Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > Reverse Code Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #11  
Old 03-26-2009, 04:39 PM
smithjsmi smithjsmi is offline
Senior Member
 
Join Date: Dec 2008
Posts: 64
Default Some Problems still have MK-17 to MK18.0.2 series

This is not full, 0.17, 0.171, 0.181 and 0.182 all is not support the rus code decrtyp 32 bytes pairs. but some imporvment in (Encrypt Pairs).

Last edited by smithjsmi : 09-26-2009 at 08:00 AM.
Reply With Quote
  #12  
Old 03-26-2009, 06:11 PM
Git Git is offline
Super Moderator
 
Join Date: Oct 2007
Location: Torino
Posts: 1,796
Default

CAn you rephrase that please, it makes no sense at all.

Git
Reply With Quote
  #13  
Old 03-26-2009, 08:10 PM
diden diden is offline
Member
 
Join Date: May 2008
Posts: 23
Default no work

Quote:
Originally Posted by Trit0n View Post
New in this Release:

+ Added
- Corrected
! Changed

0.18.0.2 (22.03.2009)
+ Guardant: added entry in the registry with entries in the key.
! in the name of a registry key using a password to read the key.


0.18.0.1 (20.03.2009) (alfa test build)
+ Emulation keys Guardant Fidus (?), Stelth I, Stelth II (old revision);
! changed the internal algorithm haspHL (encrypt / decrypt) using AES;
both not working with dumped sentinel key , but he work well with V017
thanks
Reply With Quote
  #14  
Old 03-26-2009, 10:32 PM
BfoX BfoX is offline
Senior Member
 
Join Date: Aug 2007
Posts: 2,197
Send a message via ICQ to BfoX Send a message via MSN to BfoX Send a message via Yahoo to BfoX
Default

Quote:
Originally Posted by smithjsmi View Post
This is not full, 0.17, 0.171, 0.181 and 0.182 all is not support the rus code decrtyp 32 bytes pairs. but some imporvment in (Encrypt Pairs).

RUS options is simply part of dongle memory... you can read/write it but not decrypt by emulator.
__________________
... Either you work well or you work much ....
Reply With Quote
  #15  
Old 03-27-2009, 06:23 AM
+bagigios +bagigios is offline
Junior Member
 
Join Date: Feb 2009
Posts: 2
Default

devcon.exe in "x64" dir seems wrong version (it's a 32 bit version ) and doesn't work in x64 systems.
I've tried to replace the actual release 18.0.2 x64 devcon.exe with the "old" devcon.exe (version 17.0.0 x64) but it could not retrieve drivers in multikey.sys so nothing will be installed then no emulation is made.
Reply With Quote
  #16  
Old 03-27-2009, 12:07 PM
Git Git is offline
Super Moderator
 
Join Date: Oct 2007
Location: Torino
Posts: 1,796
Default

Latest 64bit Devcon.exe is available here.

Git
Reply With Quote
  #17  
Old 03-27-2009, 12:49 PM
+bagigios +bagigios is offline
Junior Member
 
Join Date: Feb 2009
Posts: 2
Default

the devcon.exe in the "here" attached files Multikey 18.0.1 and 18.0.2 are the same and are all 32bit version.
Also in the x64 dir there's a 32bit devcon.exe

The devcon.exe found in x64 dir of old Multikey 17.0.0 is a good x64, but it does not work with the latest x64 multikey.sys (v18.0.2 and v18.0.1).

If there's another version of x64 devcon.exe that works with last multikey please attach it in this thread.

thanks
Reply With Quote
  #18  
Old 03-27-2009, 02:23 PM
smithjsmi smithjsmi is offline
Senior Member
 
Join Date: Dec 2008
Posts: 64
Default

This Type of Pairs Not support this emulator.

2008/07/15 05:54:48.109 <== HaspHL_decrypt: Pass1 = 0x608D (24717), Pass2 = 0x2C50 (11344)

2008/07/15 05:54:48.109 <== HaspHL_decrypt: Length = 0x20

2008/07/15 05:54:48.109 <== HaspHL_decrypt: Input Data =

2008/07/15 05:54:48.125

A9 46 8D F1 | EB 2E BE 65 | 29 77 0E 78 | F2 E1 62 BC [.F.....e)w.x..b.]

3D 6B E0 67 | 11 71 DF 94 | CB B2 68 15 | 8D 0C B0 76 [=k.g.q....h....v]

2008/07/15 05:54:48.171 ==> HaspHL_decrypt: Output Data =

2008/07/15 05:54:48.171

9B DA 4B 33 | 5F F1 6C 25 | DC 7D 4C 33 | 01 00 DC 7D [..K3_.l%.}L3...}]

82 7B 61 F1 | 86 84 F1 8D | E6 33 FB CC | 3A 2C 26 22 [.{a......3..:,&"]

2008/07/15 05:54:48.171 ==> HaspHL_decrypt: Status = 0x00

Last edited by smithjsmi : 09-26-2009 at 08:02 AM.
Reply With Quote
  #19  
Old 03-29-2009, 02:14 PM
Chrishel Chrishel is offline
Junior Member
 
Join Date: Oct 2008
Posts: 1
Default

I grabbed this version of devcon off the windows driver kit cd a while back. It installed all the versions of MultiKey posted here on Vista 64-bit fine (although 0.18.0.1 and 0.18.0.2 don't actually function for me).

http://rapidshare.com/files/215029834/devcon-x64.zip
Reply With Quote
  #20  
Old 03-30-2009, 07:41 AM
smithjsmi smithjsmi is offline
Senior Member
 
Join Date: Dec 2008
Posts: 64
Default

above I tell for some companies higherly protected the application, and use full option of hasphl protection with code. MK 17 to 18 is good working with hasphl.

Last edited by smithjsmi : 09-26-2009 at 08:03 AM.
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.