View Full Version : Sentinel Ultra Pro cracking
marko
February 27th, 2007, 10:57
Hello,
I am kind of new at this so I would appreciate if you didn't rush me. I began the other days to study for making a crack for a soft that uses Sentinel Ultra Pro Dongle. I'm trying to change the exe file in order to remove the need of the dongle. What I have done so far is to dump the content of the dongle and I have disassembled the exe file with IDA Pro. I tried to look in the code for places where a cmp is done with the values from the cells of the dongle and I am trying to patch the jumps.
Any sugestions are welcomed as I have seen that some of you are gurus in cracking the "gay" dongle.
Later that evening....Edit:
After a closer look at the code I observed that the functions related to the dongle can be found in sx32w.dll. So the first idea of the post goes right to hell (and i'm sorry for the spam).
Has anyone of you tried and succeeded in patching that library (i guess it contains the API functions from sentinel) and make a software running only with that or one has to go deeper. By deeper I mean to patch somehow the sentinel driver
Thanks again for the understanding.
FoxB
February 27th, 2007, 23:29
Access to the dongle over sx32w.dll ?
May be it SuperPro?
marko
February 28th, 2007, 02:31
In fact on the dongle it is written "Rainbow SuperPro" , but when I pluged it in the usb for the first time Windows said "Sentinel UltraPro".
Any way is it possible to patch only the DLL (only the used functions form it) or I have to look inside the drivers too ?
FrankRizzo
March 1st, 2007, 20:53
I have no experience with the ULTRA Pro, but a long time ago I was working on a target that was just a sentinel pro. (The program sends it a string of characters, and it returns a 16-bit value). The target that I was working on was written in a high level language, so all the calls to the routines looked the same. (Byte wise). So, I searched the app, found all the instances of their calls, and the subsequent "CMP ax,GoodGuy" instructions, and made a table.
I then gutted the routine that talked to the dongle inside the .dll, and wrote a simple table lookup function that would search the table for the string, and return the proper bytes.
It might be that you could do the same thing here once you understand what the functions in the .dll do. Good luck!
Aimless
March 2nd, 2007, 02:31
Hi there,
You need not patch the drivers. Not necessary.
You need to check the *sproread and *sproquery functions and the _strcmp that they do. The _strcmp function is a home brewn routine, not the standard C one, the name is for easy identification.
Over and above these two functions which need to be emulated, the others are pretty much patch jumps and return 0 in eax variety.
Have Phun
marko
March 2nd, 2007, 10:38
thanks a lot for your valuable information.
I need to get the know-how now.

david_hi
March 20th, 2007, 00:23
hi 2 all
hi big bro i have faced same problem early have any solution?

marko
March 20th, 2007, 15:18
hi,
it is a super pro...my mistake
any way there are people on this forum who are willing to sell you a solution..not very expensive. it is not my case because i'm trying to either do it myself or to find someone who is willing to help me for free.
Woodmann
March 20th, 2007, 20:06
Howdy,
You send me a PM if there are people on MY forums trying to sell you shit.
Woodmann
jbarry315
March 20th, 2007, 20:15
Bravo, Woodmann...
Again and always, you have my deepest and utmost respect.
jb
SiGiNT
March 21st, 2007, 14:11
Quote:
[Originally Posted by marko;64504]hi,
it is a super pro...my mistake
any way there are people on this forum who are willing to sell you a solution..not very expensive. it is not my case because i'm trying to either do it myself or to find someone who is willing to help me for free. |
Woodmann,
I recommend waterboarding followed by battery cables to the private parts - give me some time to think I'll come up with a few original ideas of my own.
SiGiNT
marko
March 30th, 2007, 11:53
Thanks ,
I appreciate it.....NOOOOOOT

SiGiNT
March 30th, 2007, 15:22
Marko,
Not intended for you only intended for anybody trying to sell "cracks" on this board, highly unethical and strictly against the rules.
SiGiNT
marko
March 31st, 2007, 10:18
I am not trying to sell. I wish I had the solution but I don't.
marko
June 11th, 2007, 15:50
Done
I have the sx32w.dll file and it works fine with my software.
What I want to do next is to disassemble both dlls and search for differences.
My purpose is to learn. I have read here somewhere that there is a little software that does this comparison for me..I'll search it.
Thank you for the ones that really tried to help

and shame on those who tried to sell their solution.

dELTA
June 12th, 2007, 13:30
http://research.eeye.com/html/tools/RT20060801-1.html
But if an executable is simply binary patched (contrary to patched in the source and then recompiled), you normally don't need these big guns, simply binary-compare the two files with any decent hex editor and then look at the found offsets in a disassembler.
marko
June 12th, 2007, 14:48
this is the kind of tool I was looking for. Thanks. I have no clue how it works but I will rtfm. I will let you know of my progress.
marko
December 3rd, 2007, 17:02
Ok guys,
i changed my computer and now I have one that runs vista. I installed a virtual machine with usb support so that I will be able to follow this.
Big delay ...i know
pnluck
December 4th, 2007, 09:37
The ida signature of sentinel ultropro, can help

marko
December 13th, 2007, 18:24
hello,
As many of you know there is a general solution if one
has the sentinel super pro dongle. There is a commercial emulator on the loose

.
This thread ends here I guess.
thanks to PAPI
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.