PDA

View Full Version : SafeNet ""pulsing protection"

yotoxionomai
07-03-2009, 11:06 AM
Hello guys,
I just made a dump from a certain key, but when i load it into Multikey or SentEmul2007, the status bar in the program says:
Key:"12345" Status: Not Pulsing.
Is this some kind of new protection?
The program in question will open but it wont save any information.
Any ideas?
Git
07-03-2009, 01:02 PM
What is the program?. Can you show the Reg file if there is no personal info in it?

Git
yotoxionomai
07-03-2009, 02:05 PM
Sure, here you go:

REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\MultiK ey\Dumps\XXXX0000]
"Name"="none"
"Copyright"="none"
"Created"="2009"
"DongleType"=dword:00000003
"Type"=dword:00000000
"sntMemory"=hex:\
59,0F,XX,XX,00,00,00,00,08,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,FA,51,00,00,FA,51,00,00,\
FA,51,00,00,FB,51,00,00,01,00,0C,1F,D9,07,01,00,\
0C,1F,D9,07,01,00,0C,1F,D9,07,01,00,0C,1F,D9,07,\
00,00,05,0E,41,09,00,00,00,00,00,00,00,00,00,00,\
00,00,01,00,0C,1F,D9,07,00,00,0C,1F,D9,07,00,00,\
0C,1F,D9,07,00,00,05,0E,41,09,01,00,0C,1F,D9,07,\
00,00,05,0E,41,09,00,00,00,00,00,00,00,00,00,00
Git
07-04-2009, 09:12 AM
Whenever I see a WP value of 0x0008 I know something has gone wrong. I'm guessing that when you solved the dump, it complained about inactive algorithms, or that it could not solve, yes?

Look at the celltypes also. It is telling you that cell 0x08 is a Algorithm query cell, but if you look at the data for those cells (called the Descriptor) in sntMemory it shows 0x00000000. The data should be between 0x80000000 and 0xBFFFFFFF for a Simple algorithm, and between 0xC0000000 and 0xFFFFFFFF for an Enhanced algorithm. If the most significant bit is 0 instead of 1, then the algorithm is inactive.

Ideally, you would dump the dongle again. Use PVA V3.3 dumper and, if you are certain it is a Superpro and not an Ultrapro, then turn on WP bruteforcing. If you don't have access to the dongle, then somebody needs to look at the dump to see if anything can be done with it. You'll have to make your own judgement about who has the knowledge and who you feel you can trust.

Git
yotoxionomai
07-04-2009, 08:28 PM
Whenever I see a WP value of 0x0008 I know something has gone wrong. I'm guessing that when you solver the dump, it complained about inactive algorithms, or that it could not solve, yes?

Exactly,thats what happend, i used SentEmul2007, and it said at the end something like "solved with....08".
Thanks Git, i will try with PVA 3.3 instead.