bandane2

Novell Netware 3.12 -- [Session - 2]
Studying the Licensed User Limits

by The Undertaker
(13 September 1997, slightly edited by fravia+)

Courtesy of Fravia's page of reverse engineering

Well, the Undertaker is tackling all alone a very interesting field... you may have already read his Session 1.
anybody would like/be able/find useful to give him a hand? This could be transformed in a full fledged +HCU's project if some other contributions do arrive...

                    Novell Netware 3.12 -- [Session - 2]
                     Studying the Licensed User Limits
                                   By
                         The Undertaker -=BANDA=-



As we all know, Novell Netware comes with different number of "user licenses"
like 25 User, 50 User, 100 User an so on. In this session we  will discuss
how to change those licensed users value. I hope my essays about netware
reverse engineering will be usful for netware users. 
These essays only avialable via FRAVIA'S PAGE OF REVERSE ENGINEERING. 
Ok Without BlaLBAlBLa, let's JMP to the reverse engineering Session.



----( reverse engineering SeSSion )----

I hope that everybody is familiar with the netware debugger. If not read my
session 1, it offers some hints and clues in order to learn how to use 
effectively the Netware Debbuger. I'll use as target my own version. 
I have 25 User on my Novell Netware version. 
So let's make it 50 User !!!

This study is based on the 25 User version of Netware. 
Get into the netware debugger by pressing :

<Left Shift> <Right Shift> <Alt> <Esc>

u GetMaximumNumberOfConnections         --> Case Sensitive.

XXXXXXXX B87D000000     MOV     EAX,0000007D
XXXXXXXX C3             RET


This Function passes the maximum number of connections available for the
users & Netware. Including NLI's (Not Logged In), Backup Users & etc..
Now convert 7D into decimal... is 125. Ok lets add 25 into 125 = 150(96h).
Let make changes now!..

c GetMaximumNumberOfConnections = B8 96 0 0 0 C3


We have finished part one. But we have to crack as well the number of 
remote work stations. Let do it now!!.

u GetMaxNumberOfRemoteConnections       --> This function returns the number
                                            of licensed users.

XXXXXXXX B819000000     MOV     EAX,00000019
XXXXXXXX C3             RET

Convert 19 into decimal = 25, AHAAA ! we got it. So This version only supports
25 remote work stations. HuH !! Let's Make the crack Right Now.. We can complete
the study by changing the functions to return 32h(50 User).


c GetMaxNumberOfRemoteConnections = B8 32 0 0 0 C3


Now you can test the function by loading NLICLEAR NLM.

LOAD NLICLEAR   

Once you loaded this NLM it shows "Monitoring 50 remote connections" message
on your screen. BRAVO!!!!


NOTE :
      All these modifications are resetted to the default once you 
get down the server & up it again. To overcome this problem we have 

           (((((((   Reverse Engineering Lives Forever    )))))))



  (C) 1997 The Undertaker -=BANDA=- All Rights Reserved.  // SRI LANKA //

You are deep inside fravia's page of reverse engineering, choose your way out:

is reverse engineering legal?

by The Undertaker (13 September 1997, slightly edited by fravia+)

by The Undertaker
(13 September 1997, slightly edited by fravia+)