> Status: 00
CellMem: 0x0251

In> Fn00: KEY_FN_GET_KEYINFO
Out> Status: 00
KeyInfo: 0x0002 0xB203 

In> Fn05: KEY_FN_GET_LICENSE
Out> Status: 00
Parameter1: 0x7C07, Parameter2: 0x0400

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001

In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x8C00, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0xE500, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x2100, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x5B00, Parameter2: 0x00
In> Fn20: Unknown
20 00 32 10 3E DD 
Out> Status: 00
C6 00 C1 27 F6 E8 

In> Fn11: KEY_FN_READ
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001, CellType: 0x1

In> Fn11: KEY_FN_READ
CellNo: 0xF1
Out> Status: 00
CellMem: 0x0101, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0xF0 --> DesignID
Out> Status: 00
CellMem: 0x7D3A, CellType: 0x0

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x01
Out> Status: 00
CellMem: 0xD0F7

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x00
Out> Status: 00
CellMem: 0x608E

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x05
Out> Status: 00
CellMem: 0x0000

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x07
Out> Status: 00
CellMem: 0x0251

In> Fn00: KEY_FN_GET_KEYINFO
Out> Status: 00
KeyInfo: 0x0002 0xB203 

In> Fn05: KEY_FN_GET_LICENSE
Out> Status: 00
Parameter1: 0x7C07, Parameter2: 0x0400

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001

In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x8C00, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0xE500, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x2100, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x5B00, Parameter2: 0x00
In> Fn20: Unknown
20 00 2E 78 E6 5F 
Out> Status: 00
15 00 07 E4 32 F8 

In> Fn11: KEY_FN_READ
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001, CellType: 0x1

In> Fn11: KEY_FN_READ
CellNo: 0xF1
Out> Status: 00
CellMem: 0x0101, CellType: 0x0

In> Fn11: KEY_FN_READ
CellNo: 0xF0 --> DesignID
Out> Status: 00
CellMem: 0x7D3A, CellType: 0x0

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x01
Out> Status: 00
CellMem: 0xD0F7

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x00
Out> Status: 00
CellMem: 0x608E

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x05
Out> Status: 00
CellMem: 0x0000

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0x07
Out> Status: 00
CellMem: 0x0251

In> Fn00: KEY_FN_GET_KEYINFO
Out> Status: 00
KeyInfo: 0x0002 0xB203 

In> Fn05: KEY_FN_GET_LICENSE
Out> Status: 00
Parameter1: 0x7C07, Parameter2: 0x0400

In> Fn10: KEY_FN_READ_FOR_FIND_UNIT
CellNo: 0xF7
Out> Status: 00
CellMem: 0x0001

In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x8C00, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0xE500, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x2100, Parameter2: 0x00
In> Fn2F: KEY_FN_SET_AES
Parameter1: 0x5B00, Parameter2: 0x00
In> Fn20: Unknown
20 00 FA 01 6E C5 
Out> Status: 00
4A 00 4B 61 76 28


Last edited by psgama on Sat Sep 02, 2017 2:35 pm; edited 1 time in total

psgama

Posts : 16
Points : 30
Reputation : 3
Join date : 2014-03-09

Back to top Go down

Re: UltraPro Secure Tunnel

Post by ovis25 on Thu Aug 31, 2017 1:04 am

use my leak exetools code with UltraPro source code, thanks to so called friends, maybe it is of any use to your investigation.

ovis25

Posts : 462
Points : 769
Reputation : 115
Join date : 2014-06-07
Location : reversing.ro

http://reversing.ro

Back to top Go down

Re: UltraPro Secure Tunnel

Post by BfoX on Thu Aug 31, 2017 2:07 am

q/r table you need extract from the software, imho. not from log

BfoX

Posts : 964
Points : 1261
Reputation : 228
Join date : 2012-04-18
Location : Earth

Back to top Go down

Re: UltraPro Secure Tunnel

Post by Sponsored content


Sponsored content


Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum