JDSU VIAVI License key t-berd

[pateanatale]

Hello guys,
who help me to activate a jdsu/viavi license on T-berd MTS-8000? who know as to make?
contact me also privately thanks.

[pateanatale]

hello guys, i have extracted the ds2433 eeprom files but i cant disassemble them.
the results i get are worse than the original. who can help me please?

[pateanatale]

Hi guys,
maybe I understood where the uploaded licenses are.

EEprom with few license:
0F 01 32 31 31 35 32 34 36 31 2D 30 30 31 F3 0C 03 43 49 42 20 54 65 73 6C 61 72 09 02 30 30 36 06 DC 07 7C 07 07 1F 04 00 00 E8 0B 0A 0A 00 00 80 16 8A A0 35 50 0D 05 00 80 00 00 00 00 01 00 00 00 32 0F 0D 01 FF 00 00 00 00 00 00 00 00 00 00 90 83 10 52 4D 43 4B 30 30 36 32 30 32 30 35 34 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E2 83 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 F4 C1 04 06 86 65 0F 0C 00 00 FF FF FF FF FF FF FF FF FF FF E4 0F 0C 01 00 FF FF FF FF FF FF FF FF FF FF 8C FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

EEprom with More license:
0F 01 32 31 31 35 32 34 36 31 2D 30 30 31 F3 0C 03 43 49 42 20 54 65 73 6C 61 72 09 02 30 30 36 06 DC 07 7C 07 07 86 03 00 00 E0 0B 0A 0A 00 00 80 16 8A A0 2C 51 0D 05 0F 07 60 F6 01 00 05 00 00 00 A4 0F 0D 01 FF 00 00 00 00 00 00 00 00 00 00 90 83 10 52 4D 43 4B 30 30 36 32 30 32 30 35 33 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 83 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 69 5D 60 04 06 87 3B 0F 0C 00 00 FF FF FF FF FF FF FF FF FF FF E4 0F 0C 01 00 FF FF FF FF FF FF FF FF FF FF 8C FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

these should be the licenses. if i rewrite the code as shown in bold from "more licenses" to "few licenses" i acquire all the licenses, if i try to change any of these numbers in bold i lose all the licenses.
i would need to figure out how to add new licenses.
i need to identify the number of licenses and which licenses are active.

thanks

[TERRA Operative]

I thought I might be able to help with another EEPROM dump to look at, but we still use the old MTS-2000 model at work (which incidentally is as slow as a wet week to use.....)

[pateanatale]

Ciao, you can see the my EEPROM file, you can find in my second post. they could be similar.

[youmax]

Hi, have a jdsu t berd 2000 and i like dump eeprom, how to do?
thanks

[pateanatale]

you need to locate the eeprom, usually it's a DS2433.
you need an eeprom programmer, I use REVELPROG IS.
Dumping is easy, understanding how the licenses are written is difficult. I haven't figured it out yet.

[tv84]

maybe I understood where the uploaded licenses are.

You have to investigate where possible checksums/CRCs are. It's not only finding out where the option bitmask may reside.

Look at this comparison.

[pateanatale]

I know, with the help of AI we found two CRCs, a CRC8 and a CRC16 as described in the DS2433 eeprom datasheet.
CRC8 is between 0x000 and 0x01F, CRC16 is between 0x020 and 0x03F. The remaining bits I believe have an external checksum.
I have three types of dumps with different options enabled, lines from 0x000 to 0x01F and 0x160 to 0x17F are the same, the values ​​do not change.
the data between 0x020 to 0x3f and 0x040 to 0xfff are related, I tried to cross-reference the data but it does not work, I have to copy the entire eeprom to another.

[pateanatale]

the CRC8 is F3 in 0x00E in all file.
the CRC16 is 60 F6 in 0x03A and 0x03B

[tv84]

the CRC8 is F3 in 0x00E in all file.
the CRC16 is 60 F6 in 0x03A and 0x03B

Sorry but that doesn't make any sense. You don't have CRC in the middle of buffers being hashed (99% of the times). Also, positions 3A+3B are 00 in one of the files... Definitely not CRC.

Attach here the 3rd file that you have.

[pateanatale]

in the second file the crc was calculated in other positions, now I don't remember. I'm not familiar with hex or assembly, these calculations were done by AI.

[tv84]

in the second file the crc was calculated in other positions, now I don't remember. I'm not familiar with hex or assembly, these calculations were done by AI.

  That's not how it works.

[pateanatale]

he had calculated them according to the datasheet data, doing the counter test it worked, it gave correct result. now I'm trying to create a key gen from the firmware always with AI. but I don't understand anything, it's too complicated for me.