Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > Reverse Code Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #1  
Old 09-20-2010, 11:43 AM
gnerogeem gnerogeem is offline
Senior Member
 
Join Date: Aug 2009
Location: Kalimdor
Posts: 553
Smile Need help with Hardlock dump.

I got a Hardlock dump with both reg and dat files.
With the dat file, by using hl_solver I manage to geet the seeds.
Using H224 nothing happen.
The problem here is I can't generate a vUSB reg file using UniDumpToReg.
Every time I load the dat file it says that the conversion is done but the reg file not appear.
I've already reads the topic related to this issue and got all the tools.
Note here that I want to use Multikey as the emulator.
Is there something wrong from the method or the dump file?
Here is some info for the dump,

Modad = 0x5FA7
Seed1=0x8CE9
Seed2=0x6559
Seed3=0xCD28

I'm sorry, but this is the first time I do a Hardlock emulation.
__________________
Pink is the new black.
Reply With Quote
  #2  
Old 09-20-2010, 11:45 AM
benito benito is offline
Senior Member
 
Join Date: Jul 2007
Posts: 685
Default

if you have solved algo the rest you can do by hand
Reply With Quote
  #3  
Old 09-20-2010, 11:51 AM
gnerogeem gnerogeem is offline
Senior Member
 
Join Date: Aug 2009
Location: Kalimdor
Posts: 553
Default

You mean I can modified the reg file generated with hl_dump to vUSB reg file format?
I've been reading that the dat file can be convert to reg using UniDumpToReg.
But when I load the dat file it's generate nothing.
__________________
Pink is the new black.
Reply With Quote
  #4  
Old 09-20-2010, 12:00 PM
benito benito is offline
Senior Member
 
Join Date: Jul 2007
Posts: 685
Default

1)yes, of course
2) doesnt matter if you have solved algo
Reply With Quote
  #5  
Old 09-20-2010, 12:09 PM
gnerogeem gnerogeem is offline
Senior Member
 
Join Date: Aug 2009
Location: Kalimdor
Posts: 553
Default

Oh okay then, below is my reg file from sporaw dump (half of it, without the "Code").

Code:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Emulator\Dumps\HardLock\00005FA7]
"Name"="Dump for 5FA7h (24487) dongle"
"Type"=dword:00000001
"ID"=dword:44C8D458
"Memory"=dword:00000001
"Created"="07.09.2010 14:17:06"
"Copyright"="(c) 2006 Sp0Raw (sp0raw@mail.ru), http://www.sporaw.ru/work/ / dumped using HL-DUMP v2.1"
"ACL"=hex:13,66,43,D3,56,9A,14,0D
"HCH"=hex:56,38,19,EF,8F,11,EF,44
"Data"=hex:49,44,3D,41,4F,2D,30,33,38,35,0D,0A,4D,4F,44,55,\
           4C,3D,32,34,34,38,37,0D,0A,20,0D,0A,0D,0A,2D,42,\
           69,6E,67,6F,33,30,5F,35,2E,30,0D,0A,0D,0A,0D,0A,\
           0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,\
           0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,\
           0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,\
           0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,\
           0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A,0D,0A
And this is the example from Multikey folder for Hardlock

Code:
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\MultiKey\Dumps\00007471]
"Name"="HARDLOCK (new) dump"
"Copyright"="None"
"Created"="1 Jul 2008"
"DongleType"=dword:00000002
"ID"=dword:12345678
"withMemory"=dword:00000001
"Seed1" =dword:0000B968
"Seed2" =dword:00001D9C
"Seed3" =dword:0000B0E5
"HlkMemory"=hex:\
    04,00,00,00,FF,FF,00,00,6E,6E,00,00,00,00,06,00,\
    00,00,00,00,00,00,75,07,DD,68,2A,8A,D6,F0,D8,0D,\
    06,00,D8,0D,28,00,00,00,00,00,0B,0A,38,43,46,0D,\
    01,00,FF,FF,01,00,FF,FF,01,00,FF,FF,01,00,FF,FF,\
    01,00,FF,FF,01,00,FF,FF,01,00,FF,FF,01,00,FF,FF,\
    01,00,FF,FF,01,00,FF,FF,01,00,FF,FF,01,00,FF,FF,\
    01,00,FF,FF,01,00,FF,FF,01,00,FF,FF,01,00,FF,FF,\
    01,00,FF,FF,01,00,FF,FF,01,00,FF,FF,01,00,FF,FF
So the "Data" at the top reg file can be can changed to "HlkMemory" ?
__________________
Pink is the new black.
Reply With Quote
  #6  
Old 09-20-2010, 12:10 PM
benito benito is offline
Senior Member
 
Join Date: Jul 2007
Posts: 685
Default

Definatelly yes
Just use mk example and fill it with "data"(it is memory) and solved algo and also you can add dongleid
The question is if the algo is calculated corectly

Last edited by benito : 09-20-2010 at 12:12 PM.
Reply With Quote
  #7  
Old 09-20-2010, 12:21 PM
gnerogeem gnerogeem is offline
Senior Member
 
Join Date: Aug 2009
Location: Kalimdor
Posts: 553
Default

Okay thanks benito. I will compile and test the reg file.
Another thing why does when I used H224 solver nothing happens?
It only says finished but nothing appear.
I'm using Windows 7 32bit.
__________________
Pink is the new black.
Reply With Quote
  #8  
Old 11-15-2010, 08:10 PM
caoll caoll is offline
Member
 
Join Date: Jul 2010
Posts: 10
Default

Hi!
I have the problem just like you have. After modify the .reg file,What happed. It works? I want hear form you.Many thanks.
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.