Dongle cracking: NetXRay 1.1.3

("A Very Easy Dongle Protection")

by +DataPimp

(02 November 1997)


Courtesy of fravia's page of reverse engineering

Well, +DataPimp has indeed "specialised" in CD-ROM protections, yet he has now started to work on this 'related' cracking subject! Well, you would not have thought that some 'so called' dongles just check THEIR OWN PRESENCE ON THE PORTS... would you? And yet, look here! An easy (yet important) further step!


				Cracking NetXRay 1.1.3

			   (A Very Easy Dongle Protection)



 				   by -= +DataPimp =-



	Yes dongles, there was only two dongle essays there and since

I contributed to the Cd-Check essays I would have to say that I wanted

to contribute this to project as well. I would have to say that this is 

my first dongle and I was able to defeat it's protection within a matter 

of about 1 or 2 minutes. This software is not freely downloadable, but 

you can -if you like- find it on the internet, it is the same exact 

version that was released by PWA. 



	OK, so you have the software, let's get going so we can run this 

software and see what it looks like. Ok, after you have installed the 

program go ahead and run it, you will see a msg box pop up with a message 

saying the 'protect key' was not found, and some other junk telling you 

to contact them etc. 

Ok, now we are not going to use Soft-Ice on this at all, we are 

going to decompile the "netxray.exe" file and view it's code. 

Once you have decompiled it, we are going to search for the string 

"sorry". You will notice that it is found rather quickly, and this 

is the code we find:



* Referenced by a Jump at Addresses:00401B33(U), :00401B3E(C)

|

:00401B51 85C0          test eax, eax   "Sorry! No protect key is found. "

                               ->"Please contact Cinco Networks,Inc "

                               ->"by phone (770) 671-9272, or by "

                               ->"Internet e-mail sales@cinco.com, "

                               ->"if you wish to purchase or upgrade "

                               ->"NetXRay. Otherwise, return the "

                               ->"complete package in the original "

                               ->"shipping box.  Thank you for your "

                               ->"interest in Cinco products."

                                  |

:00401B59 6878325500              push 00553278 

(c) +DataPimp 1997. All rights reversed






You are deep inside fravia's page of reverse engineering, choose your way out:

redBack to Project 3 ("Dongle protections")
redhomepage redlinks redanonymity +ORC redstudents' essays redacademy database
redtools redcocktails redantismut CGI-scripts redsearch_forms redmail_fravia
redIs reverse engineering legal?