Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > Reverse Code Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #1  
Old 03-19-2011, 08:15 PM
borisxyz borisxyz is offline
Member
 
Join Date: Jan 2011
Posts: 28
Default date format for flexlm

Hello,

I have signature for the feature protected by flexlm. e.g.
6DEE14AB63183EF0BBBC. I noticed that 19th, 17th, 15th and 13th hex numbers (DE4B) are used to code the expiration date for the feature. Is it correct?

Does anyone know rules used to get those hex numbers. Say, If I want March 18, 2011 coded in the signature what 19,17,15,13 hex should be in the signature? Thanks
Reply With Quote
  #2  
Old 03-20-2011, 01:27 PM
BfoX BfoX is offline
Senior Member
 
Join Date: Aug 2007
Posts: 1,909
Send a message via ICQ to BfoX Send a message via MSN to BfoX Send a message via Yahoo to BfoX
Default

19th, 17th, 15th and 13th hex numbers (DE4B) are used to code the expiration date for the feature. Is it correct. for 20th digits v5.x code
__________________
... Either you work well or you work much ....
Reply With Quote
  #3  
Old 03-20-2011, 08:46 PM
borisxyz borisxyz is offline
Member
 
Join Date: Jan 2011
Posts: 28
Default

Bfox, thanks... Yes, my program uses v5.x code.

I noticed in the program that the real signature is compared with the calcualted signature bit by bit in _l_ckout_string_key() but before that happens the date part is stripped from the signature. So, to make the feature work i need to have all 20 Hex numbers in signature, looking at _l_ckout_string_key() I can get 16 hex numbers, how to get 4 remaining hex numbers coding the expiration date? Can you give some pointers? Thanks
Reply With Quote
  #4  
Old 03-21-2011, 05:32 AM
BfoX BfoX is offline
Senior Member
 
Join Date: Aug 2007
Posts: 1,909
Send a message via ICQ to BfoX Send a message via MSN to BfoX Send a message via Yahoo to BfoX
Default

@borisxyz: tell us your vendor daemon name
__________________
... Either you work well or you work much ....
Reply With Quote
  #5  
Old 03-21-2011, 11:01 PM
borisxyz borisxyz is offline
Member
 
Join Date: Jan 2011
Posts: 28
Default

Bfox: the deamon name is sldwks_d which is S..O...L.I..D...W.O...R.K.S

I have reversed this software, extracting the encryption seeds and generating the signatures for the features. At this point, I am just curious to understand how the signatures are generated in flexlm and compared with the feature signatures. That was the basis for my question regarding the expiration date.

Anyone please respond. Thanks

Last edited by Git : 03-22-2011 at 08:50 AM.
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.