Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > Reverse Code Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #11  
Old 01-20-2015, 03:46 AM
gigi10 gigi10 is offline
Member
 
Join Date: Nov 2009
Posts: 16
Default

@Git:because I'm idiot

this is TORO SENTINEL MONITOR log file:http://ul.to/6b0la437
Dongled SW probably check dongle only on start, because after this logged communication no more data logged.

How change *.reg file with this information?

Thanks

gigi10
Reply With Quote
  #12  
Old 01-20-2015, 11:16 AM
kjms kjms is offline
Senior Member
 
Join Date: Aug 2009
Posts: 337
Default

Use below reg Multikey 18.X.X
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\MultiKey\Dumps\00000263]
"DongleType"=dword:00000003
"Type"=dword:00000000
"CellType"=hex:\
    01,01,03,03,03,01,03,01,\
    00,00,00,00,00,00,00,00,\
    00,00,03,03,00,00,00,00,\
    00,00,00,00,00,00,00,00,\
    00,00,00,00,00,00,00,00,\
    00,00,00,00,00,00,00,00,\
    00,00,00,00,00,00,00,00,\
    00,00,00,00,00,00,00,00
"sntMemory"=hex:\
    03,01,63,02,A8,CD,B2,16,AA,3F,00,00,00,00,00,00,\
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    00,00,00,00,22,22,88,88,00,00,00,00,00,00,00,00,\
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
Reply With Quote
  #13  
Old 01-20-2015, 01:04 PM
gigi10 gigi10 is offline
Member
 
Join Date: Nov 2009
Posts: 16
Default

Thanks, working correctly.

Can you tell me why you:
1. change values in CellType from 3 to 1?
2. place the values from TORO log to position, which you select? How select right position?

Thanks to all...

gigi10
Reply With Quote
  #14  
Old 02-12-2020, 09:49 AM
ravi_scolomin ravi_scolomin is offline
Junior Member
 
Join Date: Nov 2008
Posts: 4
Default

After dumping the sentinel I changed dump address to 000067F6

and changed 03 to 01 in the first row
still it is not working

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\MultiK ey\Dumps\000067F6]
"DongleType"=dword:00000003
"Copyright"="None"
"Created"="Fri Jan 31 19:28:36.249 2020"
"Name"="67F6 Sentinel SuperPro Dump"
"Type"=dword:00000000
"CellType"=hex:\
01,01,03,03,03,01,03,01,\
00,00,01,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,01,00,00,00,00,\
00,00,00,00,00,00,00,00
"sntMemory"=hex:\
27,0B,F6,67,00,00,00,00,00,00,00,00,00,00,00,00,\
6B,6E,00,00,00,00,6D,6E,73,2C,69,61,70,6F,34,32,\
A5,24,33,30,39,37,47,66,07,21,68,66,7B,78,45,28,\
16,7F,F2,55,37,33,30,38,69,39,7E,31,9D,4C,61,73,\
6F,73,90,76,03,32,66,00,38,39,71,64,70,61,F4,6A,\
62,6A,6D,6C,78,3B,76,7A,4B,30,BE,3D,89,21,70,6F,\
34,32,7D,38,00,00,00,00,61,38,2C,30,69,66,75,78,\
A0,77,DE,55,72,6A,E2,FA,16,66,E0,28,00,6F,8C,11
Reply With Quote
  #15  
Old 02-12-2020, 12:28 PM
BfoX BfoX is offline
Senior Member
 
Join Date: Aug 2007
Posts: 2,234
Send a message via ICQ to BfoX Send a message via MSN to BfoX Send a message via Yahoo to BfoX
Default

Quote:
Originally Posted by ravi_scolomin View Post
After dumping the sentinel I changed dump address to 000067F6

and changed 03 to 01 in the first row
still it is not working

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\MultiK ey\Dumps\000067F6]
"DongleType"=dword:00000003
"Copyright"="None"
"Created"="Fri Jan 31 19:28:36.249 2020"
"Name"="67F6 Sentinel SuperPro Dump"
"Type"=dword:00000000
"CellType"=hex:\
01,01,03,03,03,01,03,01,\
00,00,01,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,01,00,00,00,00,\
00,00,00,00,00,00,00,00
"sntMemory"=hex:\
27,0B,F6,67,00,00,00,00,00,00,00,00,00,00,00,00,\
6B,6E,00,00,00,00,6D,6E,73,2C,69,61,70,6F,34,32,\
A5,24,33,30,39,37,47,66,07,21,68,66,7B,78,45,28,\
16,7F,F2,55,37,33,30,38,69,39,7E,31,9D,4C,61,73,\
6F,73,90,76,03,32,66,00,38,39,71,64,70,61,F4,6A,\
62,6A,6D,6C,78,3B,76,7A,4B,30,BE,3D,89,21,70,6F,\
34,32,7D,38,00,00,00,00,61,38,2C,30,69,66,75,78,\
A0,77,DE,55,72,6A,E2,FA,16,66,E0,28,00,6F,8C,11
may be put here the original dump also?
__________________
... Either you work well or you work much ....
Reply With Quote
  #16  
Old 02-13-2020, 12:52 AM
hasp hasp is offline
Member
 
Join Date: May 2011
Posts: 7
Default

@ravi_scolomin try this with multikey 18.2.4 / 32bit version / 64bit need license key.
Quote:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\MultiK ey\Dumps\000067F6]
"Type"=dword:00000001
"DongleType"=dword:00000003
"Option"=hex:02,00,03,80,7F,00,00,00
"CellType"=hex:\
01,01,03,03,03,01,03,01,\
00,00,01,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,01,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,01,00,00,\
00,00,00,00,00,00,00,00,\
03,03,01,01,01,00,00,00
"sntMemory"=hex:\
27,0B,F6,67,00,00,00,00,00,00,00,00,29,6E,11,00,\
6B,6E,00,00,00,00,6D,6E,73,2C,69,61,70,6F,34,32,\
A5,24,33,30,39,37,47,66,07,21,68,66,7B,78,45,28,\
16,7F,F2,55,37,33,30,38,69,39,7E,31,9D,4C,61,73,\
6F,73,90,76,03,32,66,00,38,39,71,64,70,61,F4,6A,\
63,6A,6B,6C,78,3B,77,7A,C3,3E,76,66,C9,21,70,6F,\
34,32,F0,3A,33,30,30,27,61,38,2D,30,69,66,F5,78,\
A0,77,DE,55,72,6A,67,76,3F,69,7D,79,E5,61,42,69,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
09,26,3D,EE,80,90,DC,17,00,00,00,00,00,00,00,00
Reply With Quote
  #17  
Old 02-14-2020, 06:06 PM
user1 user1 is offline
Senior Member
 
Join Date: Jun 2011
Posts: 288
Smile signed

https://www51.zippyshare.com/v/eDnorONf/file.html

copy in same Multikey 64 bit overwrite this 3 files

install without test mode

maybe you need set back that 03 --> 01 from previous since this old version.

good luck,.
__________________
dongle backup
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.