sentinel question

[pxl]

hello

i receive from api sproRead() in toro:
In:> Read Address=11 (0xB)
Out:> Read Address=11 (0xB) -> Status=0x3
Data=255 (0xFF)

I found on woodman-board:
/* status codes */
..............
#define RB_UNIT_NOT_FOUND 3
..............

I checked RBSTATUS.H in SDK, but can anyone explain to me what this means and what is the exact problem?
Any problems with sproQuery?

Thanks for help.

cheers
pxl

PS: I can send target and RBSTATUS.H if requested.

[Git]

"SP_UNIT_NOT_FOUND
Unable to find the desired hardware key. Please verify if the key
has been attached properly. Make sure you are sending the
correct parameters."

Very odd. Sounds like toro may have an incorrect return code there, or more likely you are using an old emulator not compatible with the newer sentinel drivers. Have you tired sproeval2.exe ?

Maybe you should look at the Vusb type emulators?

Git

[pxl]

I don't have the dng.

I'm trying to patch the exe file. I already patched sproFindFirstUnit().

I work with Toro while patching the exe. Now only sproRead() and sproquery() is missing.

I don't really know what is meant by: Data=255 (0xFF)

any other ideas?

[Git]

> I don't have the dng.

If you don't have the dump, somebody here may have it. What is the app and the devID (second parameter to FindFirstUnit) ?. Depending on how it is implemented, you may well find it very difficult to patch round sproQuery().

I presume Data=255 (0xFF) is the contents of cell 0x0B, that is what sproRead is supposed to give you.

Git

[pxl]

I don't need the app, I'm just interested in its protection sheme.

0xE457.

I think there is a problem with sproRead().

Here is the output of Toro's logger:


In:> Initialize
Out:> Initialize

In:> FindFirstUnit DeveloperId=58455 (0xE457)
Out:> FindFirstUnit DeveloperId=58455 (0xE457) -> Status=0x3

In:> Read Address=0 (0x0)
Out:> Read Address=0 (0x0) -> Status=0x3
Data=255 (0xFF)

In:> Read Address=48 (0x30)
Out:> Read Address=48 (0x30) -> Status=0x3
Data=255 (0xFF)

In:> Read Address=49 (0x31)
Out:> Read Address=49 (0x31) -> Status=0x3
Data=255 (0xFF)

In:> Read Address=21 (0x15)
Out:> Read Address=21 (0x15) -> Status=0x3
Data=255 (0xFF)

In:> Read Address=18 (0x12)
Out:> Read Address=18 (0x12) -> Status=0x3
Data=255 (0xFF)

In:> Read Address=19 (0x13)
Out:> Read Address=19 (0x13) -> Status=0x3
Data=255 (0xFF)

In:> Read Address=20 (0x14)
Out:> Read Address=20 (0x14) -> Status=0x3
Data=255 (0xFF)

In:> Read Address=34 (0x22)
Out:> Read Address=34 (0x22) -> Status=0x3
Data=255 (0xFF)

In:> Read Address=35 (0x23)
Out:> Read Address=35 (0x23) -> Status=0x3
Data=255 (0xFF)

In:> Read Address=48 (0x30)
Out:> Read Address=48 (0x30) -> Status=0x3
Data=255 (0xFF)

In:> Read Address=16 (0x10)
Out:> Read Address=16 (0x10) -> Status=0x3
Data=255 (0xFF)

[Git]

So are you using an emulator or a real dongle?. If an emulator, which one and what version?. If you have neither an emulator nor a dongle, then the monitor is reporting exactly what it should - no dongle found. WHich version of toro monitor are you using?

Git

[pxl]

So are you using an emulator or a real dongle?. If an emulator, which one and what version?. If you have neither an emulator nor a dongle, then the monitor is reporting exactly what it should - no dongle found. WHich version of toro monitor are you using?

Git

I don't have an emul or a real dongle :p

I'm using Dongle Monitor for SSPro/UltraPro version 2.01 beta

support up to sentinel driver v7.3.2
---------------
I don't think Status=0x3 is a problem, more the Data=255 (0xFF)
It is supposed to be Data=0 (0x0) if I fill the cells correctly.
Therefore I never come to sproQuery().

What do you think?

greetz
pxl

[Git]

If you fill the cells of what??. You don't have an emulator so you don't have any cells to fill. Response from Toro monitor is absolutely correct - you have no dongle or emulator so it correctly replies with status=3 and data=FF.

You need to setup an emulator. You can use any, but Toro's emulator works well with his monitor. You know the DevID which is all you need to get a basic emulator running. Once it responds you can start filling in the rest - cell values, WP, etc.

Please listen - I (and others here) have been where you are and I am telling you that you have a 99.9% probability that you are wasting your time. Setup an emulator and it comes down to maybe a 30% chance.

Git

[pxl]

maybe you've got me wrong. I'm using ollydbg to patch the exe. I don't want to create an emul or will this help me to patch the exe?

Patch for FindFirstUnit() is correct, otherwise it wouldn't go to sproread().

Usually I fill cells with a certain fixed vaule, but somehow I do smth wrong with this app. Still experimiting on this one...I've been successfull with three other sspro apps.

cheers

[Git]

I know. The emul will make it much much easier to debug the app because you will not need to keep patching functions one after another because they will work. In fact, by the time you have finished you will maybe have enough info to make a full emul rather than a crack (always better).

Git

[pxl]

Do you have a dump of 0xE457 ?

I checked the app, but I haven't found any cmp of the cell-value :confused: It will be difficult to find the correct values for the emul.

Btw.: How do you find the dng serial number for cell0?

Thanks.

Best regards
pxl

[Git]

DNG?. I would keep DNG and SentEmul well out of it if I were you as you cannot easily change emulator cell values. Use vusbbus emul (search here for Multi). Then to change a cell value, you edit the Reg file, run it to add it to registry and restart the emulator service or send it ioctrl message. Alternatively, set anything as the WP in cell 4 and use SproEval2.exe to change cells on the fly by issuing sproWrite.

I would start with anything for the serial, chances are it will work. If it doesn't work, you can see where it fails in your debugger. Use something easily recognisable like 0xABCD

Git

[pxl]

It's weird. I'm in sproRead():
I found RBP_WORD data );

0059E6A5 > 8B7C24 14 MOV EDI,DWORD PTR SS:[ESP+14] ; DATA


I tried to put some value in EDI, but it somehow it doesn't read it. TORO shows still the same output:

In:> Read Address=21 (0x15)
Out:> Read Address=21 (0x15) -> Status=0x3
Data=255 (0xFF)


I also found RB_WORD address,

0059E6C6 . 66:8B4424 10 MOV AX,WORD PTR SS:[ESP+10] ; Address


Can anyone give me a hint why TORO shows still the same output?

Danks!

BR
pxl