Sentinel UltraPRO - Source Code - Need Help

Hello Forum,

I have been reverse engineering since I was 12 years older(16+ years), but this is my first experience with a Sentinel USB Device. I have went through most the tutorials I could find on the web and applied those to my situation. I attempted to upload my files but I am a new member I will send the links via PM or email. So this is what I have:

I have a copy of "X" software and I also have the red Sentinel UltraPRO USB Key that came with it. I have manually extracted the software from the installer, but cannot seem to figure out how to bypass the lock feature found in lockout.bas. I have disassembled the code in several ways, and have a working VB project source code for the application. Can someone please explain to me how this works? I have a dump of the drive made with PVA 3.3. I also ran dmp2mkey to get a registry key which I then modified according to a tutorial I found. I used this to run an emulator which failed. My strategy then changed and I went into the source code to figure out what to do next. I also tried to break the file with SSP2MK. I was able to break the WP but was not about to get the MP. What is an MP? I have attached the dump file and also attached the corresponding source code from the application which includes the lockout routine and registry routine. Any advice? I just need a little direction with this project. I will be glad to post all final results for educational purposes!

Sentinel UltraPro 57E30037
WP found: DC1ah (56346)
Key Info: 0002-A003
Dongle Type: 00000003


[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\MultiKey\Dumps\000057E3]
"Name"="Sentinel SuperPro 57E3"
"Copyright"="None"
"Created"="Mon Mar 30 03:09:16 2015"
"DongleType"=dword:00000003
"Type"=dword:00000000
"CellType"=hex:\
01,01,03,03,03,01,03,01,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,\
00,02,01,00,02,00,00,00,\
03,03,03,03,01,00,01,00,\
00,00,00,00,03,03,03,03,\
02,02,00,00,00,00,00,00
"sntMemory"=hex:\
37,00,E3,57,1A,DC,00,00,00,00,00,00,00,00,00,00,\
41,54,50,4D,20,41,41,42,20,59,41,4C,45,53,20,52,\
31,23,20,20,20,20,31,20,31,32,30,35,2D,35,B1,30,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,2A,E0,1E,EA,FA,C6,F5,D1,A6,26,A4,75,AB,04,\
00,00,00,00,00,00,00,00,0A,D8,2C,E8,57,C5,F7,EF,\
10,70,ED,A3,E2,19,AE,A5,00,00,00,00,00,00,00,00,\
60,29,EC,DD,EF,09,A1,E6,F2,C4,BE,28,5C,DD,63,F6

At first sight your WP is in wrong place in reg.
37,00, ; SN
E3,57, ; DevID
1A,DC, ; OWP1 <------------ wrong place
00,00, ; OWP2
00,00, ; WP <-------------- here WP
00,00, ;
00,00, ; C6 value
00,00,

Unsolved 4 algorithm cells - possible aes7 or something you do wrong. Better show your dump and/or usbtrace and/or setup files.

sir you are wonderful. Thank you for this input. I have been busy with some other projects, but I am back on this one. That gives me the knowledge I needed. Thanks! Ill post results when i'm done. Is there anything specific that I do not need to post? I feel this particular device I have is a little harder to crack then some of the others i have read about.