首页
社区
课程
招聘
[求助]Help with flexlm 11.12 elf x86
发表于: 2015-8-3 21:58 18437

[求助]Help with flexlm 11.12 elf x86

2015-8-3 21:58
18437
I have tried to dcc-patch this one. I have yet to succeed. Help is needed or some pointers of what to do....Can't even find l_pubkey_verify. I do not think it uses RSA since there is no public key in it.

https://www.sendspace.com/file/9sxf2f

[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课

收藏
免费 0
支持
分享
最新回复 (6)
雪    币: 133
活跃值: (12)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
2
Really need some help or hints for this. I got stuck totally.
2015-8-7 06:03
0
雪    币: 200
活跃值: (15)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
l_pub_key_verify

.text:080D17C8                 push    ebp
.text:080D17C9                 mov     ebp, esp
.text:080D17CB                 push    edi
.text:080D17CC                 push    esi
.text:080D17CD                 push    ebx
.text:080D17CE                 sub     esp, 0FCh
.text:080D17D4                 mov     [ebp+var_30], 0
.text:080D17DB                 mov     eax, [ebp+arg_0]
.text:080D17DE                 mov     eax, [eax+1B4h]
.text:080D17E4                 mov     eax, [eax+1ADCh]
.text:080D17EA                 mov     eax, [eax+560h]
.text:080D17F0                 test    eax, eax
.text:080D17F2                 jz      short loc_80D1811
.text:080D17F4                 mov     eax, [ebp+arg_0]
.text:080D17F7                 mov     eax, [eax+1B4h]
.text:080D17FD                 mov     eax, [eax+1ADCh]
.text:080D1803                 mov     eax, [eax+560h]
.text:080D1809                 mov     [ebp+var_F4], eax
.text:080D180F                 jmp     short loc_80D181A
2015-8-20 07:50
0
雪    币: 133
活跃值: (12)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
4
Patched it like this but didn't work. It says "inconsistent authentication code"...
Tried it like this:

.text:080D17F0                 xor    eax, eax           

and like this

.text:080D17F0                 inc    eax
.text:080D17F1                 nop
2015-8-24 06:11
0
雪    币: 1436
活跃值: (3901)
能力值: ( LV3,RANK:30 )
在线值:
发帖
回帖
粉丝
5
try replace pubkey.
this is pubkey:
CITRIX
0017315C: 46
00173764: 28
001732FC: 33
001730CC: C5
001736A0: 32
00173464: 63
00173588: D6
0017378C: 21
001736B8: B8
001736C0: 4A
0017390C: 5E
001739D4: 52
00173578: 13
001739FC: CA
001731D0: BA
00173134: DB
00173454: 03
0017306C: 40
0017394C: 6F
001738D8: 74
0017331C: 89
00173904: 79
0017366C: 11
001735A4: B5
001737A0: 7C
001733C8: 1C
00173564: DF
0017385C: 58
001731C0: A4
0017384C: F3
001738A8: 2C
2015-9-1 10:53
0
雪    币: 133
活跃值: (12)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
6
Just replace it with NOPs ?

Is there any reason why the normal dcc patch doesn't seem to work? Anything different on ELF32 binary?
2015-9-4 01:42
0
雪    币: 133
活跃值: (12)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
7
Do not really know how to replace the pub key. Tried with NOPs and the well known rent.
Any advice?

Thins is I can find the key in the windows exe and replace with success but not on this ELF / freebsd binary.
2015-10-8 04:22
0
游客
登录 | 注册 方可回帖
返回
//