Log in

View Full Version : The error of different vendor ID generator same code


hanzi
August 2nd, 2005, 20:40
Why different vendor ID generator same code?
1)set break on _computeVendorCode, I get a vendor ID 0x4Fxx

2) use the CrackZ & moZfet SentinelLM tools ,i generator 4 serial number and vendor array generator,:
Vendor ID: 0x4Fxx SDK SN: 2916239xxx
4Fxx 3523654xxx
(note that 0x4FxxAnd 0x7FFF = 0xCFxx).
Vendor ID: 0xCFxx SDK SN: 2916240xxx
CFxx 3523523xxx
3)Install SentinelLM with first serial number 2916239xxx, and use Vendor ID: 0x4Fxx generator WlscGen.exe,I generator code ,but the software said the code is incorrect
4) unInstall SentinelLM and Install SentinelLM with other serial number 3523654xxx, and use Vendor ID: 4Fxx generator WlscGen.exe,I generator code ,. The code is same to Vendor ID: 0x4Fxx, and the software also said the code is incorrect
5) use Vendor ID: 0xCFxx ,serial number 2916240xxx and Vendor ID: CFxx serial number 3523523xxx,generator WlscGen.exe, always generator same code!

what is my problem? or is moZfet SentinelLM tools has a bug?

hanzi
August 3rd, 2005, 02:55
I think moZfet SentinelLM tools has a bug , it alwas generator same WlscGen.exe even with different vendor ID , is that ture?
Does moZfet release a new SentinelLM tools ?

laola
August 4th, 2005, 02:26
You may want to hide the one instance of the vendor ID you forgot to cloak

hanzi
August 4th, 2005, 03:44
Thanks laola,
but what you meaning ? could you explicate in detail?
my problem is use moZfet SentinelLM tools ,it alwas generator same WlscGen.exe even for different vendor ID .
i know the value was found being moved into edi at 41F0C0 - if you change the value of the data at esi+650h, you can generate a license which is valid for a specific vendor ID.
I want know how can i generator a vaild WlscGen.exe for a specific vendor ID?

laola
August 4th, 2005, 03:57
Throughout your message, you cloaked the vendor ID as 0x4Fxx, except for one instance where you wrote the full ID. I was just wondering if that might have adverse effects for the owner of that ID

hanzi
August 7th, 2005, 19:31
I kown the Vendor ID is 0x4Fxx, Could you help me to make a no dongle WlscGen.exe for this Vendor ID ?

zhanzixin
August 30th, 2005, 03:26
Also I think moZfet SentinelLM tools has some bugs, but we can make use of
it in other way and generate good undongled wlscgen.exe.
1 Analysis lsapiw32.dll or app and find "%s error: Illegal vendor identification" , the _computeVendorCode() function refs it.
2 Try to step into and stop at _computeVendorCode() ,we get the vendor id,0xafc for example.
3 Run slmkeys.EXE in moZfet SentinelLM tools pack,then we can get all SDK SNs for any vendor id , in a file named SLMKEYS.DAT. This will take 2 hours but you need run it only one time .
4 The No. 0xafc+1 = 2813 line in file SLMKEYS.DAT is the SDK SN we want,for my case 2253061504.
5 Install the Sentinel SDK with the SN. 2253061504
6 Copy the echoid.exe、echoid.dat、Lmlicgen.usr and lsapiw32.dll to a new empty dir such as d:\mygen
7 Generate a undongled wlscgen.exe with moZfet SentinelLM tools .
8 Now we return to wlscgen.exe in our d:\mygen ,copy offset 55C8D0 16 bytes data to the undongled wlscgen.exe's corresponding position.The offset 55C8D0 may be difference,but func _computeVendorCode() refs it at the begining so we can find it easily.
9 Now we get the good wlscgen.exe, run it in ollydbg , stop at its _computeVendorCode(),we got 0xafc when it return, which proves the wlscgen is just we want.

zhzx@slof.com
zhanzixin

hanzi
September 9th, 2005, 10:04
thanks zhanzixin,

nebular
November 24th, 2005, 06:20
Quote:
[Originally Posted by zhanzixin]
2 Try to step into and stop at _computeVendorCode() ,we get the vendor id,0xafc for example.


how to do the 2nd step? this it very important and hardfull. Does senitellm 7.2 also have the _computevendorid function?

sumon
November 24th, 2005, 21:44
Quote:
[Originally Posted by nebular]how to do the 2nd step? this it very important and hardfull. Does senitellm 7.2 also have the _computevendorid function?


Hello,
I already solved this which i asked too in another thread. Do this:
- Install Godup plugin for olly
- load your protected app in olly
- apply SLM sig (find it on the net)
- find string :"..illegal vendor..."
- you will see that string is inside _computevendorcode function
- set breakpoint on "Retn" command at the end of _computevendorcode function
- click run to start debugging, olly will break on "Retn"
- look at EAX, the content is vendor code in Hex format.

My question:
Did anyone try the step describe by zhanzixin and get correct valid license..?
I have target app which protected by SLM 7.2 but i generated lic file with undongled wlscgen from SLM 7.1 because i think it is not much different (isn't it?). The result was not valid license file.
Should i use wlscgen from SLM 7.2 also..?

TIA

nebular
November 24th, 2005, 22:30
hi sumon.i have done as you say ,but still some problems as displayed in picture,thanks,and eax display 000012B0?

nebular
November 25th, 2005, 03:01
Quote:
[Originally Posted by zhanzixin]Also I think moZfet SentinelLM tools has some bugs, but
7 Generate a undongled wlscgen.exe with moZfet SentinelLM tools .
8 Now we return to wlscgen.exe in our d:\mygen ,copy offset 55C8D0 16 bytes data to the undongled wlscgen.exe's corresponding position.The offset 55C8D0 may be difference,but func _computeVendorCode() refs it at the begining so we can find it easily.
9 Now we get the good wlscgen.exe, run it in ollydbg , stop at its _computeVendorCode(),we got 0xafc when it return, which proves the wlscgen is just we want.

zhzx@slof.com
zhanzixin


i wanta know how retn _computevendorcode()?and copy 16 bytes what to wlscgen.exe's,the vendor arayy generated by mozfet sentinellm?thanks

nebular
November 26th, 2005, 10:53
now ,i have made an undongle 7.2 version of wlscgen.exe,but the target of mine have 6 module ,how can i create the new licensetype?yes,in another way,how to setup the newlicense tye for different features?