Dongle cracking: NetXRay 1.1.3

("A Very Easy Dongle Protection")

by +DataPimp

(02 November 1997)


Courtesy of fravia's page of reverse engineering

Well, +DataPimp has indeed "specialised" in CD-ROM protections, yet he has now started to work on this 'related' cracking subject! Well, you would not have thought that some 'so called' dongles just check THEIR OWN PRESENCE ON THE PORTS... would you? And yet, look here! An easy (yet important) further step!

				Cracking NetXRay 1.1.3
			   (A Very Easy Dongle Protection)

 				   by -= +DataPimp =-

	Yes dongles, there was only two dongle essays there and since
I contributed to the Cd-Check essays I would have to say that I wanted
to contribute this to project as well. I would have to say that this is 
my first dongle and I was able to defeat it's protection within a matter 
of about 1 or 2 minutes. This software is not freely downloadable, but 
you can -if you like- find it on the internet, it is the same exact 
version that was released by PWA. 

	OK, so you have the software, let's get going so we can run this 
software and see what it looks like. Ok, after you have installed the 
program go ahead and run it, you will see a msg box pop up with a message 
saying the 'protect key' was not found, and some other junk telling you 
to contact them etc. 
Ok, now we are not going to use Soft-Ice on this at all, we are 
going to decompile the "netxray.exe" file and view it's code. 
Once you have decompiled it, we are going to search for the string 
"sorry". You will notice that it is found rather quickly, and this 
is the code we find:

* Referenced by a Jump at Addresses:00401B33(U), :00401B3E(C)
|
:00401B51 85C0          test eax, eax   "Sorry! No protect key is found. "
                               ->"Please contact Cinco Networks,Inc "
                               ->"by phone (770) 671-9272, or by "
                               ->"Internet e-mail sales@cinco.com, "
                               ->"if you wish to purchase or upgrade "
                               ->"NetXRay. Otherwise, return the "
                               ->"complete package in the original "
                               ->"shipping box.  Thank you for your "
                               ->"interest in Cinco products."
                                  |
:00401B59 6878325500              push 00553278 
(c) +DataPimp 1997. All rights reversed



You are deep inside fravia's page of reverse engineering, choose your way out:

redBack to Project 3 ("Dongle protections")
redhomepage redlinks redanonymity +ORC redstudents' essays redacademy database
redtools redcocktails redantismut CGI-scripts redsearch_forms redmail_fravia
redIs reverse engineering legal?