Welcome to the new Woodmann RCE Messageboards Regroupment
Please be patient while the rest of the site is restored.

To all Members of the old RCE Forums:
In order to log in, it will be necessary to reset your forum login password ("I forgot my password") using the original email address you registered with. You will be sent an email with a link to reset your password for that member account.

The old vBulletin forum was converted to phpBB format, requiring the passwords to be reset. If this is a problem for some because of a forgotten email address, please feel free to re-register with a new username. We are happy to welcome old and new members back to the forums! Thanks.

All new accounts are manually activated before you can post. Any questions can be PM'ed to Kayaker.

Removing Sentinel SuperPro from VFP application

All-in-one reversing related discussions
ner0
Junior Member
Posts: 13
Joined: Tue Feb 14, 2012 1:36 pm

Post by ner0 »

FoxB, thanks.
Coming back to the emulator issue... I notice that by using the emulator the hard limit is 1 whereas with the dongle the hard limit is 65535.
Is that the reason why the software fails to use other functions that use additional licences/processes?
I am unsure if there is a workaround with the emulator.

EDIT: Eventually I found a way to extend the hard limit which completely solves the emulation problem! :)

I'll leave here an example in case it helps somebody else.
Using a Multikey registry dump, here's what it looks like:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Multikey\Dumps\XXXX0000]
"sntMemory"=hex:\
YY,YY,XX,XX,00,00,00,00,00,00,FF,FF,00,00,00,00,\
00,00,00,00,00,00,A9,3C,4F,06,DA,03,9F,AB,C4,3D,\
F1,C2,49,56,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,AC,31,00,00,\
45,24,13,00,05,00,05,00,05,00,03,00,01,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,42,34,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"CellType"=hex:\
01,01,03,03,03,01,03,01,00,00,00,01,01,01,01,01,\
01,01,01,01,01,01,01,01,01,01,01,01,01,01,01,00,\
01,01,01,01,01,01,01,01,01,01,01,01,01,01,01,01,\
01,01,01,01,00,00,00,00,00,00,00,00,00,00,00,00
"Type"=dword:00000000
"DongleType"=dword:00000003
So, the XXXX or the XX,XX are both the DevID for the dongle and the YY,YY is the dongle serial.
What changes the hard limit is the FF,FF you see in positions/bytes 11 and 12, the first couple FF alone set the limit to 255 and the second couple FF alone set the limit to 65280, if both are set to FF, then the limit becomes the sum of the two: 65535

The first group of bytes are interpreted as a normal number from 0 to 255 (00 to FF), the second group is interpreted as a multiplication by 255 of whatever value is set. Or something along those lines anyway... :D

Hope it helps, and thanks again to FoxB!
User avatar
FoxB
Posts: 458
Joined: Thu Mar 21, 2002 7:20 am
Location: Earth
Contact:

Post by FoxB »

you are right - cell05 is hard limit

ps: if you want to safe your serial number/devid - delete your spoiler #10 ;)
ner0
Junior Member
Posts: 13
Joined: Tue Feb 14, 2012 1:36 pm

Post by ner0 »

FoxB wrote:you are right - cell05 is hard limit

ps: if you want to safe your serial number/devid - delete your spoiler #10 ;)
eheh thanks, but the link is dead since it wasn't useful to anyone else. ;)
rahulmks
Junior Member
Posts: 16
Joined: Fri Mar 05, 2021 12:56 am

Re: Removing Sentinel SuperPro from VFP application

Post by rahulmks »

i have emulator and its working
now want to remove the emulator from application and run without emulator
how to bypass sentinel superpro please help
i have scan with rdg its show Themida/Winlicense 2.x (Heuristic) and hardlock
Attachments
Capture.JPG
Capture.JPG (48.45 KiB) Viewed 403 times
User avatar
FoxB
Posts: 458
Joined: Thu Mar 21, 2002 7:20 am
Location: Earth
Contact:

Re: Removing Sentinel SuperPro from VFP application

Post by FoxB »

you need remove the Themida/Winlicense 2.x (Heuristic) and next make crack for the hardlock api
WaxfordSqueers
Senior Member
Posts: 1015
Joined: Tue Apr 06, 2004 11:00 am

Re: Removing Sentinel SuperPro from VFP application

Post by WaxfordSqueers »

ner0 wrote: Tue Jan 27, 2015 7:58 amI'm trying to find a way to follow an amazing tutorial, by Shub-Nigurrath, on how to remove Sentinel SuperPro from an app
The link you provided does not work for me, likely because its goes via Google, who are now acting like Internet Nazis. They have taken it upon themselves to censor anything they don't think you should see. So, if you can't find what you're looking for on Google, try another search engine like Dogpile.

I did a dogpile search for the Shub-Nigurrath tute and found it here:

http://docplayer.net/16691493-Removing- ... ion-1.html

Shub is an elite reverser and the tutorial is advanced, even though he has dumbed it down so others can follow. He is/was a member of ARTeam and I have seen him on our site occasionally. There are excellent points in the tute and you need to follow it very carefully to see what is going on.

You should also note the date of the tute which is 2006, if I remember correctly. The designers of the Sentinel protection have likely followed his tute as well and have taken steps to change their protection. Still, Shub gives a good idea of how dongles work by setting up a code table in which each code has a different meaning/usage.

Its worthwhile reading other ARTeam articles that you can search on dogpile with names like deroko arteam or shub-nigurrith arteam.
Post Reply