Flexlm ECC alternate patching methods

		Exetools > General > General Discussion
Flexlm ECC alternate patching methods

#11

05-04-2016, 04:08

u_f_o

Friend

Join Date: Feb 2005

Posts: 33

Rept. Given: 19

Rept. Rcvd 7 Times in 5 Posts

Thanks Given: 10

Thanks Rcvd at 12 Times in 9 Posts

Quote:

Originally Posted by toro

to find verification function simply search for push 21b.
...

this works only for 32-bit binaries.
more common way is to find constant 2930h.
it is contained only in l_pubkey_verify and l_prikey_sign.
l_prikey_sign does not contain constant 0FFFFFFF8h,
which occurs in l_pubkey_verify at least one time.

The Following User Gave Reputation+1 to u_f_o For This Useful Post:
synkro (06-29-2016)

The Following 3 Users Say Thank You to u_f_o For This Useful Post:
gemuz (03-03-2017), synkro (06-29-2016), tonyweb (04-17-2017)

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Harmony A library for patching, replacing and decorating .NET and Mono methods during	ahmadmansoor	Source Code	1	01-12-2024 15:06
Alternate Approach to FlexLM Brute-Force	Windoze	General Discussion	9	10-21-2020 19:23
Where are the Class methods?	5Alive	General Discussion	0	07-28-2005 03:22
Different Detection Methods	OHPen	General Discussion	0	10-21-2003 10:11

All times are GMT +8. The time now is 17:12.