View Single Post
  #1  
Old 09-26-2014, 16:12
iconstart iconstart is offline
Friend
 
Join Date: Mar 2013
Posts: 21
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 10
Thanks Rcvd at 11 Times in 9 Posts
iconstart Reputation: 1
flexlm 10.8 linux 64 daemon need help

Hi all,
I have a daemon encrypt with flexlm v10.8
by search 6f7330b8 fand the _l_sg I guess
and I want get seeds @.text:0000000000464CE7 call rax

but it jmped @ .text:0000000000464C8C jz short loc_464CEE

my args is -t localhost 10.8 –c license.dat


My question is
Why did it jmp @ .text:0000000000464C8C jz short loc_464CEE
What can I do to avoid it and let it run to 0000000000464CE7 call rax


deamon and lic are uploaded



.text:0000000000464C42 push rbp
.text:0000000000464C43 mov rbp, rsp
.text:0000000000464C46 sub rsp, 70h
.text:0000000000464C4A mov [rbp+var_8], rdi
.text:0000000000464C4E mov [rbp+var_10], rsi
.text:0000000000464C52 mov [rbp+var_18], rdx
.text:0000000000464C56 mov [rbp+var_50], 0
.text:0000000000464C5D mov [rbp+var_58], 6F7330B8h
.text:0000000000464C65 mov [rbp+var_60], 0
.text:0000000000464C6D mov [rbp+var_68], 0
.text:0000000000464C75 mov [rbp+var_6C], 3
.text:0000000000464C7C mov rdi, [rbp+var_8]
.text:0000000000464C80 mov esi, 1000h
.text:0000000000464C85 call sub_47B023
.text:0000000000464C8A test eax, eax
.text:0000000000464C8C jz short loc_464CEE
.text:0000000000464C8E mov rax, [rbp+var_8]
.text:0000000000464C92 mov rax, [rax+288h]
.text:0000000000464C99 mov rax, [rax+1E08h]
.text:0000000000464CA0 cmp qword ptr [rax+5C0h], 0
.text:0000000000464CA8 jz short loc_464CEE
.text:0000000000464CAA mov rax, [rbp+var_8]
.text:0000000000464CAE mov rax, [rax+288h]
.text:0000000000464CB5 mov rdx, [rax+1E08h]
.text:0000000000464CBC mov rcx, [rbp+var_18]
.text:0000000000464CC0 mov rsi, [rbp+var_10]
.text:0000000000464CC4 mov rax, [rbp+var_8]
.text:0000000000464CC8 mov rax, [rax+288h]
.text:0000000000464CCF mov rdi, [rax+1E08h]
.text:0000000000464CD6 add rdi, 5C8h
.text:0000000000464CDD mov rax, [rdx+5C0h]
.text:0000000000464CE4 mov rdx, rcx
.text:0000000000464CE7 call rax
.text:0000000000464CE9 jmp locret_464E3C






help please

thanks
Attached Files
File Type: zip seqld.zip (357.8 KB, 21 views)
Reply With Quote