PDA

View Full Version : Changing Licenses


melin
07-14-2009, 11:49 AM
Hi guys,

I use Multikey to emulate Superpro dongle, and it runs very well.
The software use algorithm to know the licence users (16), and we want to change.

How I can do?

I change the cell 0F to 2001 without any ressult, the system says 16 users active.

I think that the program use an activation code, and the result is the users licenced.

Any suggestion will be wellcome.

Best Regards,
Melin

------------------------------------

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\MultiK ey\Dumps\????0000]
"DongleType"=dword:00000003
"Copyright"="Git"
"Created"="Mon Jul 13 20:00:21.609 2009"
"Name"="???? Sentinel SuperPro Dump"
"Type"=dword:00000000
"CellType"=hex:\
01,01,03,03,03,03,03,03,03,03,03,03,01,01,01,01,\
01,01,01,01,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"sntMemory"=hex:\
9D,06,??,??,00,00,00,00,00,00,00,00,D9,72,00,00,\
31,C6,F6,E9,EA,EC,3A,F1,9A,42,01,00,0E,20,01,10,\
00,30,1C,31,00,00,0A,0A,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00


Changed ID costumer and serial key

<OTLICENSE>
<CUSTOMERID>O0??</CUSTOMERID>
<CUSTOMERTEXT>Xxxxxxxx</CUSTOMERTEXT>
<TYPE>DONGLE</TYPE>
<KEY1>?????</KEY1>
<KEY2>?????</KEY2>
<EXPIRY>NOLIMIT</EXPIRY>
<BASICUSERS>14</BASICUSERS>
<ADMINUSERS>1</ADMINUSERS>
<DEVELUSERS>0</DEVELUSERS>
<ACTIVATIONCODE>O0??-A2AA924B-96721940-929F0FF0-B7927093-F0F39E20-C75719E6-0B07</ACTIVATIONCODE>
</OTLICENSE>

BfoX
07-14-2009, 01:09 PM
a simple way is use an activation code and query-response

melin
07-15-2009, 10:56 AM
Ok, I try to emulate the original with sentinel development program.

I know the key have 2 algorithm:

Cell 08
Cell 0A,

The dump with dumper program and read
on cell 08: E9F6 C631
on Cell 0A: F13A ECEA
and put on cell 06: 72D9
Are they the original values?


Melin

BfoX
07-15-2009, 12:53 PM
Are they the original values?


on cell 09: 0xE9F6
on cell 08: 0xC631

on Cell 0B: 0xF13A
on Cell 0A: 0xECEA
and put on cell 06: 0x72D9

melin
07-15-2009, 04:14 PM
Thanks BfoX,

Now I have 2 activation code, the first activate 2 users, the second 15, I want activate 20

CUSTOMERID O072
CUSTOMERTEXT xxxxxx
PRODUCTID PRO
PRODUCTTEXT producción
UNIQUE 0
TYPE DONGLE
KEY1 1429A
KEY2 1429A
EXPIRY NOLIMIT
USERS 2
ACTIVATIONCODE O072-B582713A-A9908D8D-CA500D75-2D6020D1-321807B8-D4BEEF74-3508

and

CUSTOMERID O072
CUSTOMERTEXT xxxxxx
PRODUCTID PRO
PRODUCTTEXT producción
UNIQUE 0
TYPE DONGLE
KEY1 1429A
KEY2 1429A
EXPIRY NOLIMIT
USERS 15
ACTIVATIONCODE O072-4E4F9D01-ACA53882-735D018C-2D8CDB2C-0658035B-6D0F0975-A310



What I do now?

Thanks, Melin

melin
07-21-2009, 12:09 PM
Hi Guys,

I found that the aplication only detect the superpro, and checking every 5 minuts.
And found using w32dissassembled the overwrite passwords.

With Multikey runs perfectly (thanks Git)

The number of licensed users was on windows registry, and charged at start of windows.


USERS 2
ACTIVATIONCODE O072-B582713A-A9908D8D-CA500D75-2D6020D1-321807B8-D4BEEF74-3508

USERS 15
ACTIVATIONCODE O072-4E4F9D01-ACA53882-735D018C-2D8CDB2C-0658035B-6D0F0975-A310



Any suggestion to detect how was encripted the users numbers?

Thanks,
Melin

BfoX
07-21-2009, 12:29 PM
you can upload a target software?

melin
07-21-2009, 01:41 PM
The program is a ERP solution for little factorys.

Use sql server on windows 2003 server.

I have a local machine where is running, and once time on start read the registry key. Later only chek the presence of dongle.

every time to change the cell of dongle, I need to restart the system.

How can I saw what program is reading the registry?

Thanks

Melin

foffa
07-21-2009, 10:15 PM
every time to change the cell of dongle, I need to restart the system.
Melin

No you dont need to restart system > you need to restart emulator not system
devcon restart root\multikey

you can use sentmon to see how software do with dongle

and you will get useful information for sure IF you were not using it

:)

melin
07-22-2009, 03:45 AM
Thanks Foffa,

I found the exe program that reads the dongle, and license from registry.

Only once time the exe create in memory the number of users, and check on dongle, later if I change the vaules and restart emulator no have a response; only check the presence of dongle not values.

Now I'm try to find how to read the memory keys.

Suggestions?

Melin