Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > Reverse Code Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #1  
Old 02-19-2011, 04:41 AM
roseline roseline is offline
Member
 
Join Date: Feb 2010
Posts: 6
Default Expert advise need on Flexlm 11.6.1


Hi,
I have the target running on FlexNET Version 11.6.1.0 build 66138 i86_n3. I followed Git's manual (flexlm_7.x-11.4_seed_extraction.pdf) to extract seeds for this target using OllyDbg.

I set BPs in my target as :
0041EB1D |. FF90 24050000 CALL DWORD PTR DS:[EAX+524]
0041EC41 \. C3 RETN
004125E6 |. EB 09 JMP SHORT xxx_lmd.004125F1

After breaking at BP3, my job structure looks like ..
0012FA8C 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 g............... As per manual job structure should start with 00..

Don't know what's wrong in my procedure ??
Can some body help/guide me out ??

Thanks in advance.

I set BPs in my target as : (modified 3rd BP)
0041EB1D |. FF90 24050000 CALL DWORD PTR DS:[EAX+524]
0041EC41 \. C3 RETN
00420CB4 |. EB 09 JMP SHORT xxx_lmd.00420CBF

Finally I got my job structure as :

0012CF4C 04 00 00 00 70 1C E6 4E ...pN
0012CF54 9D F6 C6 7A 21 7D CD FF z!}
0012CF5C DB 19 3F 6F EF AD 43 A0 ?o*C*
0012CF64 F5 DF 7E 85 0A 00 08 00 ~…...
0012CF6C 00 00 31 30 2E 30 00 00 ..10.0..
0012CF74 34 AB C0 84 2A 37 3E E1 4„*7>
0012CF7C 00 00 00 00 04 00 00 00 .......
0012CF84 01 00 00 00 10 00 00 00 ......
0012CF8C 16 00 00 00 1F 00 00 00 ......
0012CF94 72 9F 4C B9 10 70 89 1B rŸLp‰
0012CF9C E7 45 B4 8A 1B 5B 94 7A EŠ[”z
0012CFA4 00 00 00 00 00 00 00 00 ........
0012CFAC 00 00 00 00 00 00 00 00 ........
0012CFB4 00 00 00 00 00 00 00 00 ........
0012CFBC 73 9F D1 37 B0 26 6B 51 sŸ7&kQ
0012CFC4 D4 54 91 1A A1 7D 71 70 T‘}qp
0012CFCC 4A 31 A0 66 07 28 00 00 J1*f(..
0012CFD4 00 00 00 00 00 00 00 00 ........
0012CFDC 00 00 00 00 00 00 00 00 ........

Can somebody confirm, whether these are correct , please ??

Last edited by roseline : 02-23-2011 at 12:21 PM. Reason: Progress :
Reply With Quote
  #2  
Old 02-19-2011, 06:53 AM
calvin calvin is offline
Senior Member
 
Join Date: Feb 2010
Posts: 50
Default

Can you upload the daemon?
Reply With Quote
  #3  
Old 02-23-2011, 09:37 AM
roseline roseline is offline
Member
 
Join Date: Feb 2010
Posts: 6
Default

Hi Calvin,
Can you confirm my points ? That would be very helpful.
Reply With Quote
  #4  
Old 02-24-2011, 07:03 AM
arlequim arlequim is offline
Member
 
Join Date: Feb 2009
Posts: 17
Default

[Please DO NOT quote whole messages, it is unnecessary]

Pls post a faked license and i will check out.

Last edited by Git : 02-24-2011 at 07:53 AM.
Reply With Quote
  #5  
Old 02-24-2011, 08:15 AM
roseline roseline is offline
Member
 
Join Date: Feb 2010
Posts: 6
Default

Thank you very much.

Dummy license I have used:
SERVER computer_name ANY
VENDOR xxx
USE_SERVER
INCREMENT test xxx 1 01-Jan-2019 1 0123456789AB

Replace xxx with vender_Name
Reply With Quote
  #6  
Old 02-28-2011, 04:33 PM
arlequim arlequim is offline
Member
 
Join Date: Feb 2009
Posts: 17
Default

if your seeds are correct, license look like this:
Code:
SERVER this_host ANY
VENDOR xxx
USE_SERVER
INCREMENT test xxx 1 01-Jan-2019 1 FE2BB7E13184
Regards
Reply With Quote
  #7  
Old 03-01-2011, 08:23 AM
roseline roseline is offline
Member
 
Join Date: Feb 2010
Posts: 6
Default

Hi Arlequim,
Thanks.

May be my seeds are not correct. I have pm you my seeds. Can you confirm whether they are correct or not ?

my license looks like this..


Edit:
I too got the same results. But don't know why I didn't get using Ollydbg.
I used old school method using W32Dasm (data (0), data (1) and job+0x08
job+0x0c, job+0x10.

Thanks anyway.

SERVER computer_name ANY
VENDOR xxx
USE_SERVER
INCREMENT test xxx 1 01-jan-2019 1 FE2BB7E13184

Last edited by roseline : 03-14-2011 at 09:51 AM. Reason: progress
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.