Author Topic: GW Instek USB license software database & reverse eng.  (Read 3197 times)

JuanPC

  • Newbie
  • *
  • Posts: 4
GW Instek USB license software database & reverse eng.
« on: November 12, 2013, 01:27:23 AM »
Hi,

as you may know... Instek has optional software for the GDS-3000 series Osilloscopes...
The DS3-PWR "Power Analysis Software"
& DS3-SBD "Serial Bus Decode Software"

each was $550usd. = $1100usd.

Now they are included Free with the purchase of a 2ch Scope, *some references only.
http://www.tequipment.net/Instek-Promotions.html



I have Both USB, and was interesting to look how Instek did the Copy Protection...

Each USB drive has a .lic file, and when the software is activated in the Scope, the file disappears, "is erased/eaten by the scope".
if the Software is deactivated/removed from the scope the .lic file, should appear again in the USB."havenīt tested that part, call me chicken"

before activating the optional software, i tried to activate a Cloned USB,
Cloned the original USBīs to another USB, with best Linux & Windows software,
data & partition was cloned exactly, but the Copy Protection still was working = the cloned USBīs didnīt worked when tried to activate the .lic file in the scope...

My guess:
Instek maked a single .txt file, renamed to .lic
PowerAnalysis.lic
SerialBus.lic

inside those .txt files is a code, similar to MD5 check sum.
that takes the Name & the Serial of the USB flash drive, and becomes a 16 long number.

[4861351196416222]
[24597971a1665171]

a 4GB Flash Drive formatted in FAT, just for a single 1KB text file.
the USB drive can be used to store Screen shots .png, and .csv files from the Osilloscope.

does not matter if i clone the USB partition/flash drive, the Name of the Vendor & the serial of the chip change.
making the .lic Code Useless.

Clonezilla allows to see those hidden values, i guess are used to make the .lic code.
since USBīs are now "free", would be nice to make a Database of the codes, to see if a pattern emerges.

for example,
Original:
4041MB_USB_Flash_Drive__ADATA_USB_Flash_Drive_2000000FBF59A8-0:0
Cloned:
8006MB_DataTraveler_108_Kingston_Datatraveler_108_00187D1174FeeB6080008F10-0

If the Name is different, makes the .lic codes useless.

To Decode at first, Same Brand & Size must be used.
when the code is decoded, any Brand & Size of USB drive could be used "in theory" to activate the scopes.

a database could help identify, what numbers are used to know if the USB is, Power or Serial,
could be the last number, or could be the name of the .lic file.

DS3-PWR
PowerAnalysis.lic
[4861351196416222]
4041MB_USB_Flash_Drive__ADATA_USB_Flash_Drive_2000000EB8A9B1-0:0
Code: [Select]
usb 8-5: new high-speed USB device number 4 using ehci-pci
usb 8-5: New USB device found, idVendor=125f, idProduct=c96a
usb 8-5: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 8-5: Product: ADATA USB Flash Drive
usb 8-5: Manufacturer: ADATA
usb 8-5: SerialNumber: 2000000EB8A9B1
usb-storage 8-5:1.0: USB Mass Storage device detected
scsi7 : usb-storage 8-5:1.0
scsi 7:0:0:0: Direct-Access     ADATA     USB Flash Drive   0.00  PQ: 0 ANSI: 2
sd 7:0:0:0: Attached scsi generic sg3 type 0
sd 7:0:0:0: [sdc] 7892992 512-byte logical blocks: (4.04 GB/3.76GiB)
sd 7:0:0:0: [sdc] Write Protect is off
sd 7:0:0:0: [sdc] Assuming drive cache: write through
sd 7:0:0:0: [sdc] Attached SCSI removable disk

DS3-SBD
SerialBus.lic
[24597971a1665171]
4041MB_USB_Flash_Drive__ADATA_USB_Flash_Drive_2000000FBF59A8-0:0
Code: [Select]
usb 8-5: new high-speed USB device number 5 using ehci-pci
usb 8-5: New USB device found, idVendor=125f, idProduct=c96a
usb 8-5: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 8-5: Product: ADATA USB Flash Drive
usb 8-5: Manufacturer: ADATA
usb 8-5: SerialNumber: 2000000FBF59A8
usb-storage 8-5:1.0: USB Mass Storage device detected
scsi8 : usb-storage 8-5:1.0
scsi 8:0:0:0: Direct-Access     ADATA     USB Flash Drive   0.00 PQ: 0 ANSI: 2
sd 8:0:0:0: Attached scsi generic sg3 type 0
sd 8:0:0:0: [sdc] 7892992 512-byte logical blocks: (4.04 GB/3.76GiB)
sd 8:0:0:0: [sdc] Write Protect is off
sd 8:0:0:0: [sdc] Assuming drive cache: write through
sd 8:0:0:0: [sdc] Attached SCSI removable disk
« Last Edit: November 19, 2013, 11:49:12 PM by JuanPC »