Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #16  
Old 04-21-2015, 07:58
rcer rcer is offline
Friend
 
Join Date: Dec 2008
Posts: 171
Rept. Given: 5
Rept. Rcvd 9 Times in 8 Posts
Thanks Given: 6
Thanks Rcvd at 30 Times in 22 Posts
rcer Reputation: 9
Ketan,

Thanks for this usefull info, but this target is .NET, and only the flexlm routines are machine code, and I don't have a clue how to debug NET.
Reply With Quote
  #17  
Old 04-21-2015, 17:37
Git's Avatar
Git Git is offline
Old Git
 
Join Date: Mar 2002
Location: Torino
Posts: 1,116
Rept. Given: 220
Rept. Rcvd 265 Times in 157 Posts
Thanks Given: 110
Thanks Rcvd at 220 Times in 126 Posts
Git Reputation: 200-299 Git Reputation: 200-299 Git Reputation: 200-299
.NET program will often call FlexLM functions in an ordinary DLL.

Git
Reply With Quote
  #18  
Old 04-21-2015, 17:53
N0P's Avatar
N0P N0P is offline
Friend
 
Join Date: Aug 2003
Location: [CPU]
Posts: 100
Rept. Given: 19
Rept. Rcvd 13 Times in 12 Posts
Thanks Given: 16
Thanks Rcvd at 58 Times in 23 Posts
N0P Reputation: 13
Quote:
Originally Posted by rcer View Post
Ketan,

Thanks for this usefull info, but this target is .NET, and only the flexlm routines are machine code, and I don't have a clue how to debug NET.
use visual studio + reflector plugin
Reply With Quote
  #19  
Old 04-21-2015, 19:30
uranus64 uranus64 is offline
VIP
 
Join Date: Mar 2011
Location: EE
Posts: 323
Rept. Given: 606
Rept. Rcvd 464 Times in 141 Posts
Thanks Given: 667
Thanks Rcvd at 262 Times in 90 Posts
uranus64 Reputation: 400-499 uranus64 Reputation: 400-499 uranus64 Reputation: 400-499 uranus64 Reputation: 400-499 uranus64 Reputation: 400-499
Also this tool is interesting for .NET "spy".
Reply With Quote
The Following User Says Thank You to uranus64 For This Useful Post:
darsy (04-22-2015)
  #20  
Old 04-21-2015, 21:27
rcer rcer is offline
Friend
 
Join Date: Dec 2008
Posts: 171
Rept. Given: 5
Rept. Rcvd 9 Times in 8 Posts
Thanks Given: 6
Thanks Rcvd at 30 Times in 22 Posts
rcer Reputation: 9
Git,

This is also the case with this target, but I don't have a clue how to debug a NET executable with VS & reflector
Reply With Quote
  #21  
Old 04-22-2015, 07:11
ketan ketan is offline
Friend
 
Join Date: Mar 2005
Posts: 157
Rept. Given: 0
Rept. Rcvd 19 Times in 10 Posts
Thanks Given: 8
Thanks Rcvd at 150 Times in 75 Posts
ketan Reputation: 19
I'm pretty much sure flexnet api is either in the same binary PE section or in external dll.

Very simple way to get it debugged is patch any api call found (lc_new_job e.g) to int 3 and let system debugger catch it.

@nikkapedd - made my 1st flex target almost 20yrs ago, thanks you for insights though :-)
Reply With Quote
The Following 2 Users Say Thank You to ketan For This Useful Post:
Mpower04 (11-24-2015), zeytunak (04-22-2015)
  #22  
Old 04-22-2015, 16:43
Git's Avatar
Git Git is offline
Old Git
 
Join Date: Mar 2002
Location: Torino
Posts: 1,116
Rept. Given: 220
Rept. Rcvd 265 Times in 157 Posts
Thanks Given: 110
Thanks Rcvd at 220 Times in 126 Posts
Git Reputation: 200-299 Git Reputation: 200-299 Git Reputation: 200-299
I am suggesting you debug the DLL if it is as I think. You could even debug both .NET program and normal DLL at the same time using reflector for the .NET and IDA for the DLL.

Git
Reply With Quote
  #23  
Old 04-23-2015, 08:42
rcer rcer is offline
Friend
 
Join Date: Dec 2008
Posts: 171
Rept. Given: 5
Rept. Rcvd 9 Times in 8 Posts
Thanks Given: 6
Thanks Rcvd at 30 Times in 22 Posts
rcer Reputation: 9
O.K. Looks like I will have to learn NET, and how to use reflector for debugging

Does anybody have a good tutorial about debugging an executable with refector?

rgds
Reply With Quote
  #24  
Old 04-23-2015, 16:47
wilson bibe wilson bibe is offline
VIP
 
Join Date: Nov 2012
Posts: 506
Rept. Given: 493
Rept. Rcvd 439 Times in 180 Posts
Thanks Given: 1,166
Thanks Rcvd at 179 Times in 114 Posts
wilson bibe Reputation: 400-499 wilson bibe Reputation: 400-499 wilson bibe Reputation: 400-499 wilson bibe Reputation: 400-499 wilson bibe Reputation: 400-499
Reflector is not the right tool to debug an net assembly, you can try the Dile or IlSpy to do this.
Reply With Quote
The Following 3 Users Say Thank You to wilson bibe For This Useful Post:
alekine322 (05-12-2015), Dreamer (04-24-2015), JackD (06-21-2015)
  #25  
Old 06-26-2015, 21:23
nathan nathan is offline
Friend
 
Join Date: Jul 2009
Posts: 37
Rept. Given: 4
Rept. Rcvd 5 Times in 4 Posts
Thanks Given: 17
Thanks Rcvd at 27 Times in 17 Posts
nathan Reputation: 5
May be a stupid question: do you have a sample valid license file ? My guess is that you a re missing one of those strings that may be forced to be mandatory (NOTICE=, VENDOR_STRING=, ert ...)
Reply With Quote
  #26  
Old 11-24-2015, 15:49
Mpower04 Mpower04 is offline
Friend
 
Join Date: Dec 2013
Posts: 19
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 6
Thanks Rcvd at 2 Times in 2 Posts
Mpower04 Reputation: 1
Tracing .NET

Rcer-
Take a look at this post for debugging with .NET. I saw your post and reminded me of myself a few years back...

http://forum.exetools.com/showthread.php?t=8459
Reply With Quote
  #27  
Old 12-17-2015, 17:14
obfuscator obfuscator is offline
Friend
 
Join Date: Jun 2014
Posts: 29
Rept. Given: 25
Rept. Rcvd 7 Times in 1 Post
Thanks Given: 3
Thanks Rcvd at 2 Times in 2 Posts
obfuscator Reputation: 7
is there any unpacker for flexnet packed exe ? or have to manually unpack the target
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Asprotect 2.1x SKE target taos General Discussion 2 12-12-2005 17:04


All times are GMT +8. The time now is 21:17.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )